last executing test programs: 3.599984567s ago: executing program 0 (id=4017): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.465928365s ago: executing program 3 (id=4018): r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000005c0), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x7, 0x3a, '#)@\x03\xe1~G\xe0,\x15[\x14\x93\x19Z\xce~\xa2\x1ax\xc7\xfe\x1b\xc0\xa0%\x90#I\x1d\xb7m\xfe\xce\xccv\xf8L\x97\x12I\x820[N_\xd5B\xf5.\x80\xb4S$\x83[`\x87_\xe4\xbeb\xa8\xa0\xbc\xd8\xadndk\x8e0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 1.738887809s ago: executing program 1 (id=4029): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x2, 0x0, &(0x7f0000000040)) 1.708904649s ago: executing program 0 (id=4030): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xccf3, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x55}) io_uring_enter(r6, 0x47f6, 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007080c000a0004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0xffc2}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client}, {@version_u}]}}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f00000000c0)) 1.683183175s ago: executing program 4 (id=4031): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x7c8) process_mrelease(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x64}}, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdff9, 0x800}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) mknod$loop(0x0, 0x80, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x10001, 0x0, 0x8040000000000000}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.664167965s ago: executing program 3 (id=4032): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.488218606s ago: executing program 1 (id=4033): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x80}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x44}}, 0x0) 1.238896459s ago: executing program 3 (id=4034): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioprio_set$uid(0x3, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x974b, 0x8, 0x2, 0xffdffffa}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.173876517s ago: executing program 0 (id=4035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="d40000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b0001006772657461700000340002800500170000000000080004000700000006000300ff0000000500170000000000060002000c00000006000e0000000000050011007f0000000a0001"], 0xd4}}, 0x0) 1.163581901s ago: executing program 2 (id=4036): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r1, 0x0, 0x0) 968.793183ms ago: executing program 2 (id=4037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x10020, 0x0, 0x0) shutdown(r0, 0x1) 951.12791ms ago: executing program 1 (id=4038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 936.280781ms ago: executing program 0 (id=4039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) 687.634797ms ago: executing program 0 (id=4040): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0xc) setsockopt$inet6_int(r0, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x20}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 657.876855ms ago: executing program 1 (id=4041): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x100, 0x141141) r1 = dup(r0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0, 0x100}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 611.393547ms ago: executing program 2 (id=4042): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 500.22502ms ago: executing program 4 (id=4043): request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*\x00', 0x0) r0 = openat$audio(0xffffff9c, &(0x7f0000000180), 0x418080, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000400)) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'xfrm0\x00', @local}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0x541b, 0x0) r3 = timerfd_create(0x8, 0x80800) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{}, {r4, r5+60000000}}, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in6=@private2}}, {{@in=@dev}}}, &(0x7f00000003c0)=0xe4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x6c}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast2, 0x4e20, 0x3, 'none\x00', 0x0, 0x60000000, 0xc}, {@loopback, 0x4e21, 0x2, 0x8f, 0xe1b2, 0x1000}}, 0x44) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000640)={0x37, {0x40, 0x4, 0xfff, 0xfdfd, 0x10000, 0x9}}) 429.871332ms ago: executing program 1 (id=4044): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 370.74787ms ago: executing program 2 (id=4045): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 262.541127ms ago: executing program 4 (id=4046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000004c0)) 254.095867ms ago: executing program 2 (id=4047): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r1, 0x0, 0x0) 93.837937ms ago: executing program 2 (id=4048): r0 = socket(0x1e, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x8, 0x80, 0x101, 0x3, {{0x24, 0x4, 0x3, 0x6, 0x90, 0x68, 0x0, 0x40, 0x6, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x1f, 0x9f, [@empty, @multicast2, @broadcast, @private=0x6, @broadcast, @local, @local]}, @ssrr={0x89, 0x7, 0xb6, [@local]}, @ssrr={0x89, 0x3, 0x6f}, @generic={0x86, 0x12, "11e73474a12180444461695a90d2c8a5"}, @lsrr={0x83, 0x27, 0xe9, [@local, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, @local, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @private=0xa010102, @broadcast]}, @lsrr={0x83, 0xb, 0xd5, [@private=0xa010120, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @ssrr={0x89, 0xb, 0x68, [@multicast2, @remote]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@getqdisc={0x28, 0x26, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9cc50e7b58bfe742, 0xfff4}, {0xffff, 0xb}, {0x0, 0xffe0}}, [{0x4}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xaf) socket$netlink(0x10, 0x3, 0x6) mkdir(&(0x7f0000000280)='./file0\x00', 0x100) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') 76.541534ms ago: executing program 3 (id=4049): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="d40000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b0001006772657461700000340002800500170000000000080004000700000006000300ff0000000500170000000000060002000c00000006000e0000000000050011007f0000000a0001"], 0xd4}}, 0x0) 33.589977ms ago: executing program 4 (id=4050): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'ext4\x00'}, {0x20, 'ext4\x00'}], 0xa, "de96131aeab51d06f93b8a1f61984019e8f1d71b860f7f30074f7862ef5c818d4edef34868d103a1e64b1f0bafcfab93f077ddec2310a74fe0b9ba0cfa83ceaef1a0f9c46fb41fa3190b04a89c1a22f1bae057c302580b79c2ff5f4ba6b0c940d52c53df8f1c67d1a2780db1"}, 0x83) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x4d, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x81) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) 0s ago: executing program 1 (id=4051): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) kernel console output (not intermixed with test programs): v option [ 429.615060][T13566] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.625006][T13575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.720021][T13574] lo speed is unknown, defaulting to 1000 [ 429.721979][T13574] »»»»»» speed is unknown, defaulting to 1000 [ 429.818603][T13566] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.969542][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.070322][T13566] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.149797][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.181582][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.468497][T13566] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.625130][T13566] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.732198][T13566] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.772449][ T7727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.805787][ T7727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.880626][T13566] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.818012][ T5887] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 432.047731][ T5887] usb 4-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 432.082801][T13636] loop1: detected capacity change from 0 to 512 [ 432.085895][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.115982][ T5887] usb 4-1: Product: syz [ 432.120199][ T5887] usb 4-1: Manufacturer: syz [ 432.124842][ T5887] usb 4-1: SerialNumber: syz [ 432.181908][T13636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.189665][ T5887] usb 4-1: config 0 descriptor?? [ 432.202097][T13636] ext4 filesystem being mounted at /563/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 432.282728][ T5887] gspca_main: touptek-2.14.0 probing 0547:6801 [ 432.358141][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 432.358160][ T29] audit: type=1800 audit(2000000072.029:3477): pid=13636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3069" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 432.463425][ T5887] usb 4-1: USB disconnect, device number 2 [ 432.545580][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.660700][T13643] loop1: detected capacity change from 0 to 1024 [ 432.706742][T13643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.883565][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 432.917563][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.927777][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 432.936825][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.947464][ T5144] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 432.955405][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.042704][T13647] lo speed is unknown, defaulting to 1000 [ 433.559902][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.759682][T13668] loop4: detected capacity change from 0 to 2048 [ 433.793181][T13672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3079'. [ 433.808404][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3080'. [ 433.877522][T13668] loop4: p3 < > p4 < > [ 433.894369][T13668] loop4: partition table partially beyond EOD, truncated [ 433.920182][T13668] loop4: p3 start 4284289 is beyond EOD, truncated [ 434.209014][T13647] lo speed is unknown, defaulting to 1000 [ 434.244028][T13647] »»»»»» speed is unknown, defaulting to 1000 [ 434.264602][T13660] siw: device registration error -23 [ 434.290308][T13666] lo speed is unknown, defaulting to 1000 [ 434.655623][ T3496] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.039544][T13647] chnl_net:caif_netlink_parms(): no params data found [ 435.046338][ T5847] Bluetooth: hci0: command tx timeout [ 435.364087][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'. [ 435.381694][T13709] geneve0: entered allmulticast mode [ 435.414730][T13647] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.422641][T13647] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.436198][T13647] bridge_slave_0: entered allmulticast mode [ 435.454391][T13647] bridge_slave_0: entered promiscuous mode [ 435.473802][T13666] lo speed is unknown, defaulting to 1000 [ 435.478534][T13647] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.506130][T13647] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.513453][T13647] bridge_slave_1: entered allmulticast mode [ 435.543694][T13647] bridge_slave_1: entered promiscuous mode [ 435.603902][T13666] »»»»»» speed is unknown, defaulting to 1000 [ 435.678426][T13647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.761838][T13647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.932230][ T3496] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.201927][ T3496] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.280248][T13647] team0: Port device team_slave_0 added [ 436.297851][T13730] loop0: detected capacity change from 0 to 512 [ 436.326609][T13647] team0: Port device team_slave_1 added [ 436.377465][T13730] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 436.380887][T13734] bridge_slave_0: left allmulticast mode [ 436.408768][T13730] EXT4-fs (loop0): orphan cleanup on readonly fs [ 436.433882][T13730] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 436.461971][T13734] bridge_slave_0: left promiscuous mode [ 436.474105][T13730] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 436.502600][T13730] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 436.512856][T13734] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.557337][T13730] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3100: bg 0: block 40: padding at end of block bitmap is not set [ 436.602275][T13730] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 436.626759][T13734] bridge_slave_1: left allmulticast mode [ 436.645785][T13734] bridge_slave_1: left promiscuous mode [ 436.651632][T13734] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.671779][T13730] EXT4-fs (loop0): 1 truncate cleaned up [ 436.694145][T13730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 436.797840][T13734] bond0: (slave bond_slave_0): Releasing backup interface [ 436.806967][T13730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.843409][T13734] bond0: (slave bond_slave_1): Releasing backup interface [ 436.884597][T13734] team0: Failed to send options change via netlink (err -105) [ 436.905465][T13734] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 436.929985][T13734] team0: Port device team_slave_0 removed [ 437.013791][T13734] team0: Failed to send options change via netlink (err -105) [ 437.028254][T13734] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 437.058301][T13734] team0: Port device team_slave_1 removed [ 437.065175][T13734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.073618][T13734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.083932][T13734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.115890][T13734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.128057][ T5847] Bluetooth: hci0: