last executing test programs: 4.91880114s ago: executing program 0 (id=896): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) 4.635934085s ago: executing program 3 (id=897): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB='\n\x00A'], 0x64}}, 0x0) 4.549961134s ago: executing program 1 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}}, 0x4000000) 4.179661993s ago: executing program 4 (id=900): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000006d00190c00000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100000000000000018003480140075006e723000000000000000000000000000140003007665746831"], 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x4040) 4.163111358s ago: executing program 0 (id=901): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b52, &(0x7f0000000000)) 4.007457092s ago: executing program 3 (id=902): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=@newtaction={0x8c, 0x30, 0x80d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0xfffffffffffffd74, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.880502666s ago: executing program 2 (id=903): r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0xb, 0x2012, r0, 0x82000000) 3.729912597s ago: executing program 1 (id=904): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.35917828s ago: executing program 4 (id=905): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./bus\x00', 0x840, &(0x7f0000000040)=ANY=[], 0x4b, 0x237, &(0x7f0000000400)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000002f40)='./file1\x00', 0x0, 0x0) 3.358741317s ago: executing program 0 (id=906): mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) signalfd(0xffffffffffffffff, &(0x7f00000128c0)={[0x2]}, 0x8) 3.27066811s ago: executing program 3 (id=907): openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000000), 0xc00, 0x0) 3.106488655s ago: executing program 1 (id=908): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x10, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) 2.997126782s ago: executing program 2 (id=909): r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0xfffffffffffffffe) 2.66954416s ago: executing program 0 (id=910): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$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") mount$nfs(0x0, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x80000, 0x0) 2.538401395s ago: executing program 3 (id=911): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32, @ANYBLOB="000000000000000018002280"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 2.45045573s ago: executing program 4 (id=912): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb180000000003000500000000000a"], 0x58}, 0x1, 0x7}, 0x0) 2.449997979s ago: executing program 1 (id=913): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10092, &(0x7f0000000080)={[{@nodioread_nolock}]}, 0xff, 0x249, &(0x7f0000000880)="$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") open(&(0x7f0000000040)='./file1\x00', 0x88040, 0x1e) 2.335491175s ago: executing program 2 (id=914): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="9302a000"], 0x232) 1.986349309s ago: executing program 3 (id=915): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, &(0x7f0000019ec0)={[&(0x7f0000019dc0)='\x00\xc7\xf2\x7f\x02\bq\xc0q\xb8_\xfd$\x93[m\xe7}\xb4/\xdc\x9e\xa4\\/7\xe9I\x9b\xf2.:=p\xd05c\xe5\xde\xb8p\xbe\xb0', &(0x7f00000190c0)='\x00']}) 1.727398886s ago: executing program 4 (id=916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 1.726888629s ago: executing program 0 (id=917): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x0, 0x2, 0x1ff, 0x9, 0xffffffffffffffff}) 1.540319059s ago: executing program 2 (id=918): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b564", 0x2}], 0x1, &(0x7f0000000b00)=[{0x38, 0x29, 0x37, "bf044ee5998d5a8a126d8775b8be4d563ea78317f3b62de5706a01fb40d21ac767"}], 0x38}, 0x0) 1.517951289s ago: executing program 1 (id=919): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@umask}, {}, {@nls={'nls', 0x3d, 'iso8859-6'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@uid}]}, 0x20, 0x6de, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1.267045943s ago: executing program 3 (id=920): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.120269517s ago: executing program 4 (id=921): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) 959.351351ms ago: executing program 0 (id=922): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_clone3(&(0x7f0000000400)={0x400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 795.310907ms ago: executing program 2 (id=923): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) 436.150743ms ago: executing program 4 (id=924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r0, 0xffffffffffffffff, 0x31, 0x0, @val=@iter={0x0}}, 0x18) 320.235494ms ago: executing program 1 (id=925): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x6, 0x1}, 0xc) 0s ago: executing program 2 (id=926): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0910000000000035090100700000000600000003000000bf98000000000000760800000000000085000000bb000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 203.948859][ T5773] cgroup: Unknown subsys name 'net' [ 204.086565][ T5773] cgroup: Unknown subsys name 'cpuset' [ 204.103640][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.837994][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.845060][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.934632][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 263.229399][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.237499][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.247456][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.255875][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.265972][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.277690][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.292438][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.300753][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.313867][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.326719][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.330636][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.344112][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.344211][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.379555][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.387889][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.395806][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.399952][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.405342][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.429203][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.444008][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.454580][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.488756][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.505906][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.531867][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.544137][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.720017][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 265.426445][ T5090] Bluetooth: hci0: command tx timeout [ 265.449851][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 265.473480][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 265.494577][ T5090] Bluetooth: hci1: command tx timeout [ 265.500300][ T5090] Bluetooth: hci2: command tx timeout [ 265.507993][ T5804] Bluetooth: hci3: command tx timeout [ 265.735410][ T5800] Bluetooth: hci4: command tx timeout [ 265.830221][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 265.856563][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 266.331184][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.339256][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.347221][ T5796] bridge_slave_0: entered allmulticast mode [ 266.357205][ T5796] bridge_slave_0: entered promiscuous mode [ 266.427450][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.435331][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.443201][ T5796] bridge_slave_1: entered allmulticast mode [ 266.453285][ T5796] bridge_slave_1: entered promiscuous mode [ 266.643495][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.745819][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.852089][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.862643][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.870706][ T5802] bridge_slave_0: entered allmulticast mode [ 266.880379][ T5802] bridge_slave_0: entered promiscuous mode [ 266.993354][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.001412][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.011063][ T5802] bridge_slave_1: entered allmulticast mode [ 267.022185][ T5802] bridge_slave_1: entered promiscuous mode [ 267.125834][ T5796] team0: Port device team_slave_0 added [ 