command tx timeout [ 437.236509][T13734] bond1: (slave batadv3): Releasing backup interface [ 437.331734][T13734] bond2: (slave batadv4): Releasing backup interface [ 437.358168][T13734] bond3: (slave batadv5): Releasing backup interface [ 437.394258][ T3496] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.471906][T13735] team0: Mode changed to "loadbalance" [ 437.539893][T13745] lo speed is unknown, defaulting to 1000 [ 437.718279][T13746] loop0: detected capacity change from 0 to 1024 [ 437.807816][T13746] EXT4-fs: Ignoring removed orlov option [ 437.907868][T13746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.944564][T13647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.952208][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.986366][T13647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.073408][T13759] loop3: detected capacity change from 0 to 1024 [ 438.081704][T13759] EXT4-fs: Ignoring removed orlov option [ 438.091734][T13759] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 438.113609][T13647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.136290][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.137560][T13759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.176579][T13647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.358562][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.443471][T13647] hsr_slave_0: entered promiscuous mode [ 438.464360][T13647] hsr_slave_1: entered promiscuous mode [ 438.489715][T13647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.508042][T13647] Cannot create hsr debugfs directory [ 438.962754][T13768] loop4: detected capacity change from 0 to 128 [ 438.989359][T13768] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 439.025372][T13768] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 439.042534][T13770] loop3: detected capacity change from 0 to 128 [ 439.051115][T13768] FAT-fs (loop4): Filesystem has been set read-only [ 439.051150][T13768] syz.4.3111: attempt to access beyond end of device [ 439.051150][T13768] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 439.051821][T13768] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 439.051847][T13768] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 439.052381][T13768] syz.4.3111: attempt to access beyond end of device [ 439.052381][T13768] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 439.095918][ T29] audit: type=1800 audit(2000000078.739:3478): pid=13768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3111" name="file2" dev="loop4" ino=47 res=0 errno=0 [ 439.206296][ T5847] Bluetooth: hci0: command tx timeout [ 439.711884][T13778] 9pnet: Could not find request transport: xen [ 440.221231][ T3496] bond0 (unregistering): Released all slaves [ 440.338402][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.567280][ T3496] bond1 (unregistering): Released all slaves [ 440.972525][ T3496] bond2 (unregistering): Released all slaves [ 441.241493][ T3496] bond3 (unregistering): Released all slaves [ 441.295965][ T5847] Bluetooth: hci0: command tx timeout [ 441.508725][ T3496] bond4 (unregistering): Released all slaves [ 441.691089][ T3496] bond5 (unregistering): Released all slaves [ 441.885205][ T3496] bond6 (unregistering): Released all slaves [ 442.155900][ T3496] bond7 (unregistering): Released all slaves [ 442.363762][ T3496] bond8 (unregistering): Released all slaves [ 442.568754][ T3496] bond9 (unregistering): Released all slaves [ 442.594882][T13745] lo speed is unknown, defaulting to 1000 [ 442.605576][T13783] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.663694][T13745] »»»»»» speed is unknown, defaulting to 1000 [ 442.687262][T13754] siw: device registration error -23 [ 442.777429][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3121'. [ 442.872624][T13783] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.932910][ T3496] tipc: Disabling bearer [ 442.964979][ T3496] tipc: Left network mode [ 443.076531][T13783] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.306073][ T29] audit: type=1326 audit(2000000082.979:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.4.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 443.343371][ T29] audit: type=1326 audit(2000000082.979:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.4.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 443.404046][T13783] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.423772][ T29] audit: type=1326 audit(2000000082.979:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.4.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 443.449790][ T29] audit: type=1326 audit(2000000082.979:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.4.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 443.474981][ T29] audit: type=1326 audit(2000000082.979:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.4.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 443.636803][ T5888] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 443.798958][T13783] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.840803][ T5888] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 443.856377][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.880433][ T5888] usb 2-1: Product: syz [ 443.890026][ T5888] usb 2-1: Manufacturer: syz [ 443.907035][ T5888] usb 2-1: SerialNumber: syz [ 443.958087][ T5888] usb 2-1: config 0 descriptor?? [ 443.977849][T13783] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.042751][ T5888] gspca_main: touptek-2.14.0 probing 0547:6801 [ 444.099418][T13783] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.208226][ T5888] usb 2-1: USB disconnect, device number 6 [ 444.341641][T13783] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.530484][ T29] audit: type=1326 audit(2000000084.209:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 444.576197][T13814] loop4: detected capacity change from 0 to 128 [ 444.611268][ T29] audit: type=1326 audit(2000000084.209:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 444.715787][ T29] audit: type=1326 audit(2000000084.209:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 444.768500][T13818] syz.4.3129: attempt to access beyond end of device [ 444.768500][T13818] loop4: rw=2049, sector=145, nr_sectors = 216 limit=128 [ 444.840504][ T29] audit: type=1326 audit(2000000084.229:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 444.936550][T13820] siw: device registration error -23 [ 444.985747][ T29] audit: type=1326 audit(2000000084.229:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 445.065099][ T29] audit: type=1326 audit(2000000084.229:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 445.093378][T13647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 445.175760][ T29] audit: type=1326 audit(2000000084.229:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b3158ce23 code=0x7ffc0000 [ 445.217354][T13647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 445.269253][ T29] audit: type=1326 audit(2000000084.239:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b3158b89f code=0x7ffc0000 [ 445.271237][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 445.346411][ T3496] veth1_macvtap: left promiscuous mode [ 445.352748][ T3496] veth0_macvtap: left promiscuous mode [ 445.368777][T13393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.385872][ T29] audit: type=1326 audit(2000000084.239:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3b3158ce77 code=0x7ffc0000 [ 445.448518][ T29] audit: type=1326 audit(2000000084.239:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13813 comm="syz.4.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b3158b750 code=0x7ffc0000 [ 445.686948][T13841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3140'. [ 445.963254][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 445.984420][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 445.992719][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.024976][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.033947][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.042047][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.059362][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.080610][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.104149][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.112193][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.139597][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.158812][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.175503][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.199494][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.209784][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.232178][ T5885] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 446.257665][ T5885] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 446.583202][T13852] siw: device registration error -23 [ 447.485583][T13647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 447.499382][T13647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 447.617298][T13842] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 448.064542][T13647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.193037][T13647] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.317825][T13867] loop4: detected capacity change from 0 to 1024 [ 448.320770][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.331440][ T7724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.378042][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 448.400531][T13867] EXT4-fs: Ignoring removed orlov option [ 448.417648][T13862] lo speed is unknown, defaulting to 1000 [ 448.428688][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.435960][ T7727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.445515][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 448.458050][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 448.466102][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 448.532310][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 448.605899][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 448.660032][T13867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.686868][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 448.727748][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 448.771060][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 449.278175][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 449.323838][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 449.427377][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 449.435052][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 449.635855][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 449.643564][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 449.685768][ T5888] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 449.734931][ T5888] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 450.171158][T13647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.222187][T13898] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3161'. [ 450.367857][T13647] veth0_vlan: entered promiscuous mode [ 450.446922][T13647] veth1_vlan: entered promiscuous mode [ 450.587870][T13647] veth0_macvtap: entered promiscuous mode [ 450.637590][T13647] veth1_macvtap: entered promiscuous mode [ 450.710397][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.755767][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.765634][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.845037][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.898203][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.962764][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.991011][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.001686][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.013568][T13647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.030627][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.758274][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.768853][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.779421][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.789316][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.799863][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.810368][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.821580][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.841646][T13647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.897163][T13647] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.925836][T13647] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.934664][T13647] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.002724][T13647] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.337428][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3170'. [ 452.386144][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.386770][T13924] sch_tbf: burst 88 is lower than device veth0_virt_wifi mtu (1514) ! [ 452.425773][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.495383][T13862] lo speed is unknown, defaulting to 1000 [ 452.542304][T13862] »»»»»» speed is unknown, defaulting to 1000 [ 452.566192][T13892] siw: device registration error -23 [ 452.625075][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.636365][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.801521][T13934] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3174'. [ 453.527453][T13953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3181'. [ 453.914583][T13962] siw: device registration error -23 [ 454.622626][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 454.638222][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 454.648461][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 454.657055][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.668316][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 454.678542][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 454.724530][T13057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.839758][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 454.857732][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 454.866202][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 454.873894][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 454.890122][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 454.915855][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 454.927518][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 454.935236][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 454.966311][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 454.984243][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 455.004491][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 455.021636][T13974] lo speed is unknown, defaulting to 1000 [ 455.021664][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 455.071445][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 455.094954][ T2911] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.119686][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 455.139546][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 455.163255][ T5888] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 455.208697][ T5888] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 455.306085][ T2911] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.432405][T13988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3195'. [ 455.460382][ T2911] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.683510][ T2911] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.782402][T13998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3200'. [ 456.429524][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 456.450840][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 456.488890][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.508944][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.535916][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.554070][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.596558][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.604267][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.637184][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.644894][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.654796][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.695543][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.711593][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.735875][ T5144] Bluetooth: hci2: command tx timeout [ 456.774833][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.783854][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.811200][ T5888] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 456.821395][ T5888] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 458.166927][ T2911] bond0 (unregistering): Released all slaves [ 458.385035][ T2911] bond1 (unregistering): Released all slaves [ 458.569280][ T2911] bond2 (unregistering): Released all slaves [ 458.764677][ T2911] bond3 (unregistering): Released all slaves [ 458.819388][ T5144] Bluetooth: hci2: command tx timeout [ 459.037521][ T2911] bond4 (unregistering): Released all slaves [ 459.243659][ T2911] bond5 (unregistering): Released all slaves [ 459.437653][ T2911] bond6 (unregistering): Released all slaves [ 459.454900][T14012] IPv6: Can't replace route, no match found [ 459.476953][T13974] lo speed is unknown, defaulting to 1000 [ 459.545922][T13974] »»»»»» speed is unknown, defaulting to 1000 [ 459.729888][T14046] loop1: detected capacity change from 0 to 1024 [ 459.801302][T14046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.510353][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 460.519297][T14059] tls_set_device_offload_rx: netdev not found [ 460.525769][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 460.535224][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.554271][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.555745][T14045] lo speed is unknown, defaulting to 1000 [ 460.563936][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.593049][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.626135][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.637743][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.671144][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.689191][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.732497][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.756271][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.772448][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.790342][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.798577][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.814738][T14064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3222'. [ 460.825624][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.833436][ T8] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 460.847138][ T8] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 460.885920][ T5144] Bluetooth: hci2: command tx timeout [ 461.473192][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'. [ 461.480998][T13974] chnl_net:caif_netlink_parms(): no params data found [ 461.668802][T14084] hsr_slave_1 (unregistering): left promiscuous mode [ 462.037525][T14094] loop1: detected capacity change from 0 to 2048 [ 462.074678][T14100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3233'. [ 462.128834][T14094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.247250][T14094] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.3231: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 462.318678][T13974] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.356279][T13974] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.361226][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 462.376740][T13974] bridge_slave_0: entered allmulticast mode [ 462.397524][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 462.405017][T13974] bridge_slave_0: entered promiscuous mode [ 462.416490][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.430735][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.436356][T13974] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.439126][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.454974][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.463152][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.464477][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.480577][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.485889][T13974] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.506028][T13974] bridge_slave_1: entered allmulticast mode [ 462.514386][T13974] bridge_slave_1: entered promiscuous mode [ 462.531383][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.565992][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.584969][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.613448][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.635949][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.643660][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.665838][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.696032][ T5886] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 462.697030][T14108] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3237'. [ 462.730343][ T5886] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 462.732486][T13974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.801841][T13974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.922264][T14114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3238'. [ 462.967958][ T5144] Bluetooth: hci2: command tx timeout [ 463.019042][T14113] loop4: detected capacity change from 0 to 2048 [ 463.099375][T13974] team0: Port device team_slave_0 added [ 463.108365][T14113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.205238][T14045] lo speed is unknown, defaulting to 1000 [ 463.274395][T13974] team0: Port device team_slave_1 added [ 463.427577][T14045] »»»»»» speed is unknown, defaulting to 1000 [ 463.459966][T14122] xt_TPROXY: Can be used only with -p tcp or -p udp [ 463.484629][T13974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.503118][T13974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.558300][T13974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.600422][T14128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3243'. [ 463.669992][ T2911] hsr_slave_0: left promiscuous mode [ 463.724245][ T2911] veth1_macvtap: left promiscuous mode [ 463.754828][ T2911] veth0_macvtap: left promiscuous mode [ 463.775964][ T2911] veth1_vlan: left promiscuous mode [ 463.796418][ T2911] veth0_vlan: left promiscuous mode [ 463.933942][T13057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.127109][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 464.166195][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 464.184261][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.199981][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.213953][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.232518][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.261636][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.280399][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.297059][T14143] netlink: 'syz.0.3250': attribute type 1 has an invalid length. [ 464.305600][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.313769][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.321821][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.330013][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.338573][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.360489][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.368358][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.376263][ T5889] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 464.398278][ T5889] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 464.808706][T14154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3254'. [ 465.335887][ T5886] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 465.517724][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 465.555451][ T5886] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 465.565771][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.595185][ T5886] usb 2-1: config 0 descriptor?? [ 465.840469][ T5886] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 466.254739][T13974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.270744][T13974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.300202][T13974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.370428][T14143] bond1: entered promiscuous mode [ 466.375779][T14143] bond1: entered allmulticast mode [ 466.402781][T14145] bond1: (slave geneve2): making interface the new active one [ 466.411274][T14145] geneve2: entered promiscuous mode [ 466.416928][T14145] geneve2: entered allmulticast mode [ 466.424786][T14145] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 466.612844][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 466.629458][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 466.655826][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.665438][T13974] hsr_slave_0: entered promiscuous mode [ 466.681028][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.687457][T13974] hsr_slave_1: entered promiscuous mode [ 466.699470][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.720338][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.739923][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.755634][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.767388][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.787814][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.834317][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.842668][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.851361][T14172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.864614][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.891568][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.904515][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.913660][ T5889] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 466.924014][ T5889] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 466.945186][T14172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.103860][T14177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3264'. [ 467.910864][ T5886] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 467.921683][ T5886] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 467.976793][ T5886] asix 2-1:0.0: probe with driver asix failed with error -71 [ 467.988750][ T5886] usb 2-1: USB disconnect, device number 7 [ 468.192214][T14193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3272'. [ 468.298017][T14194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3272'. [ 468.556603][T13974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 468.559721][T14198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3274'. [ 468.588982][T13974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 468.621149][T13974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 468.656495][T13974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.851029][T13974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.868409][ T5889] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 468.916509][T13974] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.937903][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.945133][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.973287][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.980579][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.035874][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 469.056721][ T5889] usb 3-1: config 0 has an invalid interface number: 236 but max is 0 [ 469.081498][ T5889] usb 3-1: config 0 has no interface number 0 [ 469.095829][ T5889] usb 