267.270862][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.278657][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.286536][ T5805] bridge_slave_0: entered allmulticast mode [ 267.296530][ T5805] bridge_slave_0: entered promiscuous mode [ 267.361691][ T5796] team0: Port device team_slave_1 added [ 267.449639][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.457824][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.465858][ T5805] bridge_slave_1: entered allmulticast mode [ 267.474845][ T5805] bridge_slave_1: entered promiscuous mode [ 267.483889][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.493125][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.501258][ T5795] bridge_slave_0: entered allmulticast mode [ 267.506104][ T5800] Bluetooth: hci0: command tx timeout [ 267.512725][ T5795] bridge_slave_0: entered promiscuous mode [ 267.572942][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.583738][ T5800] Bluetooth: hci2: command tx timeout [ 267.589509][ T5090] Bluetooth: hci3: command tx timeout [ 267.589629][ T5090] Bluetooth: hci1: command tx timeout [ 267.613850][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.621729][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.629826][ T5809] bridge_slave_0: entered allmulticast mode [ 267.639081][ T5809] bridge_slave_0: entered promiscuous mode [ 267.692528][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.700182][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.708133][ T5795] bridge_slave_1: entered allmulticast mode [ 267.717945][ T5795] bridge_slave_1: entered promiscuous mode [ 267.773331][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.822307][ T5800] Bluetooth: hci4: command tx timeout [ 267.832606][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.840323][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.848455][ T5809] bridge_slave_1: entered allmulticast mode [ 267.857640][ T5809] bridge_slave_1: entered promiscuous mode [ 267.942772][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.950201][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.976926][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.071908][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.163553][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.171024][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.197738][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.218978][ T5802] team0: Port device team_slave_0 added [ 268.238548][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.259273][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.321382][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.364484][ T5802] team0: Port device team_slave_1 added [ 268.422786][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.442359][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.626956][ T5805] team0: Port device team_slave_0 added [ 268.774823][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.782258][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.809395][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.829661][ T5805] team0: Port device team_slave_1 added [ 268.881008][ T5809] team0: Port device team_slave_0 added [ 268.897035][ T5795] team0: Port device team_slave_0 added [ 268.921576][ T5796] hsr_slave_0: entered promiscuous mode [ 268.930892][ T5796] hsr_slave_1: entered promiscuous mode [ 268.944630][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.951860][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.978878][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.052039][ T5809] team0: Port device team_slave_1 added [ 269.116178][ T5795] team0: Port device team_slave_1 added [ 269.236205][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.243445][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.270192][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.410751][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.419536][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.447444][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.517533][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.525800][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.552306][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.576371][ T5800] Bluetooth: hci0: command tx timeout [ 269.611635][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.619357][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.646741][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.659279][ T5800] Bluetooth: hci1: command tx timeout [ 269.664976][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.665056][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.672344][ T5804] Bluetooth: hci3: command tx timeout [ 269.698285][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.703816][ T5800] Bluetooth: hci2: command tx timeout [ 269.770644][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.778300][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.805000][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.894634][ T5090] Bluetooth: hci4: command tx timeout [ 269.940645][ T5802] hsr_slave_0: entered promiscuous mode [ 269.949826][ T5802] hsr_slave_1: entered promiscuous mode [ 269.959026][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.967049][ T5802] Cannot create hsr debugfs directory [ 270.200721][ T5805] hsr_slave_0: entered promiscuous mode [ 270.211246][ T5805] hsr_slave_1: entered promiscuous mode [ 270.220479][ T5805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.228582][ T5805] Cannot create hsr debugfs directory [ 270.500341][ T5795] hsr_slave_0: entered promiscuous mode [ 270.513000][ T5795] hsr_slave_1: entered promiscuous mode [ 270.522424][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.530448][ T5795] Cannot create hsr debugfs directory [ 270.575826][ T5809] hsr_slave_0: entered promiscuous mode [ 270.586405][ T5809] hsr_slave_1: entered promiscuous mode [ 270.595819][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.603636][ T5809] Cannot create hsr debugfs directory [ 271.487528][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.563662][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 271.590271][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 271.629732][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.667711][ T5090] Bluetooth: hci0: command tx timeout [ 271.734808][ T5090] Bluetooth: hci2: command tx timeout [ 271.740529][ T5090] Bluetooth: hci3: command tx timeout [ 271.747078][ T5800] Bluetooth: hci1: command tx timeout [ 271.991530][ T5804] Bluetooth: hci4: command tx timeout [ 272.241554][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.281505][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.322768][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.348035][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.418179][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.501591][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.558118][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.595438][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.709709][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.770548][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.863003][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.953245][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 273.258507][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 273.291847][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 273.327208][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 273.373566][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.381677][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 273.638626][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.796083][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.803887][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.952665][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.960652][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.001907][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.229728][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.290738][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.403550][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.411412][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.538782][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.607992][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.615801][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.690533][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.710739][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.887558][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.895293][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.987436][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.995231][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.165314][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.242079][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.297697][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.305497][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.446697][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.454499][ T1870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.523414][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.750293][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.758081][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.775624][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.783296][ T1870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.041073][ T5805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.052097][ T5805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.639259][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.267042][ T5796] veth0_vlan: entered promiscuous mode [ 277.450187][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.487475][ T5796] veth1_vlan: entered promiscuous mode [ 277.908292][ T5796] veth0_macvtap: entered promiscuous mode [ 278.022642][ T5796] veth1_macvtap: entered promiscuous mode [ 278.246922][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.265394][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.366444][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.457865][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.482900][ T5796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.494101][ T5796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.503592][ T5796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.514901][ T5796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.566012][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.008698][ T5795] veth0_vlan: entered promiscuous mode [ 279.132529][ T5809] veth0_vlan: entered promiscuous mode [ 279.183524][ T5795] veth1_vlan: entered promiscuous mode [ 279.241847][ T5809] veth1_vlan: entered promiscuous mode [ 279.374976][ T5805] veth0_vlan: entered promiscuous mode [ 279.537167][ T5805] veth1_vlan: entered promiscuous mode [ 279.688703][ T5795] veth0_macvtap: entered promiscuous mode [ 279.803587][ T5795] veth1_macvtap: entered promiscuous mode [ 279.823708][ T5809] veth0_macvtap: entered promiscuous mode [ 279.942463][ T5805] veth0_macvtap: entered promiscuous mode [ 279.962808][ T5809] veth1_macvtap: entered promiscuous mode [ 280.036188][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.083740][ T5805] veth1_macvtap: entered promiscuous mode [ 280.191134][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.284549][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.309072][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.319576][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.329642][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.338824][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.408058][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.430028][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.490786][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.558637][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.568807][ T5809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.578247][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.587527][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.674007][ T5805] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.683371][ T5805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.693309][ T5805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.703556][ T5805] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.028985][ T5802] veth0_vlan: entered promiscuous mode [ 281.160882][ T5802] veth1_vlan: entered promiscuous mode [ 281.451472][ T5802] veth0_macvtap: entered promiscuous mode [ 281.558965][ T5802] veth1_macvtap: entered promiscuous mode [ 281.813784][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.943002][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.043208][ T5802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.053037][ T5802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.064761][ T5802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.073859][ T5802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.860929][ T4659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.870207][ T4659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.123661][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.133005][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.556871][ T5796] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 288.036851][ T3891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.046220][ T3891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.177301][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.185691][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.335378][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.343871][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.372387][ T4659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.382075][ T4659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.853382][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.862420][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.281471][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.290508][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.108244][ T5990] loop0: detected capacity change from 0 to 256 [ 290.422748][ T5990] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb080095b, utbl_chksum : 0xe619d30d) [ 290.741792][ T4659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.750286][ T4659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.185946][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.194553][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.308896][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.315978][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.702796][ T6004] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 292.375496][ T6010] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.5'. [ 294.308892][ T6025] loop3: detected capacity change from 0 to 4096 [ 294.636009][ T6025] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 294.662499][ T6040] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.673437][ T6025] ntfs3(loop3): Failed to load $Extend (-22). [ 294.680289][ T6025] ntfs3(loop3): Failed to initialize $Extend. [ 294.775582][ T6025] ntfs3(loop3): ino=5, "/" indx_read [ 295.839407][ T6052] ip6t_srh: unknown srh invflags 7863 [ 296.305588][ T6059] netlink: 52 bytes leftover after parsing attributes in process `syz.3.37'. [ 297.253622][ T30] audit: type=1326 audit(1749065446.833:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f838e929 code=0x7ffc0000 [ 297.277386][ T30] audit: type=1326 audit(1749065446.833:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f838e929 code=0x7ffc0000 [ 297.489308][ T30] audit: type=1326 audit(1749065446.923:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fd7f838e929 code=0x7ffc0000 [ 297.512085][ T30] audit: type=1326 audit(1749065446.923:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f838e929 code=0x7ffc0000 [ 297.540044][ T30] audit: type=1326 audit(1749065446.923:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f838e929 code=0x7ffc0000 [ 297.901483][ T6081] netlink: 'syz.1.48': attribute type 24 has an invalid length. [ 297.910087][ T6081] netlink: 'syz.1.48': attribute type 1 has an invalid length. [ 297.918402][ T6081] netlink: 224 bytes leftover after parsing attributes in process `syz.1.48'. [ 300.592529][ T6119] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 301.088124][ T6127] netlink: 64 bytes leftover after parsing attributes in process `syz.3.71'. [ 301.181496][ T11] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 301.424618][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 301.518789][ T11] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 301.530776][ T11] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 301.540018][ T11] usb 5-1: Product: syz [ 301.544569][ T11] usb 5-1: Manufacturer: syz [ 301.549461][ T11] usb 5-1: SerialNumber: syz [ 301.710004][ T11] usb 5-1: config 0 descriptor?? [ 301.758465][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 301.815277][ T11] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 302.052646][ T6126] loop0: detected capacity change from 0 to 4096 [ 302.171526][ T6126] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 302.226506][ T11] gspca_zc3xx: reg_r err -71 [ 302.237640][ T11] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 302.305431][ T11] usb 5-1: USB disconnect, device number 2 [ 302.736546][ T6126] ntfs3(loop0): ino=0, attr_set_size [ 302.742230][ T6126] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 303.809765][ T6150] netlink: 'syz.1.81': attribute type 2 has an invalid length. [ 305.570058][ T11] IPVS: starting