3-1: config 0 interface 236 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 469.121181][ T5889] usb 3-1: config 0 interface 236 altsetting 0 endpoint 0x83 has invalid maxpacket 1104, setting to 1024 [ 469.146941][ T5889] usb 3-1: config 0 interface 236 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 469.178633][ T5889] usb 3-1: New USB device found, idVendor=f205, idProduct=b038, bcdDevice=26.19 [ 469.216017][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.240758][ T5889] usb 3-1: Product: syz [ 469.250560][ T5889] usb 3-1: Manufacturer: syz [ 469.255437][ T5889] usb 3-1: SerialNumber: syz [ 469.280894][ T5889] usb 3-1: config 0 descriptor?? [ 469.299816][T14200] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 469.326391][T14200] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 469.350652][ T5889] usb-storage 3-1:0.236: USB Mass Storage device detected [ 469.402070][ T5889] scsi host1: usb-storage 3-1:0.236 [ 469.550228][T13974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.719381][T13974] veth0_vlan: entered promiscuous mode [ 469.761536][T13974] veth1_vlan: entered promiscuous mode [ 469.828650][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3285'. [ 469.880236][T13974] veth0_macvtap: entered promiscuous mode [ 469.927239][T13974] veth1_macvtap: entered promiscuous mode [ 469.984724][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.008172][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.028360][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.046883][T14237] loop1: detected capacity change from 0 to 512 [ 470.053910][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.076989][T14237] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3288: invalid block [ 470.097034][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.117244][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.134991][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.135572][T14237] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3288: invalid indirect mapped block 4294967295 (level 1) [ 470.160766][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.171551][T14237] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3288: invalid indirect mapped block 4294967295 (level 1) [ 470.189621][T14237] EXT4-fs (loop1): 2 truncates cleaned up [ 470.189647][T13974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.207486][T14237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.220944][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.259867][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.284028][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.311285][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.332993][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.355878][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.391157][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.404306][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.427762][T13974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.446029][T13974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.458940][T13974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.459779][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.548179][T13974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.567632][T13974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.586666][T13974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.598475][T13974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.661094][T14220] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 470.943103][ T7727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.966679][ T7727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.083892][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.101208][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.350920][T14257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3296'. [ 471.493903][ T909] usb 3-1: USB disconnect, device number 2 [ 471.510108][T14261] loop1: detected capacity change from 0 to 512 [ 471.542762][T14261] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3298: invalid block [ 471.585314][T14261] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3298: invalid indirect mapped block 4294967295 (level 1) [ 471.669657][T14261] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3298: invalid indirect mapped block 4294967295 (level 1) [ 471.722746][T14261] EXT4-fs (loop1): 2 truncates cleaned up [ 471.762125][T14261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.978057][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.510776][T14296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3311'. [ 472.523712][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 472.523731][ T29] audit: type=1326 audit(2000000112.209:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 472.631347][ T29] audit: type=1326 audit(2000000112.209:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 472.723041][ T29] audit: type=1326 audit(2000000112.209:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 472.820293][ T29] audit: type=1326 audit(2000000112.209:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 472.922294][ T29] audit: type=1326 audit(2000000112.209:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 472.986131][ T29] audit: type=1326 audit(2000000112.239:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 473.026367][ T29] audit: type=1326 audit(2000000112.669:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 473.093299][ T29] audit: type=1326 audit(2000000112.669:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 473.287494][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.299231][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 473.309797][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.336203][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.350933][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 473.371452][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 473.422489][T14306] lo speed is unknown, defaulting to 1000 [ 473.915930][ T8] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 474.080474][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 474.127545][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 474.165700][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.185714][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.221505][ T8] usb 3-1: Product: syz [ 474.225881][ T8] usb 3-1: Manufacturer: syz [ 474.235736][ T8] usb 3-1: SerialNumber: syz [ 474.282357][T14327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3322'. [ 474.518597][T14314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 474.603011][T14306] lo speed is unknown, defaulting to 1000 [ 474.637926][T14306] »»»»»» speed is unknown, defaulting to 1000 [ 474.758712][T14337] netlink: 'syz.3.3329': attribute type 4 has an invalid length. [ 474.846529][T14339] netlink: 'syz.3.3329': attribute type 4 has an invalid length. [ 474.935497][T14341] syzkaller1: entered promiscuous mode [ 474.943098][T14341] syzkaller1: entered allmulticast mode [ 475.168434][T14314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 475.227448][T14352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3334'. [ 475.381248][ T8] cdc_ncm 3-1:1.0: failed to get mac address [ 475.390061][ T8] cdc_ncm 3-1:1.0: bind() failure [ 475.422596][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3334'. [ 475.425846][ T8] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 475.447493][ T5144] Bluetooth: hci3: command tx timeout [ 475.474996][ T8] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 475.493184][ T8] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 475.522023][T14306] chnl_net:caif_netlink_parms(): no params data found [ 475.543409][ T8] usb 3-1: USB disconnect, device number 3 [ 475.726600][T14306] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.733877][T14306] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.742225][T14306] bridge_slave_0: entered allmulticast mode [ 475.751098][T14306] bridge_slave_0: entered promiscuous mode [ 475.760618][T14306] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.767998][T14306] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.775280][T14306] bridge_slave_1: entered allmulticast mode [ 475.784095][T14306] bridge_slave_1: entered promiscuous mode [ 475.873006][T14306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.920086][T14306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.150457][T14306] team0: Port device team_slave_0 added [ 476.194371][T14306] team0: Port device team_slave_1 added [ 476.353114][T14306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.360685][T14306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.422638][T14306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.477974][T14306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.502264][T14306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.583975][T14306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.678367][T14380] syzkaller1: entered promiscuous mode [ 476.690159][T14380] syzkaller1: entered allmulticast mode [ 476.890813][T14306] hsr_slave_0: entered promiscuous mode [ 477.135416][T14306] hsr_slave_1: entered promiscuous mode [ 477.170688][T14306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.178364][T14306] Cannot create hsr debugfs directory [ 477.252689][T14403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3351'. [ 477.537954][ T5144] Bluetooth: hci3: command tx timeout [ 478.452627][T14306] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.601834][T14427] syzkaller1: entered promiscuous mode [ 478.618043][T14427] syzkaller1: entered allmulticast mode [ 478.653913][T14306] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.693212][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3365'. [ 478.869559][T14306] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.160022][T14306] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.625834][ T5144] Bluetooth: hci3: command tx timeout [ 480.340988][T14459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3376'. [ 480.384008][T14306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 480.417832][T14306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 480.468650][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3376'. [ 480.470724][T14306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 480.673248][T14306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 480.982886][ T29] audit: type=1326 audit(2000000120.659:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.4.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 481.064188][ T29] audit: type=1326 audit(2000000120.689:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.4.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 481.120798][ T29] audit: type=1326 audit(2000000120.699:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.4.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 481.183806][ T29] audit: type=1326 audit(2000000120.699:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.4.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 481.191858][T14306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.227817][ T29] audit: type=1326 audit(2000000120.699:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.4.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 481.294939][T14306] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.305359][ T29] audit: type=1326 audit(2000000120.699:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.4.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 481.362874][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.370134][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.387211][ T29] audit: type=1326 audit(2000000120.699:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.4.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 481.422469][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.429720][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.467197][ T29] audit: type=1326 audit(2000000120.699:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.4.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 481.505537][ T29] audit: type=1326 audit(2000000120.699:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.4.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 481.590840][T14492] loop0: detected capacity change from 0 to 2048 [ 481.619454][ T29] audit: type=1326 audit(2000000120.699:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.4.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3b3158cde9 code=0x7ffc0000 [ 481.625387][T14306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.685993][ T5144] Bluetooth: hci3: command tx timeout [ 481.697935][T14492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.740629][T14492] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.3389: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 481.869610][T13393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.202391][T14306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.432467][T14306] veth0_vlan: entered promiscuous mode [ 482.490933][T14306] veth1_vlan: entered promiscuous mode [ 482.608823][T14306] veth0_macvtap: entered promiscuous mode [ 482.630837][T14306] veth1_macvtap: entered promiscuous mode [ 482.727716][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.755805][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.783741][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.796684][T14528] loop4: detected capacity change from 0 to 2048 [ 482.819025][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.831605][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.842628][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.853641][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.866067][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.878347][T14528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.893300][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.906190][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.906944][T14528] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.3403: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 482.918346][T14306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.946103][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.956738][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.966957][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.978302][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.990923][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.001528][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.011528][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.022022][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.032292][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.042884][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.053147][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.063829][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.080296][T14306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.083626][T13057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.213616][T14306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.225915][T14306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.234658][T14306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.264897][T14306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.480682][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.521644][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.668420][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.683982][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.381915][T14572] loop1: detected capacity change from 0 to 2048 [ 484.459674][T14572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.508539][T14572] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.3417: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 484.673602][T14306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.567666][T14616] netlink: 'syz.4.3436': attribute type 9 has an invalid length. [ 485.580971][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3437'. [ 485.590451][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3436'. [ 486.290679][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 486.290696][ T29] audit: type=1326 audit(2000000125.969:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.2.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 486.397535][ T29] audit: type=1326 audit(2000000126.009:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.2.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 486.485801][ T29] audit: type=1326 audit(2000000126.019:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.2.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 486.563158][ T29] audit: type=1326 audit(2000000126.019:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.2.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 486.629423][ T29] audit: type=1326 audit(2000000126.019:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.2.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 486.671757][ T29] audit: type=1326 audit(2000000126.029:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.2.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 486.694240][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.707754][ T29] audit: type=1326 audit(2000000126.029:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.2.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 486.733435][ T29] audit: type=1326 audit(2000000126.029:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.2.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 486.773302][T14666] bridge_slave_0: left allmulticast mode [ 486.779133][T14666] bridge_slave_0: left promiscuous mode [ 486.784978][T14666] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.793206][ T29] audit: type=1326 audit(2000000126.029:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.2.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 486.828183][T14666] bridge_slave_1: left allmulticast mode [ 486.834373][T14666] bridge_slave_1: left promiscuous mode [ 486.840813][T14666] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.850172][ T29] audit: type=1326 audit(2000000126.029:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.2.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ad38cde9 code=0x7ffc0000 [ 486.892040][T14666] bond0: (slave bond_slave_0): Releasing backup interface [ 486.913685][T14666] bond0: (slave bond_slave_1): Releasing backup interface [ 486.946918][T14666] team0: Port device team_slave_0 removed [ 486.968605][T14666] team0: Port device team_slave_1 removed [ 486.981629][T14666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.989926][T14666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.999452][T14673] siw: device registration error -23 [ 487.008856][T14666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.016749][T14666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.820527][T14702] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3471'. [ 487.990517][T14705] siw: device registration error -23 [ 488.019636][T14707] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3473'. [ 488.604432][T14728] netlink: 'syz.3.3482': attribute type 1 has an invalid length. [ 488.808317][T14734] siw: device registration error -23 [ 489.559996][ T5144] block nbd3: Receive control failed (result -32) [ 489.568469][T14732] block nbd3: shutting down sockets [ 492.063817][T14799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3505'. [ 493.100957][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 493.100975][ T29] audit: type=1326 audit(2000000132.779:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ac78cde9 code=0x7ffc0000 [ 493.146775][ T29] audit: type=1326 audit(2000000132.819:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ac78cde9 code=0x7ffc0000 [ 493.173423][ T29] audit: type=1326 audit(2000000132.819:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc2ac78cde9 code=0x7ffc0000 [ 493.197930][ T29] audit: type=1326 audit(2000000132.829:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ac78cde9 code=0x7ffc0000 [ 493.230761][ T29] audit: type=1326 audit(2000000132.829:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ac78cde9 code=0x7ffc0000 [ 493.254168][ T29] audit: type=1326 audit(2000000132.859:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc2ac78cde9 code=0x7ffc0000 [ 493.279978][ T29] audit: type=1326 audit(2000000132.859:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ac78cde9 code=0x7ffc0000 [ 493.329978][ T29] audit: type=1326 audit(2000000132.859:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ac78cde9 code=0x7ffc0000 [ 493.353098][ T29] audit: type=1326 audit(2000000132.859:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc2ac78cde9 code=0x7ffc0000 [ 493.380166][ T29] audit: type=1326 audit(2000000132.859:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.3.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ac78cde9 code=0x7ffc0000 [ 494.130330][T14834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3520'. [ 494.193922][T14835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3519'. [ 495.310181][T14795] syz.4.3504 (14795): drop_caches: 2 [ 495.471956][T14854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3528'. [ 495.509453][T14858] netlink: 'syz.1.3529': attribute type 1 has an invalid length. [ 495.526527][T14854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3528'. [ 495.535933][T14854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3528'. [ 495.549391][T14854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3528'. [ 495.726126][T14864] sch_tbf: burst 88 is lower than device veth0_macvtap mtu (1514) ! [ 495.984515][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3537'. [ 496.202495][T14871] hsr_slave_1 (unregistering): left promiscuous mode [ 496.472995][T14887] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3544'. [ 496.492301][T14887] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3544'. [ 496.946328][T13606] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 497.110705][T13606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 497.123094][T13606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 497.140876][T13606] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 497.150398][T13606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.165774][T13606] usb 2-1: Product: syz [ 497.170005][T13606] usb 2-1: Manufacturer: syz [ 497.184160][T13606] usb 2-1: SerialNumber: syz [ 497.208891][T13606] usb 2-1: config 0 descriptor?? [ 497.250716][T13606] hub 2-1:0.0: bad descriptor, ignoring hub [ 497.257091][T13606] hub 2-1:0.0: probe with driver hub failed with error -5 [ 497.302076][T13606] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.486854][T13606] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 497.497350][T14910] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3553'. [ 497.540166][T13606] usb 2-1: USB disconnect, device number 8 [ 498.081969][T14925] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3561'. [ 498.407818][T14936] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3566'. [ 498.730993][T13606] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 498.782490][T14949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3572'. [ 498.905846][T13606] usb 5-1: Using ep0 maxpacket: 16 [ 498.915520][T13606] usb 5-1: config 0 has an invalid interface number: 236 but max is 0 [ 498.955437][T13606] usb 5-1: config 0 has no interface number 0 [ 498.970924][T13606] usb 5-1: config 0 interface 236 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 498.981304][T13606] usb 5-1: config 0 interface 236 altsetting 0 endpoint 0x83 has invalid maxpacket 1104, setting to 1024 [ 498.994188][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3572'. [ 499.003663][T13606] usb 5-1: config 0 interface 236 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 499.030862][T13606] usb 5-1: New USB device found, idVendor=f205, idProduct=b038, bcdDevice=26.19 [ 499.040110][T13606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.055779][T13606] usb 5-1: Product: syz [ 499.062911][T13606] usb 5-1: Manufacturer: syz [ 499.069242][T13606] usb 5-1: SerialNumber: syz [ 499.079752][T13606] usb 5-1: config 0 descriptor?? [ 499.097238][T14940] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 499.107027][T14940] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 499.127746][T13606] usb-storage 5-1:0.236: USB Mass Storage device detected [ 499.148112][T14958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3575'. [ 499.160537][T13606] scsi host1: usb-storage 5-1:0.236 [ 499.627818][T14978] netlink: 'syz.0.3582': attribute type 9 has an invalid length. [ 499.697953][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3582'. [ 500.363187][T14994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3587'. [ 500.406363][T14961] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 500.490411][T14998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3588'. [ 500.944165][T15012] lo speed is unknown, defaulting to 1000 [ 501.139257][T15017] netlink: 'syz.3.3596': attribute type 9 has an invalid length. [ 501.189930][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3596'. [ 501.250310][T13606] usb 5-1: USB disconnect, device number 2 [ 501.776412][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.947605][ T5912] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 502.237221][ T5912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.272635][ T5912] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.316007][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.325733][ T5912] usb 4-1: Product: syz [ 502.329928][ T5912] usb 4-1: Manufacturer: syz [ 502.376175][ T5912] usb 4-1: SerialNumber: syz [ 502.411327][ T5912] hub 4-1:1.0: Invalid hub with more than one config or interface [ 502.425714][ T5912] hub 4-1:1.0: probe with driver hub failed with error -22 [ 502.744088][T15042] hsr_slave_1 (unregistering): left promiscuous mode [ 503.117968][T15053] netlink: 'syz.4.3609': attribute type 9 has an invalid length. [ 503.156835][T15053] __nla_validate_parse: 2 callbacks suppressed [ 503.156854][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3609'. [ 503.269448][T15012] lo speed is unknown, defaulting to 1000 [ 503.297326][T15012] »»»»»» speed is unknown, defaulting to 1000 [ 503.446473][ T5912] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 503.453038][ T5912] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 503.665530][T15059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3612'. [ 503.727322][ T5912] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 503.842724][ T5912] usb 4-1: USB disconnect, device number 3 [ 503.912298][ T5912] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 504.306402][T15068] siw: device registration error -23 [ 504.726453][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 504.726473][ T29] audit: type=1326 audit(2000000144.399:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce378cde9 code=0x7ffc0000 [ 504.855742][ T29] audit: type=1326 audit(2000000144.399:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce378cde9 code=0x7ffc0000 [ 504.965749][ T29] audit: type=1326 audit(2000000144.439:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8ce378cde9 code=0x7ffc0000 [ 505.076124][ T29] audit: type=1326 audit(2000000144.439:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce378cde9 code=0x7ffc0000 [ 505.141388][ T29] audit: type=1326 audit(2000000144.439:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce378cde9 code=0x7ffc0000 [ 505.284933][ T29] audit: type=1326 audit(2000000144.449:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8ce378cde9 