estimator thread 0... [ 305.665140][ T6173] IPVS: using max 192 ests per chain, 9600 per kthread [ 307.244612][ T6195] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 307.308944][ T6187] loop0: detected capacity change from 0 to 4096 [ 307.868784][ T6187] ntfs3(loop0): ino=1a, mi_enum_attr [ 307.878084][ T6187] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 308.457986][ T4975] ntfs3(loop0): ino=5, mi_enum_attr [ 308.494964][ T4975] ntfs3(loop0): ino=5, mi_enum_attr [ 308.500658][ T4975] ntfs3(loop0): ino=1e, failed to open parent directory r=5 to update [ 311.468990][ T6246] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 312.681908][ T6257] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 313.447087][ T6266] /dev/nullb0: Can't open blockdev [ 314.602205][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.144'. [ 314.668324][ T6283] loop3: detected capacity change from 0 to 256 [ 314.746669][ T6283] exfat: Deprecated parameter 'namecase' [ 314.890201][ T6283] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 314.908091][ T6289] libceph: resolve '4' (ret=-3): failed [ 315.622398][ T30] audit: type=1326 audit(1749065465.193:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 315.774895][ T30] audit: type=1326 audit(1749065465.253:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 315.798131][ T30] audit: type=1326 audit(1749065465.263:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 315.821716][ T30] audit: type=1326 audit(1749065465.263:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 315.844701][ T30] audit: type=1326 audit(1749065465.263:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 316.231929][ T6304] netlink: 'syz.0.155': attribute type 3 has an invalid length. [ 316.244529][ T6304] netlink: 132 bytes leftover after parsing attributes in process `syz.0.155'. [ 317.336445][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.164'. [ 317.363280][ T6321] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 317.372961][ T6321] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 317.383648][ T6321] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 317.400222][ T6321] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 319.918158][ T6350] loop3: detected capacity change from 0 to 256 [ 319.927192][ T6349] xt_ecn: cannot match TCP bits for non-tcp packets [ 319.967956][ T6350] exfat: Deprecated parameter 'utf8' [ 320.077263][ T6350] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 320.914011][ T6362] cgroup: name respecified [ 321.805744][ T6374] loop1: detected capacity change from 0 to 1024 [ 322.025590][ T6374] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 322.032351][ T6374] hfsplus: xattr searching failed [ 322.587036][ T6381] loop0: detected capacity change from 0 to 1764 [ 322.726579][ T6381] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 322.767528][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 324.432731][ T6405] loop4: detected capacity change from 0 to 4096 [ 324.731103][ T6414] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.951661][ T6407] loop0: detected capacity change from 0 to 4096 [ 325.043031][ T6407] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 325.516001][ T6407] ntfs3(loop0): ino=19, mi_enum_attr [ 325.521691][ T6407] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 325.974078][ T6423] xt_hashlimit: invalid interval [ 326.015686][ T11] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 326.254099][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 326.302210][ T11] usb 4-1: not running at top speed; connect to a high speed hub [ 326.338507][ T11] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 326.461225][ T11] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.471525][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.481779][ T11] usb 4-1: Product: syz [ 326.487007][ T11] usb 4-1: Manufacturer: syz [ 326.491922][ T11] usb 4-1: SerialNumber: syz [ 327.027282][ T11] cdc_ncm 4-1:1.0: bind() failure [ 327.046927][ T11] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 327.054533][ T11] cdc_ncm 4-1:1.1: bind() failure [ 327.324683][ T11] usb 4-1: USB disconnect, device number 2 [ 328.553484][ T6447] loop4: detected capacity change from 0 to 512 [ 328.851531][ T6447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.869104][ T6447] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.645101][ T6463] warning: `syz.0.230' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 329.689226][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.871463][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 330.843370][ T6477] loop1: detected capacity change from 0 to 128 [ 331.024594][ T6477] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 331.115545][ T6477] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 331.233016][ T6477] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 331.775844][ T5796] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.225815][ T6507] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 333.238086][ T6508] netlink: 300 bytes leftover after parsing attributes in process `syz.1.251'. [ 335.450357][ T6538] sit0: entered promiscuous mode [ 335.475318][ T6538] netlink: 'syz.4.267': attribute type 3 has an invalid length. [ 335.483332][ T6538] netlink: 1 bytes leftover after parsing attributes in process `syz.4.267'. [ 336.316284][ T6546] loop2: detected capacity change from 0 to 1764 [ 336.655908][ T6552] netlink: zone id is out of range [ 338.254941][ T5882] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 338.388209][ T6573] loop3: detected capacity change from 0 to 64 [ 338.559795][ T6573] Trying to free block not in datazone [ 338.560895][ T5882] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 338.575593][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.589458][ T5882] usb 5-1: Product: syz [ 338.593921][ T5882] usb 5-1: Manufacturer: syz [ 338.600783][ T5882] usb 5-1: SerialNumber: syz [ 338.768128][ T5882] usb 5-1: config 0 descriptor?? [ 339.062724][ T5882] hso 5-1:0.0: Failed to find BULK IN ep [ 339.274070][ T5882] usb 5-1: USB disconnect, device number 3 [ 339.391905][ T6580] loop1: detected capacity change from 0 to 256 [ 339.851621][ T11] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 340.119206][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.135276][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.232652][ T11] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 340.242686][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 340.251316][ T11] usb 1-1: SerialNumber: syz [ 340.460972][ T11] usb 1-1: 0:2 : does not exist [ 340.505673][ T6589] loop1: detected capacity change from 0 to 512 [ 340.577420][ T6584] loop3: detected capacity change from 0 to 4096 [ 340.613665][ T11] usb 1-1: USB disconnect, device number 2 [ 340.619727][ T6584] ======================================================= [ 340.619727][ T6584] WARNING: The mand mount option has been deprecated and [ 340.619727][ T6584] and is ignored by this kernel. Remove the mand [ 340.619727][ T6584] option from the mount to silence this warning. [ 340.619727][ T6584] ======================================================= [ 340.745917][ T6584] ntfs3(loop3): ino=3, Correct links count -> 2. [ 340.763508][ T6589] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.292: iget: bad i_size value: 38620345925642 [ 340.870918][ T6589] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.292: couldn't read orphan inode 15 (err -117) [ 340.920547][ T6589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.981457][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.082528][ T6589] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.292: iget: bad i_size value: 38620345925642 [ 341.840686][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.580101][ T6606] ISOFS: Unable to identify CD-ROM format. [ 343.003254][ T6612] loop3: detected capacity change from 0 to 64 [ 343.247228][ T6605] loop4: detected capacity change from 0 to 4096 [ 343.315159][ T6605] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 345.261658][ T6636] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 346.958676][ T6657] netlink: 'syz.2.325': attribute type 13 has an invalid length. [ 348.629824][ T6679] x_tables: duplicate underflow at hook 2 [ 349.063815][ T6682] netlink: 'syz.4.339': attribute type 2 has an invalid length. [ 349.072305][ T6682] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 349.080900][ T6682] netlink: 32 bytes leftover after parsing attributes in process `syz.4.339'. [ 349.580452][ T6678] infiniband syz1: set active [ 349.585670][ T6678] infiniband syz1: added bond0 [ 349.688814][ T6678] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 349.767861][ T6678] infiniband syz1: Couldn't open port 1 [ 349.929269][ T6678] RDS/IB: syz1: added [ 349.933642][ T6678] smc: adding ib device syz1 with port count 1 [ 349.940583][ T6678] smc: ib device syz1 port 1 has pnetid [ 352.485650][ T6717] netlink: 'syz.4.354': attribute type 3 has an invalid length. [ 352.723547][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.732219][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.915194][ T6731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.361'. [ 354.060273][ T6733] netlink: 'syz.0.362': attribute type 3 has an invalid length. [ 355.947135][ T30] audit: type=1326 audit(1749065505.523:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 356.006934][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 356.102474][ T30] audit: type=1326 audit(1749065505.603:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 356.125066][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.131809][ T30] audit: type=1326 audit(1749065505.603:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 356.154886][ T30] audit: type=1326 audit(1749065505.603:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 357.201851][ T6775] loop0: detected capacity change from 0 to 2048 [ 357.290618][ T6775] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 357.446226][ T6782] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.006491][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.387'. [ 358.016058][ T6788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.387'. [ 358.660455][ T6796] mkiss: ax0: crc mode is auto. [ 359.405480][ T6808] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 359.456002][ T6811] netlink: 'syz.4.397': attribute type 30 has an invalid length. [ 359.464950][ T6811] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 359.479084][ T6811] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 360.771257][ T6828] loop3: detected capacity change from 0 to 1024 [ 361.004555][ T6828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.559841][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.766982][ T6844] loop0: detected capacity change from 0 to 2048 [ 361.959328][ T6844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.609007][ T6856] loop1: detected capacity change from 0 to 512 [ 362.694891][ T6856] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 362.715879][ T11] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 362.811783][ T6856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 362.880424][ T6856] EXT4-fs (loop1): orphan cleanup on readonly fs [ 362.944133][ T6856] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.419: bg 0: block 361: padding at end of block bitmap is not set [ 362.946678][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 363.045298][ T6856] EXT4-fs (loop1): Remounting filesystem read-only [ 363.081451][ T6856] EXT4-fs (loop1): 1 truncate cleaned up [ 363.090201][ T6856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 363.176639][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.187525][ T11] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 363.199575][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 363.211031][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 363.223029][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 363.234356][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.393354][ T6856] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.419: dx entry: limit 0 != root limit 125 [ 363.406237][ T6856] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.419: Corrupt directory, running e2fsck is recommended [ 363.639863][ T11] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 363.649577][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.658238][ T11] usb 3-1: Product: syz [ 363.662684][ T11] usb 3-1: Manufacturer: syz [ 363.667781][ T11] usb 3-1: SerialNumber: syz [ 363.713291][ T11] usb 3-1: config 0 descriptor?? [ 363.721384][ T6854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 364.080693][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 365.735374][ T11] rc_core: IR keymap rc-snapstream-firefly not found [ 365.742377][ T11] Registered IR keymap rc-empty [ 365.753062][ T11] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 365.766631][ T11] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 366.031201][ T11] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 366.523481][ C0] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 366.531618][ T11] usb 3-1: USB disconnect, device number 2 [ 367.908282][ T6902] loop0: detected capacity change from 0 to 512 [ 368.168445][ T6902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.185901][ T6902] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.472323][ T6909] netlink: 68 bytes leftover after parsing attributes in process `syz.4.441'. [ 368.482799][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 368.605055][ T5882] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 368.836843][ T5882] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 368.846867][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.943816][ T5882] usb 1-1: config 0 descriptor?? [ 368.948542][ T6915] xt_ecn: cannot match TCP bits for non-tcp packets [ 369.187364][ T5882] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 369.235874][ T5882] [drm:udl_init] *ERROR* Selecting channel failed [ 369.346385][ T5882] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 369.353460][ T5882] [drm] Initialized udl on minor 2 [ 369.465195][ T5882] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 369.476327][ T5882] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 369.489575][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 369.529693][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 369.538743][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 369.599705][ T5882] usb 1-1: USB disconnect, device number 3 [ 370.262521][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.485534][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 371.194640][ T6936] misc userio: No port type given on /dev/userio [ 372.038343][ T6944] loop1: detected capacity change from 0 to 4096 [ 372.143992][ T6944] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 372.597119][ T6944] ntfs3(loop1): ino=1a, mi_enum_attr [ 372.602842][ T6944] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 372.645673][ T6944] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 372.819449][ T6959] veth0_to_bond: entered allmulticast mode [ 373.796222][ T6966] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 373.804704][ T6966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.468'. [ 373.823431][ T6966] batadv0: entered promiscuous mode [ 373.831905][ T6966] batadv0: entered allmulticast mode [ 373.842984][ T6966] bridge0: port 3(batadv0) entered blocking state [ 373.850419][ T6966] bridge0: port 3(batadv0) entered disabled state [ 373.864409][ T6966] bridge0: port 3(batadv0) entered blocking state [ 373.871765][ T6966] bridge0: port 3(batadv0) entered forwarding state [ 374.212274][ T4659] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 374.227004][ T4659] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 374.294775][ T6972] loop2: detected capacity change from 0 to 64 [ 374.645528][ T6974] loop0: detected capacity change from 0 to 256 [ 374.966627][ T6979] binder: 6977:6979 unknown command 1074553622 [ 374.973553][ T6979] binder: 6977:6979 ioctl c0306201 200000000300 returned -22 [ 374.999303][ T6980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.146453][ T6974] FAT-fs (loop0): Directory bread(block 64) failed [ 375.153522][ T6974] FAT-fs (loop0): Directory bread(block 65) failed [ 375.160858][ T6974] FAT-fs (loop0): Directory bread(block 66) failed [ 375.167851][ T6974] FAT-fs (loop0): Directory bread(block 67) failed [ 375.175274][ T6974] FAT-fs (loop0): Directory bread(block 68) failed [ 375.182123][ T6974] FAT-fs (loop0): Directory bread(block 69) failed [ 375.189322][ T6974] FAT-fs (loop0): Directory bread(block 70) failed [ 375.196289][ T6974] FAT-fs (loop0): Directory bread(block 71) failed [ 375.203303][ T6974] FAT-fs (loop0): Directory bread(block 72) failed [ 375.210314][ T6974] FAT-fs (loop0): Directory bread(block 73) failed [ 377.065702][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'. [ 377.077355][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.487'. [ 377.414028][ T7008] capability: warning: `syz.3.490' uses deprecated v2 capabilities in a way that may be insecure [ 378.853700][ T7029] loop3: detected capacity change from 0 to 1024 [ 379.079430][ T7029] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 379.086867][ T7029] hfsplus: xattr searching failed [ 380.377210][ T7055] loop2: detected capacity change from 0 to 8 [ 380.698131][ T7059] usb usb8: usbfs: process 7059 (syz.3.514) did not claim interface 0 before use [ 381.414864][ T5882] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 381.624624][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 