code=0x7ffc0000 [ 505.310112][ T29] audit: type=1326 audit(2000000144.449:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce378cde9 code=0x7ffc0000 [ 505.373245][ T29] audit: type=1326 audit(2000000144.449:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8ce378cde9 code=0x7ffc0000 [ 505.435748][ T29] audit: type=1326 audit(2000000144.449:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce378cde9 code=0x7ffc0000 [ 505.519266][ T29] audit: type=1326 audit(2000000144.449:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8ce378cde9 code=0x7ffc0000 [ 505.741525][T15099] loop4: detected capacity change from 0 to 512 [ 505.779718][T15099] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.3631: invalid block [ 505.798175][T15099] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3631: invalid indirect mapped block 4294967295 (level 1) [ 505.846069][ T5889] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 505.880024][T15099] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3631: invalid indirect mapped block 4294967295 (level 1) [ 505.961135][T15099] EXT4-fs (loop4): 2 truncates cleaned up [ 505.996585][T15099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.027289][T15105] siw: device registration error -23 [ 506.032401][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.075783][ T5889] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 506.105769][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.141411][ T5889] usb 4-1: config 0 descriptor?? [ 506.179114][T13057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.468612][T15117] input: syz1 as /devices/virtual/input/input5 [ 506.583634][ T5889] usbhid 4-1:0.0: can't add hid device: -71 [ 506.606123][ T5889] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 506.627769][ T5889] usb 4-1: USB disconnect, device number 4 [ 507.034907][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 507.091030][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3649'. [ 507.314268][T15144] lo speed is unknown, defaulting to 1000 [ 507.960557][T15159] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 508.287730][T15168] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 508.703272][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3659'. [ 509.956573][T15190] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 510.120201][T15190] kvm: pic: level sensitive irq not supported [ 510.128512][T15190] kvm: pic: non byte read [ 510.194637][T15190] kvm: pic: level sensitive irq not supported [ 510.195374][T15190] kvm: pic: non byte read [ 510.287565][T15190] kvm: pic: level sensitive irq not supported [ 510.287637][T15190] kvm: pic: non byte read [ 510.338213][T15190] kvm: pic: level sensitive irq not supported [ 510.338338][T15190] kvm: pic: non byte read [ 510.360372][T15190] kvm: pic: level sensitive irq not supported [ 510.360444][T15190] kvm: pic: non byte read [ 510.377367][T15190] kvm: pic: level sensitive irq not supported [ 510.377437][T15190] kvm: pic: non byte read [ 510.404173][T15190] kvm: pic: level sensitive irq not supported [ 510.404243][T15190] kvm: pic: non byte read [ 510.442239][T15190] kvm: pic: level sensitive irq not supported [ 510.442370][T15190] kvm: pic: non byte read [ 510.464196][T15190] kvm: pic: level sensitive irq not supported [ 510.464520][T15190] kvm: pic: non byte read [ 510.504966][T15190] kvm: pic: level sensitive irq not supported [ 510.505037][T15190] kvm: pic: non byte read [ 510.606268][ T5888] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 510.757644][T15214] loop3: detected capacity change from 0 to 512 [ 510.794492][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 510.804782][T15214] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 510.826202][T15214] EXT4-fs (loop3): invalid journal inode [ 510.832364][T15214] EXT4-fs (loop3): can't get journal size [ 510.841859][ T5888] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 510.861366][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.891889][T15214] EXT4-fs (loop3): 1 truncate cleaned up [ 510.902690][T15214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.903341][ T5888] usb 2-1: config 0 descriptor?? [ 511.146169][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 511.177904][ T5888] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 511.195273][T15144] lo speed is unknown, defaulting to 1000 [ 511.204303][T15144] »»»»»» speed is unknown, defaulting to 1000 [ 511.281612][T13974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.329916][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 511.361232][ T8] usb 5-1: config 0 has an invalid interface number: 236 but max is 0 [ 511.380846][ T8] usb 5-1: config 0 has no interface number 0 [ 511.407145][ T8] usb 5-1: config 0 interface 236 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 511.446208][ T8] usb 5-1: config 0 interface 236 altsetting 0 endpoint 0x83 has invalid maxpacket 1104, setting to 1024 [ 511.475825][ T8] usb 5-1: config 0 interface 236 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 511.502750][ T8] usb 5-1: New USB device found, idVendor=f205, idProduct=b038, bcdDevice=26.19 [ 511.512298][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.520831][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3672'. [ 511.542328][ T8] usb 5-1: Product: syz [ 511.555722][ T8] usb 5-1: Manufacturer: syz [ 511.560470][ T8] usb 5-1: SerialNumber: syz [ 511.582380][ T8] usb 5-1: config 0 descriptor?? [ 511.598882][T15217] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 511.599374][T15225] loop0: detected capacity change from 0 to 1024 [ 511.630250][T15217] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 511.670178][T15225] EXT4-fs: Ignoring removed orlov option [ 511.672221][ T8] usb-storage 5-1:0.236: USB Mass Storage device detected [ 511.799087][T15222] lo speed is unknown, defaulting to 1000 [ 511.908872][ T8] scsi host1: usb-storage 5-1:0.236 [ 512.065780][ T8] usb 5-1: USB disconnect, device number 3 [ 512.103169][T15225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.992789][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3675'. [ 513.037360][ T5888] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 513.065158][ T5888] asix 2-1:0.0: probe with driver asix failed with error -71 [ 513.136902][ T5888] usb 2-1: USB disconnect, device number 9 [ 514.581972][T15222] lo speed is unknown, defaulting to 1000 [ 514.607651][T15222] »»»»»» speed is unknown, defaulting to 1000 [ 514.696951][T15266] raw_sendmsg: syz.1.3685 forgot to set AF_INET. Fix it! [ 515.059627][T13393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.299882][T15269] lo speed is unknown, defaulting to 1000 [ 515.331302][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3690'. [ 516.039815][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3698'. [ 517.016772][T15315] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3703'. [ 517.835975][ T5888] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 518.027314][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 518.118787][T15269] lo speed is unknown, defaulting to 1000 [ 518.154289][T15269] »»»»»» speed is unknown, defaulting to 1000 [ 518.284462][ T5888] usb 2-1: config 0 has an invalid interface number: 236 but max is 0 [ 518.307072][ T5888] usb 2-1: config 0 has no interface number 0 [ 518.314028][ T5888] usb 2-1: config 0 interface 236 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 518.335770][ T5888] usb 2-1: config 0 interface 236 altsetting 0 endpoint 0x83 has invalid maxpacket 1104, setting to 1024 [ 518.356800][ T5888] usb 2-1: config 0 interface 236 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 518.671040][ T5888] usb 2-1: New USB device found, idVendor=f205, idProduct=b038, bcdDevice=26.19 [ 518.935796][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.974351][ T5888] usb 2-1: Product: syz [ 518.994652][ T5888] usb 2-1: Manufacturer: syz [ 519.033672][ T5888] usb 2-1: SerialNumber: syz [ 519.065425][ T5888] usb 2-1: config 0 descriptor?? [ 519.100605][T15330] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 519.163520][T15330] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 519.193221][ T5888] usb-storage 2-1:0.236: USB Mass Storage device detected [ 519.275367][ T5888] scsi host1: usb-storage 2-1:0.236 [ 520.084807][ T5888] usb 2-1: USB disconnect, device number 10 [ 521.301080][T15389] input: syz0 as /devices/virtual/input/input7 [ 522.906204][T15411] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3737'. [ 523.140688][T15406] syz.0.3732: attempt to access beyond end of device [ 523.140688][T15406] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 523.366511][T15406] XFS (nbd0): SB validate failed with error -5. [ 523.827865][T15439] loop4: detected capacity change from 0 to 1024 [ 523.834623][T15438] lo speed is unknown, defaulting to 1000 [ 523.835810][T15439] EXT4-fs: Ignoring removed orlov option [ 524.088037][T15438] lo speed is unknown, defaulting to 1000 [ 524.094885][T15438] »»»»»» speed is unknown, defaulting to 1000 [ 524.157976][T15436] lo speed is unknown, defaulting to 1000 [ 524.197492][T15439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.645832][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 524.760519][ T5888] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 524.795772][T15449] netlink: 'syz.2.3746': attribute type 21 has an invalid length. [ 524.866358][T15449] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3746'. [ 524.875536][T15449] netlink: 'syz.2.3746': attribute type 5 has an invalid length. [ 524.964306][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 524.983866][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.035864][T15449] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3746'. [ 525.084590][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.118863][ T5888] usb 4-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 525.164468][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.209441][ T5888] usb 4-1: Product: syz [ 525.213672][ T5888] usb 4-1: Manufacturer: syz [ 525.225742][ T5888] usb 4-1: SerialNumber: syz [ 525.346201][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3748'. [ 525.355148][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3748'. [ 525.447826][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'. [ 525.494428][ T5888] appletouch 4-1:1.0: Failed to read mode from device. [ 525.506286][ T5888] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 525.569037][ T5888] usb 4-1: USB disconnect, device number 5 [ 526.273469][T13057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.576756][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3751'. [ 526.775965][T15436] lo speed is unknown, defaulting to 1000 [ 526.825289][T15436] »»»»»» speed is unknown, defaulting to 1000 [ 527.045163][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3754'. [ 528.323027][T15476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.462126][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'. [ 530.102485][T15540] netlink: 'syz.3.3773': attribute type 2 has an invalid length. [ 530.141564][T15540] netlink: 'syz.3.3773': attribute type 1 has an invalid length. [ 530.150304][T15540] netlink: 'syz.3.3773': attribute type 1 has an invalid length. [ 530.369990][T15542] loop7: detected capacity change from 0 to 16384 [ 530.622422][T15545] loop7: detected capacity change from 16384 to 16383 [ 531.886678][T15578] dlm: no local IP address has been set [ 531.921399][T15578] dlm: cannot start dlm midcomms -107 [ 534.518851][ T5847] Bluetooth: Frame is too long (len 12, expected len 4) [ 534.992165][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3802'. [ 535.604203][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.645730][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.686324][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.698666][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.727504][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.745775][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.760377][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.786966][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.804925][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.831613][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.848248][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.863793][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.895595][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.925535][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.950201][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.975746][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 535.995728][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.051055][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.081974][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.100361][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.115723][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.134156][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.169731][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.196519][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.204232][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.256152][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.274088][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.305113][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.338322][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.375714][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.403781][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.421876][ T5887] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 536.452490][ T5887] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 536.453044][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3814'. [ 