381.676608][ T5882] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 381.685579][ T5882] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 381.699715][ T5882] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 381.710407][ T5882] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 381.719333][ T5882] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 381.728756][ T5882] usb 4-1: config 0 has no interface number 0 [ 381.735306][ T5882] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 381.746938][ T5882] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 381.757379][ T5882] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 381.767729][ T5882] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.781561][ T5882] usb 4-1: config 0 interface 125 has no altsetting 0 [ 381.784991][ T7075] loop0: detected capacity change from 0 to 256 [ 381.788777][ T5882] usb 4-1: config 0 interface 125 has no altsetting 2 [ 382.149887][ T5882] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 382.159607][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.168283][ T5882] usb 4-1: Product: syz [ 382.172752][ T5882] usb 4-1: Manufacturer: syz [ 382.177913][ T5882] usb 4-1: SerialNumber: syz [ 382.290835][ T7081] loop2: detected capacity change from 0 to 164 [ 382.348952][ T5882] usb 4-1: config 0 descriptor?? [ 382.420011][ T5882] usb 4-1: selecting invalid altsetting 2 [ 382.504734][ T7081] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 382.783802][ C1] usb 4-1: async_complete: urb error -71 [ 382.790326][ C1] usb 4-1: async_complete: urb error -71 [ 382.796718][ C1] usb 4-1: async_complete: urb error -71 [ 382.839367][ T5882] get_1284_register: usb error -71 [ 382.845376][ T5882] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 382.903612][ T5882] usb 4-1: USB disconnect, device number 3 [ 383.576461][ T7096] x_tables: duplicate underflow at hook 3 [ 384.654693][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 384.802935][ T7111] .: renamed from bond0 (while UP) [ 384.913753][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 384.925355][ T11] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 384.937422][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 384.948820][ T11] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 384.958464][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.227864][ T11] usb 2-1: config 0 descriptor?? [ 385.286171][ T11] em28xx 2-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 385.296380][ T11] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 385.497577][ T5090] Bluetooth: hci0: command 0x0406 tx timeout [ 385.525471][ T11] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 385.592803][ T11] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 385.705254][ T11] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 385.712647][ T11] em28xx 2-1:0.0: No AC97 audio processor [ 385.736351][ T7117] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 385.745032][ T7117] netlink: 224 bytes leftover after parsing attributes in process `syz.0.542'. [ 385.857923][ T11] usb 2-1: USB disconnect, device number 2 [ 385.867468][ T11] em28xx 2-1:0.0: Disconnecting em28xx [ 386.186141][ T11] em28xx 2-1:0.0: Freeing device [ 386.353673][ T7122] netlink: 420 bytes leftover after parsing attributes in process `syz.4.545'. [ 387.594938][ T7137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.553'. [ 387.604815][ T7137] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 387.638482][ T11] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 387.853793][ T11] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 387.865733][ T11] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 387.878333][ T11] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 387.887946][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.221366][ T7143] netlink: 'syz.4.555': attribute type 2 has an invalid length. [ 388.229548][ T7143] netlink: 192444 bytes leftover after parsing attributes in process `syz.4.555'. [ 388.502549][ T11] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 388.515283][ T11] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input10 [ 388.593010][ T11] input: failed to attach handler kbd to device input10, error: -5 [ 388.722922][ T11] usb 4-1: USB disconnect, device number 4 [ 388.725636][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.558'. [ 389.573283][ T7157] netlink: 'syz.2.562': attribute type 21 has an invalid length. [ 390.162766][ T7164] loop4: detected capacity change from 0 to 64 [ 390.616963][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 390.624006][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 390.633320][ T5090] Bluetooth: hci1: command 0x0406 tx timeout [ 391.048042][ T7172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.077159][ T7172] bond0: (slave rose0): Enslaving as an active interface with an up link [ 392.083754][ T7190] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request [ 392.185270][ T7188] loop0: detected capacity change from 0 to 2048 [ 392.269861][ T7188] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 392.388906][ T7195] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.534821][ T7188] process 'syz.0.575' launched './file2' with NULL argv: empty string added [ 392.604096][ T7188] syz.0.575: attempt to access beyond end of device [ 392.604096][ T7188] loop0: rw=0, sector=3120, nr_sectors = 2 limit=2048 [ 392.621592][ T7188] Buffer I/O error on dev loop0, logical block 1560, async page read [ 392.657092][ T7188] syz.0.575: attempt to access beyond end of device [ 392.657092][ T7188] loop0: rw=0, sector=3120, nr_sectors = 2 limit=2048 [ 392.671090][ T7188] Buffer I/O error on dev loop0, logical block 1560, async page read [ 392.712226][ T30] audit: type=1800 audit(1749065542.263:16): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.575" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 392.982826][ T7203] loop3: detected capacity change from 0 to 256 [ 393.829328][ T7213] loop2: detected capacity change from 0 to 512 [ 393.897587][ T7213] EXT4-fs: Ignoring removed mblk_io_submit option [ 394.074717][ T7213] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 394.110383][ T7213] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.586: attempt to clear invalid blocks 2 len 1 [ 394.233279][ T7213] EXT4-fs (loop2): Remounting filesystem read-only [ 394.337399][ T7213] EXT4-fs (loop2): 1 truncate cleaned up [ 394.346261][ T7213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.892125][ T5809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.972868][ T7230] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 395.275913][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 395.910169][ T7245] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 396.006170][ T7248] capability: warning: `syz.1.599' uses 32-bit capabilities (legacy support in use) [ 397.299886][ T7264] loop2: detected capacity change from 0 to 1024 [ 398.031528][ T7277] loop4: detected capacity change from 0 to 64 [ 398.271488][ T7277] Bad inode number on dev loop4: 327685 is out of range [ 399.823996][ T7289] loop0: detected capacity change from 0 to 4096 [ 400.952840][ T7315] loop3: detected capacity change from 0 to 1024 [ 402.355515][ T7326] netlink: 'syz.1.631': attribute type 10 has an invalid length. [ 402.364856][ T7326] bridge0: port 3(netdevsim3) entered blocking state [ 402.372317][ T7326] bridge0: port 3(netdevsim3) entered disabled state [ 402.388363][ T7326] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 402.401966][ T7326] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 402.412389][ T7326] bridge0: port 3(netdevsim3) entered blocking state [ 402.419886][ T7326] bridge0: port 3(netdevsim3) entered forwarding state [ 402.555718][ T7329] netlink: 596 bytes leftover after parsing attributes in process `syz.3.632'. [ 405.243220][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 405.282278][ T7359] veth2: entered promiscuous mode [ 405.287966][ T7359] veth2: entered allmulticast mode [ 406.595977][ T7376] loop4: detected capacity change from 0 to 64 [ 410.665716][ T5882] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 410.900811][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 410.986385][ T5882] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 410.997148][ T5882] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 411.006665][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 411.016358][ T5882] usb 4-1: config 1 has no interface number 0 [ 411.022759][ T5882] usb 4-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 411.034710][ T5882] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 411.044826][ T5882] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 411.058460][ T5882] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 411.068010][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.191531][ T7439] loop0: detected capacity change from 0 to 64 [ 411.347038][ T5882] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 411.614602][ T5882] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 411.623992][ T5882] snd_usb_pod 4-1:1.1: invalid control EP [ 411.630606][ T5882] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 411.637911][ T5882] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 411.648234][ T5882] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 411.822148][ T11] usb 4-1: USB disconnect, device number 5 [ 413.510846][ T7465] mmap: syz.1.692 (7465) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 413.913534][ T7470] netlink: 'syz.3.695': attribute type 4 has an invalid length. [ 414.220991][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.227905][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 417.872712][ T7531] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 417.900858][ T7531] CIFS mount error: No usable UNC path provided in device string! [ 417.900858][ T7531] [ 417.915221][ T7531] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 418.073997][ T7530] loop1: detected capacity change from 0 to 1024 [ 418.097549][ T7534] xt_hashlimit: max too large, truncated to 1048576 [ 418.104666][ T7534] xt_hashlimit: overflow, try lower: 9/0 [ 418.571807][ T1870] hfsplus: b-tree write err: -5, ino 4 [ 418.948523][ T7545] netlink: 'syz.0.732': attribute type 3 has an invalid length. [ 418.956907][ T7545] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.732'. [ 419.185259][ T7549] xt_cluster: you have exceeded the maximum number of cluster nodes (969 > 32) [ 421.057351][ T7576] loop3: detected capacity change from 0 to 16 [ 421.127282][ T7576] erofs (device loop3): mounted with root inode @ nid 36. [ 421.824972][ T7586] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 422.323342][ T7590] loop0: detected capacity change from 0 to 2048 [ 422.513163][ T7590] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 422.620838][ T7590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.987438][ T7603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.756'. [ 422.997083][ T7603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'. [ 423.740726][ T7614] loop0: detected capacity change from 0 to 128 [ 424.012692][ T7614] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 424.128626][ T7614] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.311037][ T7614] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.759: No space for directory leaf checksum. Please run e2fsck -D. [ 424.327164][ T7614] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.759: checksumming directory block 0 [ 424.773017][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'. [ 424.782927][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'. [ 424.921684][ T5795] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.880608][ T7642] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.770'. [ 425.891586][ T7642] openvswitch: netlink: Message has 44053 unknown bytes. [ 427.054854][ T7652] loop1: detected capacity change from 0 to 512 [ 427.398854][ T7652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 427.412304][ T7652] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.277081][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 428.386002][ T7669] mmap: syz.3.781 (7669): VmData 37494784 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 429.710644][ T7685] netlink: 56 bytes leftover after parsing attributes in process `syz.4.790'. [ 429.724108][ T7685] netlink: 'syz.4.790': attribute type 1 has an invalid length. [ 430.360949][ T7689] loop2: detected capacity change from 0 to 2048 [ 430.408150][ T7689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 430.415617][ T7689] EXT4-fs: Ignoring removed nobh option [ 430.578180][ T7689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.805775][ T7689] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.791: bg 0: block 2: invalid block bitmap [ 430.874819][ T7689] EXT4-fs (loop2): Remounting filesystem read-only [ 431.334102][ T5809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.659541][ T7707] loop4: detected capacity change from 0 to 2048 [ 431.682068][ T5852] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 431.740044][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 431.796816][ T7716] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 431.855507][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 431.892552][ T7707] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 431.924971][ T5852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 431.934664][ T5852] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 431.945497][ T5852] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 431.957319][ T5852] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 431.967538][ T5852] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 431.981438][ T5852] usb 1-1: config 1 interface 0 has no altsetting 0 [ 431.989840][ T5852] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 431.999437][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.022523][ T7707] Remounting filesystem read-only [ 432.284483][ T5852] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 432.499334][ T5852] scsi host1: usb-storage 1-1:1.0 [ 432.702381][ T5852] usb 1-1: USB disconnect, device number 4 [ 433.809389][ T7736] loop4: detected capacity change from 0 to 16 [ 433.937848][ T7736] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 433.950602][ T7736] erofs (device loop4): mounted with root inode @ nid 36. [ 434.035380][ T30] audit: type=1326 audit(1749065583.593:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 434.104816][ T7736] syz.4.810: attempt to access beyond end of device [ 434.104816][ T7736] loop4: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 434.119676][ T7736] erofs (device loop4): read error -5 @ 0 of nid 36 [ 434.164635][ T30] audit: type=1326 audit(1749065583.733:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 434.187674][ T30] audit: type=1326 audit(1749065583.733:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 434.210827][ T30] audit: type=1326 audit(1749065583.733:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e38e929 code=0x7ffc0000 [ 437.683222][ T7789] x_tables: unsorted underflow at hook 3 [ 438.267165][ T7798] loop1: detected capacity change from 0 to 64 [ 440.110006][ T7825] xt_l2tp: missing protocol rule (udp|l2tpip) [ 440.354903][ T5852] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 440.566537][ T5852] usb 4-1: Using ep0 maxpacket: 8 [ 440.654761][ T5852] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 440.671002][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.683270][ T5852] usb 4-1: Product: syz [ 440.689149][ T5852] usb 4-1: Manufacturer: syz [ 440.694056][ T5852] usb 4-1: SerialNumber: syz [ 440.835075][ T5852] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 441.325669][ T5852] gspca_m5602: Failed to find a sensor [ 441.331713][ T5852] ALi m5602 4-1:8.0: ALi m5602 webcam failed [ 441.451141][ T5852] usb 4-1: USB disconnect, device number 6 [ 441.758946][ T7839] loop0: detected capacity change from 0 to 1764 [ 443.151745][ T7858] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 444.072156][ T7873] raw_sendmsg: syz.1.878 forgot to set AF_INET. Fix it! [ 444.361886][ T30] audit: type=1326 audit(1749065593.933:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230618e929 code=0x7ffc0000 [ 444.529269][ T30] audit: type=1326 audit(1749065594.003:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f230618e929 code=0x7ffc0000 [ 444.552867][ T30] audit: type=1326 audit(1749065594.003:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230618e929 code=0x7ffc0000 [ 444.806269][ T7869] loop4: detected capacity change from 0 to 4096 [ 444.865551][ T7869] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 445.356338][ T7869] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 445.793763][ T7890] loop3: detected capacity change from 0 to 2048 [ 445.951430][ T7890] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 446.020957][ T7893] netlink: 'syz.0.887': attribute type 11 has an invalid length. [ 446.035443][ T7890] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 446.856869][ T7902] loop1: detected capacity change from 0 to 64 [ 448.404913][ T7922] netlink: 72 bytes leftover after parsing attributes in process `syz.3.902'. [ 449.030052][ T7929] loop4: detected capacity change from 0 to 8 [ 449.100255][ T7932] random: crng reseeded on system resumption [ 449.258931][ T7929] SQUASHFS error: Failed to read block 0x60: -5 [ 449.291454][ T30] audit: type=1800 audit(1749065598.853:24): pid=7929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.905" name="file1" dev="loop4" ino=1 res=0 errno=0 [ 449.774877][ T7938] loop0: detected