537.342072][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.366062][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.384000][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.394121][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.414684][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.434913][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.450855][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.473758][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.490257][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.506950][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.523667][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.542815][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.566144][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.592405][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.609445][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3829'. [ 537.626281][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.655432][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.687251][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.715767][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.736590][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.765976][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.785710][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.804526][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.841145][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.875743][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.897602][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.918791][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.935921][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.953929][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 537.974256][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 538.004658][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 538.041315][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 538.060628][ T5912] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 538.084822][ T5912] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 538.447125][ T5912] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 538.550590][T15713] loop1: detected capacity change from 0 to 2048 [ 538.710868][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 538.711490][T15713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.747535][ T5912] usb 5-1: config 0 has an invalid interface number: 236 but max is 0 [ 538.776866][T15713] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.3841: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 538.818443][ T5912] usb 5-1: config 0 has no interface number 0 [ 538.870660][ T5912] usb 5-1: config 0 interface 236 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 538.920671][ T5912] usb 5-1: New USB device found, idVendor=f205, idProduct=b038, bcdDevice=26.19 [ 538.936008][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.944190][ T5912] usb 5-1: Product: syz [ 538.948373][T14306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.957621][ T5912] usb 5-1: Manufacturer: syz [ 538.963832][ T5912] usb 5-1: SerialNumber: syz [ 539.006809][ T5912] usb 5-1: config 0 descriptor?? [ 539.018012][T15705] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 539.043968][ T5912] usb-storage 5-1:0.236: USB Mass Storage device detected [ 539.617709][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 539.740996][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'. [ 539.750110][T15740] IPVS: Unknown mcast interface: vcan0 [ 539.778006][T15403] Bluetooth: hci4: command 0x0406 tx timeout [ 540.268290][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 540.298643][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.309197][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.323252][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.362447][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.375799][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.394010][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.405684][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.425711][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.434367][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.455774][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.463485][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.506238][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.568129][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.585731][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.593442][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.644699][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.665338][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.695811][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.703517][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.721841][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.756084][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.764204][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.788723][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.807655][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.815356][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.847869][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.855574][ T5888] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 540.869249][ T5888] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 541.061904][T15750] loop3: detected capacity change from 0 to 2048 [ 541.161409][T15750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.236650][ T5886] usb 5-1: USB disconnect, device number 4 [ 541.318166][T15750] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.3855: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 541.511992][T13974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.828627][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 541.846233][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 541.862175][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 541.877524][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 541.885532][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 541.894839][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 541.902801][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 541.939191][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 541.963773][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 541.992006][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.022381][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.042572][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.051779][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.070913][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.128229][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.156321][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.413645][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.422449][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.430239][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.437974][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.445681][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.453354][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.475735][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.488377][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.505741][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.531394][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.583695][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.615786][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.637568][T15795] loop3: detected capacity change from 0 to 2048 [ 542.648764][ T5888] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 542.687971][ T5888] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 542.748703][T15795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.788160][T15795] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.3873: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 543.160496][T13974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.171834][T15809] loop1: detected capacity change from 0 to 512 [ 543.209981][T15809] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 543.246486][T15809] EXT4-fs (loop1): invalid journal inode [ 543.262624][T15809] EXT4-fs (loop1): can't get journal size [ 543.339257][T15809] EXT4-fs (loop1): 1 truncate cleaned up [ 543.370633][T15809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.314515][T14306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.546658][T15824] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 544.582878][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3882'. [ 544.612569][T15824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.640699][T15824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.683189][T15824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.705810][T15824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.829614][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 544.840941][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 544.870882][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 544.892794][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 544.917667][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 544.937606][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 544.961213][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 544.983575][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.010267][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.028161][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.041280][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.049333][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.059416][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.069034][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.087982][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.155956][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.163672][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.189604][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.206627][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.223918][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.291400][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.316398][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.350620][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.369736][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 545.435982][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 546.187276][T15846] loop4: detected capacity change from 0 to 512 [ 546.225763][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 546.233471][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 546.236210][T15846] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 546.252169][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 546.271471][T15846] EXT4-fs (loop4): invalid journal inode [ 546.280497][ T5888] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 546.327334][T15846] EXT4-fs (loop4): can't get journal size [ 546.335309][ T5888] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 546.386482][T15846] EXT4-fs (loop4): 1 truncate cleaned up [ 546.428582][T15846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.653074][T15871] loop1: detected capacity change from 0 to 1024 [ 547.724499][T15866] lo speed is unknown, defaulting to 1000 [ 547.737379][T15874] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3902'. [ 547.746483][T15871] EXT4-fs: Ignoring removed orlov option [ 547.862646][T13057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.867625][T15871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.692499][T15901] tmpfs: Unknown parameter 'huged·.(nr_inodes' [ 548.713529][T15903] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3913'. [ 548.795374][T15904] Bluetooth: MGMT ver 1.23 [ 549.512428][T15866] lo speed is unknown, defaulting to 1000 [ 549.619373][T15866] »»»»»» speed is unknown, defaulting to 1000 [ 549.836591][T15922] loop3: detected capacity change from 0 to 2048 [ 549.920764][T15922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.033908][T15922] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.3921: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 550.227605][T13974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.749350][T15945] loop3: detected capacity change from 0 to 512 [ 550.774521][T15945] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 550.805371][T15945] EXT4-fs (loop3): invalid journal inode [ 550.811674][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 550.827164][T15945] EXT4-fs (loop3): can't get journal size [ 550.862090][T15945] EXT4-fs (loop3): 1 truncate cleaned up [ 551.010468][T15945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.024059][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 551.075603][ T8] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 551.834375][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.871369][T15954] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3933'. [ 551.946977][ T8] usb 5-1: config 0 descriptor?? [ 552.178630][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 552.249389][T13974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.595812][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 552.615840][ T8] asix 5-1:0.0: probe with driver asix failed with error -32 [ 552.665075][T15965] loop3: detected capacity change from 0 to 2048 [ 552.758053][T15965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.788240][T14306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.820861][T15965] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.3937: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 553.003293][T13974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.148151][T15980] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3945'. [ 553.405749][ T5887] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 553.533077][T15990] loop0: detected capacity change from 0 to 512 [ 553.547858][T15990] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 553.572509][T15990] EXT4-fs (loop0): invalid journal inode [ 553.588062][T15990] EXT4-fs (loop0): can't get journal size [ 553.641856][T15990] EXT4-fs (loop0): 1 truncate cleaned up [ 553.665780][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 553.675951][ T5887] usb 2-1: config 0 has an invalid interface number: 236 but max is 0 [ 553.684731][ T5887] usb 2-1: config 0 has no interface number 0 [ 553.688407][T15990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.696327][ T5887] usb 2-1: config 0 interface 236 altsetting 0 endpoint 0x83 has invalid maxpacket 1104, setting to 1024 [ 553.710922][ T976] usb 5-1: USB disconnect, device number 5 [ 553.715495][ T5887] usb 2-1: config 0 interface 236 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 553.735321][ T5887] usb 2-1: New USB device found, idVendor=f205, idProduct=b038, bcdDevice=26.19 [ 553.748605][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.757697][ T5887] usb 2-1: Product: syz [ 553.762141][ T5887] usb 2-1: Manufacturer: syz [ 553.767141][ T5887] usb 2-1: SerialNumber: syz [ 553.780974][ T5887] usb 2-1: config 0 descriptor?? [ 553.790508][T15982] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 553.799997][ T5887] usb-storage 2-1:0.236: USB Mass Storage device detected [ 554.242531][T16000] lo speed is unknown, defaulting to 1000 [ 554.357431][T13393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.820612][T16014] loop0: detected capacity change from 0 to 2048 [ 554.903512][T16014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.985471][T16014] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.3954: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 555.019154][T16021] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3956'. [ 555.079122][T13393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.626697][T16000] lo speed is unknown, defaulting to 1000 [ 555.634712][T16000] »»»»»» speed is unknown, defaulting to 1000 [ 556.903836][ T5888] usb 2-1: USB disconnect, device number 11 [ 558.055978][T16058] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3968'. [ 558.386666][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 558.394388][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 558.475717][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.483421][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.506046][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.513758][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.555702][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.563413][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.592726][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.616260][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.641718][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.660912][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.690528][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.720567][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.743809][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.770305][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.786090][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.802709][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.813505][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.859309][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.883510][ T8] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 558.983152][ T8] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 559.307779][T16084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.366435][T16095] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3983'. [ 560.167393][T15403] Bluetooth: hci0: command 0x0406 tx timeout [ 560.536544][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 560.622806][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 560.658453][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 560.720209][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 560.790755][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 560.824378][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 560.871928][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 560.888277][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 560.902793][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 560.923338][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 560.932109][T16120] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3995'. [ 560.944419][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 560.952519][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 560.984056][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 561.034438][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 561.055252][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 561.071942][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 561.130664][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 561.160167][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 561.181181][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 561.202732][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 561.234347][ T5886] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 561.302349][ T5886] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 562.912860][T16147] netlink: 'syz.2.4005': attribute type 8 has an invalid length. [ 562.961577][T16147] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.4005'. [ 563.224157][T16154] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4007'. [ 563.225377][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.403278][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4009'. [ 563.692082][T16163] loop1: detected capacity change from 0 to 1024 [ 563.699654][T16163] EXT4-fs: Ignoring removed orlov option [ 563.734027][T16163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.797956][T16158] bond1: entered promiscuous mode [ 563.803433][T16158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 563.917601][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 563.925292][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 563.938399][T16162] lo speed is unknown, defaulting to 1000 [ 564.099651][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.107470][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.115157][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.123557][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.131280][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.138955][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.146658][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.154298][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.162013][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.207459][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.234944][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.270445][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.313077][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.332468][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.350111][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.368931][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.391502][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.418785][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.452678][ T8] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 564.487338][ T8] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 566.450278][T16158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.465038][T16158] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 566.492748][T16158] bond1: (slave vti0): Error -95 calling set_mac_address [ 566.597376][T16162] lo speed is unknown, defaulting to 1000 [ 566.604376][T16162] »»»»»» speed is unknown, defaulting to 1000 [ 567.679889][T16203] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4020'. [ 567.832347][T14306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.718743][T16227] 9pnet_virtio: no channels available for device syz [ 568.746748][T16227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4028'. [ 568.775956][T16227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4028'. [ 568.837618][T16232] block nbd0: not configured, cannot reconfigure [ 568.933578][T16241] netlink: 'syz.1.4033': attribute type 1 has an invalid length. [ 568.985201][T16241] bond1: entered promiscuous mode [ 569.028826][T16241] bond1: entered allmulticast mode [ 569.184920][T16244] geneve2: entered promiscuous mode [ 569.200243][T16244] geneve2: entered allmulticast mode [ 569.246290][T16244] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 569.297482][T16248] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4035'. [ 569.982738][ T5887] IPVS: starting estimator thread 0... [ 570.087527][T16272] IPVS: using max 21 ests per chain, 50400 per kthread [ 570.343628][T16282] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN PTI [ 570.356261][T16282] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 570.364663][T16282] CPU: 0 UID: 0 PID: 16282 Comm: syz.2.4048 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 570.374899][T16282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 570.384957][T16282] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 570.390851][T16282] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 0b c6 e4 ff 48 8b 1b 31 ff [ 570.410460][T16282] RSP: 0018:ffffc9000f407958 EFLAGS: 00010206 [ 570.416523][T16282] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 570.424480][T16282] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8880121db6d0 [ 570.432452][T16282] RBP: 0000000000000000 R08: ffffffff8ea81da7 R09: 1ffffffff1d503b4 [ 570.440430][T16282] R10: dffffc0000000000 R11: fffffbfff1d503b5 R12: ffff8880121db6c0 [ 570.448395][T16282] R13: ffff8880121db6e0 R14: 1ffff1100a432e90 R15: ffff888052197480 [ 570.456371][T16282] FS: 00007fd6ae2bc6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 570.465297][T16282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 570.471881][T16282] CR2: 00007fc0eb2691bc CR3: 000000007d05c000 CR4: 00000000003526f0 [ 570.479849][T16282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 570.487818][T16282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 570.495786][T16282] Call Trace: [ 570.499067][T16282] [ 570.501985][T16282] ? __die_body+0x5f/0xb0 [ 570.506310][T16282] ? die_addr+0xb0/0xe0 [ 570.510458][T16282] ? exc_general_protection+0x3dd/0x5d0 [ 570.516012][T16282] ? asm_exc_general_protection+0x26/0x30 [ 570.521731][T16282] ? clone_private_mount+0x184/0x3e0 [ 570.527012][T16282] ? clone_private_mount+0x83/0x3e0 [ 570.532203][T16282] ? _raw_spin_unlock+0x28/0x50 [ 570.537051][T16282] ovl_fill_super+0xe4c/0x3560 [ 570.541816][T16282] ? shrinker_register+0x118/0x230 [ 570.546925][T16282] ? __pfx_lock_release+0x10/0x10 [ 570.551949][T16282] ? __pfx_ovl_fill_super+0x10/0x10 [ 570.557139][T16282] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 570.562943][T16282] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 570.568926][T16282] ? sget_fc+0x909/0x9c0 [ 570.573162][T16282] ? __pfx_set_anon_super_fc+0x10/0x10 [ 570.578614][T16282] ? __pfx_ovl_fill_super+0x10/0x10 [ 570.583805][T16282] get_tree_nodev+0xb7/0x140 [ 570.588390][T16282] vfs_get_tree+0x90/0x2b0 [ 570.592802][T16282] do_new_mount+0x2be/0xb40 [ 570.597297][T16282] ? __pfx_do_new_mount+0x10/0x10 [ 570.602315][T16282] __se_sys_mount+0x2d6/0x3c0 [ 570.606987][T16282] ? __pfx___se_sys_mount+0x10/0x10 [ 570.612175][T16282] ? do_syscall_64+0x100/0x230 [ 570.616932][T16282] ? __x64_sys_mount+0x20/0xc0 [ 570.621689][T16282] do_syscall_64+0xf3/0x230 [ 570.626190][T16282] ? clear_bhb_loop+0x35/0x90 [ 570.630868][T16282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.636764][T16282] RIP: 0033:0x7fd6ad38cde9 [ 570.641180][T16282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.660781][T16282] RSP: 002b:00007fd6ae2bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 570.669186][T16282] RAX: ffffffffffffffda RBX: 00007fd6ad5a5fa0 RCX: 00007fd6ad38cde9 [ 570.677150][T16282] RDX: 0000400000000080 RSI: 00004000000000c0 RDI: 0000000000000000 [ 570.685111][T16282] RBP: 00007fd6ad40e2a0 R08: 0000400000000a00 R09: 0000000000000000 [ 570.693069][T16282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.701027][T16282] R13: 0000000000000000 R14: 00007fd6ad5a5fa0 R15: 00007fff2975f428 [ 570.708993][T16282] [ 570.712000][T16282] Modules linked in: [ 570.717552][T16282] ---[ end trace 0000000000000000 ]--- [ 570.728433][T16284] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4049'. [ 570.758144][T16282] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 570.764109][T16282] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 0b c6 e4 ff 48 8b 1b 31 ff [ 570.800292][T16282] RSP: 0018:ffffc9000f407958 EFLAGS: 00010206 [ 570.812053][T16282] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 570.820472][T16282] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8880121db6d0 [ 570.829693][T16282] RBP: 0000000000000000 R08: ffffffff8ea81da7 R09: 1ffffffff1d503b4 [ 570.838077][T16282] R10: dffffc0000000000 R11: fffffbfff1d503b5 R12: ffff8880121db6c0 [ 570.847825][T16282] R13: ffff8880121db6e0 R14: 1ffff1100a432e90 R15: ffff888052197480 [ 570.855964][T16282] FS: 00007fd6ae2bc6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 570.865044][T16282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 570.871806][T16282] CR2: 00007f032e7a7bac CR3: 000000007d05c000 CR4: 00000000003526f0 [ 570.879978][T16282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 570.890019][T16282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 570.899264][T16282] Kernel panic - not syncing: Fatal exception [ 570.905588][T16282] Kernel Offset: disabled [ 570.909903][T16282] Rebooting in 86400 seconds..