capacity change from 0 to 164 [ 449.937635][ T7938] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 449.955295][ T7943] loop1: detected capacity change from 0 to 128 [ 450.141939][ T7943] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 450.213135][ T7943] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.238111][ T7943] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.913: No space for directory leaf checksum. Please run e2fsck -D. [ 450.254562][ T7943] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.913: checksumming directory block 0 [ 450.618319][ T5796] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.174958][ T7959] loop1: detected capacity change from 0 to 1024 [ 451.345465][ T5852] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 451.544561][ T5852] usb 4-1: Using ep0 maxpacket: 8 [ 451.584969][ T5852] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 451.593428][ T5852] usb 4-1: config 2 has no interface number 0 [ 451.600136][ T5852] usb 4-1: config 2 interface 31 has no altsetting 0 [ 451.705207][ T5852] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 451.714985][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.723327][ T5852] usb 4-1: Product: syz [ 451.728070][ T5852] usb 4-1: Manufacturer: syz [ 451.732949][ T5852] usb 4-1: SerialNumber: syz [ 451.806716][ T14] hfsplus: b-tree write err: -5, ino 4 [ 452.381152][ T5852] ===================================================== [ 452.389124][ T5852] BUG: KMSAN: uninit-value in mii_nway_restart+0xfe/0x220 [ 452.396763][ T5852] mii_nway_restart+0xfe/0x220 [ 452.401812][ T5852] ch9200_bind+0x21c/0xfe0 [ 452.406613][ T5852] usbnet_probe+0xbe6/0x4390 [ 452.411537][ T5852] usb_probe_interface+0xd04/0x1310 [ 452.417380][ T5852] really_probe+0x4d4/0xd90 [ 452.422137][ T5852] __driver_probe_device+0x268/0x380 [ 452.427912][ T5852] driver_probe_device+0x70/0x8b0 [ 452.433812][ T5852] __device_attach_driver+0x4ee/0x950 [ 452.439617][ T5852] bus_for_each_drv+0x3e3/0x680 [ 452.444858][ T5852] __device_attach+0x3c8/0x5c0 [ 452.449857][ T5852] device_initial_probe+0x33/0x40 [ 452.460720][ T5852] bus_probe_device+0x3ba/0x5e0 [ 452.467981][ T5852] device_add+0x12a9/0x1c10 [ 452.472936][ T5852] usb_set_configuration+0x3493/0x3b70 [ 452.480758][ T5852] usb_generic_driver_probe+0xfc/0x290 [ 452.487006][ T5852] usb_probe_device+0x38a/0x690 [ 452.492127][ T5852] really_probe+0x4d4/0xd90 [ 452.496976][ T5852] __driver_probe_device+0x268/0x380 [ 452.502514][ T5852] driver_probe_device+0x70/0x8b0 [ 452.508043][ T5852] __device_attach_driver+0x4ee/0x950 [ 452.513720][ T5852] bus_for_each_drv+0x3e3/0x680 [ 452.519005][ T5852] __device_attach+0x3c8/0x5c0 [ 452.524022][ T5852] device_initial_probe+0x33/0x40 [ 452.529439][ T5852] bus_probe_device+0x3ba/0x5e0 [ 452.535220][ T5852] device_add+0x12a9/0x1c10 [ 452.540010][ T5852] usb_new_device+0x104b/0x20c0 [ 452.545266][ T5852] hub_event+0x5588/0x7580 [ 452.549938][ T5852] process_scheduled_works+0xb8e/0x1d80 [ 452.561984][ T5852] worker_thread+0xedf/0x1590 [ 452.568777][ T5852] kthread+0xd5c/0xf00 [ 452.573110][ T5852] ret_from_fork+0x1e3/0x310 [ 452.578092][ T5852] ret_from_fork_asm+0x1a/0x30 [ 452.583183][ T5852] [ 452.585741][ T5852] Local variable buff created at: [ 452.590962][ T5852] ch9200_mdio_read+0x3d/0xd0 [ 452.596031][ T5852] mii_nway_restart+0x92/0x220 [ 452.601065][ T5852] [ 452.603597][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: kworker/0:4 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(undef) [ 452.615885][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.626933][ T5852] Workqueue: usb_hub_wq hub_event [ 452.632317][ T5852] ===================================================== [ 452.639697][ T5852] Disabling lock debugging due to kernel taint [ 452.646182][ T5852] Kernel panic - not syncing: kmsan.panic set ... [ 452.652846][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: kworker/0:4 Tainted: G B 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(undef) [ 452.666538][ T5852] Tainted: [B]=BAD_PAGE [ 452.670879][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.681181][ T5852] Workqueue: usb_hub_wq hub_event [ 452.686513][ T5852] Call Trace: [ 452.689975][ T5852] [ 452.693065][ T5852] __dump_stack+0x26/0x30 [ 452.697680][ T5852] dump_stack_lvl+0x53/0x270 [ 452.702579][ T5852] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 452.708745][ T5852] dump_stack+0x1e/0x25 [ 452.713189][ T5852] panic+0x4bd/0xd50 [ 452.717457][ T5852] kmsan_report+0x31c/0x320 [ 452.722268][ T5852] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 452.728358][ T5852] ? __msan_warning+0x1b/0x30 [ 452.733321][ T5852] ? mii_nway_restart+0xfe/0x220 [ 452.738552][ T5852] ? ch9200_bind+0x21c/0xfe0 [ 452.743780][ T5852] ? usbnet_probe+0xbe6/0x4390 [ 452.748825][ T5852] ? usb_probe_interface+0xd04/0x1310 [ 452.754491][ T5852] ? really_probe+0x4d4/0xd90 [ 452.759454][ T5852] ? __driver_probe_device+0x268/0x380 [ 452.765175][ T5852] ? driver_probe_device+0x70/0x8b0 [ 452.770634][ T5852] ? __device_attach_driver+0x4ee/0x950 [ 452.776463][ T5852] ? bus_for_each_drv+0x3e3/0x680 [ 452.781778][ T5852] ? __device_attach+0x3c8/0x5c0 [ 452.786971][ T5852] ? device_initial_probe+0x33/0x40 [ 452.792442][ T5852] ? bus_probe_device+0x3ba/0x5e0 [ 452.797783][ T5852] ? device_add+0x12a9/0x1c10 [ 452.802772][ T5852] ? usb_set_configuration+0x3493/0x3b70 [ 452.808762][ T5852] ? usb_generic_driver_probe+0xfc/0x290 [ 452.814668][ T5852] ? usb_probe_device+0x38a/0x690 [ 452.819960][ T5852] ? really_probe+0x4d4/0xd90 [ 452.824888][ T5852] ? __driver_probe_device+0x268/0x380 [ 452.830601][ T5852] ? driver_probe_device+0x70/0x8b0 [ 452.836080][ T5852] ? __device_attach_driver+0x4ee/0x950 [ 452.841889][ T5852] ? bus_for_each_drv+0x3e3/0x680 [ 452.847284][ T5852] ? __device_attach+0x3c8/0x5c0 [ 452.852470][ T5852] ? device_initial_probe+0x33/0x40 [ 452.857934][ T5852] ? bus_probe_device+0x3ba/0x5e0 [ 452.863253][ T5852] ? device_add+0x12a9/0x1c10 [ 452.868224][ T5852] ? usb_new_device+0x104b/0x20c0 [ 452.873544][ T5852] ? hub_event+0x5588/0x7580 [ 452.878927][ T5852] ? process_scheduled_works+0xb8e/0x1d80 [ 452.885149][ T5852] ? worker_thread+0xedf/0x1590 [ 452.890320][ T5852] ? kthread+0xd5c/0xf00 [ 452.894829][ T5852] ? ret_from_fork+0x1e3/0x310 [ 452.899859][ T5852] ? ret_from_fork_asm+0x1a/0x30 [ 452.905105][ T5852] ? kfree+0x3a8/0xec0 [ 452.909406][ T5852] ? control_read+0x26f/0x310 [ 452.914375][ T5852] ? kmsan_get_metadata+0xfb/0x160 [ 452.919811][ T5852] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 452.925928][ T5852] __msan_warning+0x1b/0x30 [ 452.931188][ T5852] mii_nway_restart+0xfe/0x220 [ 452.936209][ T5852] ch9200_bind+0x21c/0xfe0 [ 452.940857][ T5852] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 452.946936][ T5852] ? __pfx_ch9200_bind+0x10/0x10 [ 452.952102][ T5852] usbnet_probe+0xbe6/0x4390 [ 452.956906][ T5852] ? pm_runtime_enable+0x3b2/0x4d0 [ 452.962341][ T5852] ? __pfx_usbnet_probe+0x10/0x10 [ 452.967587][ T5852] usb_probe_interface+0xd04/0x1310 [ 452.973080][ T5852] ? __pfx_usb_probe_interface+0x10/0x10 [ 452.979127][ T5852] really_probe+0x4d4/0xd90 [ 452.983867][ T5852] __driver_probe_device+0x268/0x380 [ 452.989411][ T5852] driver_probe_device+0x70/0x8b0 [ 452.994687][ T5852] ? kmsan_get_metadata+0xfb/0x160 [ 453.000083][ T5852] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 453.006173][ T5852] __device_attach_driver+0x4ee/0x950 [ 453.011788][ T5852] bus_for_each_drv+0x3e3/0x680 [ 453.016914][ T5852] ? __pfx___device_attach_driver+0x10/0x10 [ 453.023078][ T5852] __device_attach+0x3c8/0x5c0 [ 453.028067][ T5852] device_initial_probe+0x33/0x40 [ 453.033298][ T5852] bus_probe_device+0x3ba/0x5e0 [ 453.038413][ T5852] device_add+0x12a9/0x1c10 [ 453.043240][ T5852] usb_set_configuration+0x3493/0x3b70 [ 453.049017][ T5852] usb_generic_driver_probe+0xfc/0x290 [ 453.054718][ T5852] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 453.061006][ T5852] usb_probe_device+0x38a/0x690 [ 453.066092][ T5852] ? __pfx_usb_probe_device+0x10/0x10 [ 453.071697][ T5852] really_probe+0x4d4/0xd90 [ 453.076470][ T5852] __driver_probe_device+0x268/0x380 [ 453.082082][ T5852] driver_probe_device+0x70/0x8b0 [ 453.087329][ T5852] ? kmsan_get_metadata+0xfb/0x160 [ 453.092709][ T5852] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 453.098804][ T5852] __device_attach_driver+0x4ee/0x950 [ 453.104446][ T5852] bus_for_each_drv+0x3e3/0x680 [ 453.109589][ T5852] ? __pfx___device_attach_driver+0x10/0x10 [ 453.115741][ T5852] __device_attach+0x3c8/0x5c0 [ 453.120726][ T5852] device_initial_probe+0x33/0x40 [ 453.125953][ T5852] bus_probe_device+0x3ba/0x5e0 [ 453.131054][ T5852] device_add+0x12a9/0x1c10 [ 453.135830][ T5852] usb_new_device+0x104b/0x20c0 [ 453.140960][ T5852] hub_event+0x5588/0x7580 [ 453.145644][ T5852] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 453.151496][ T5852] ? __pfx_hub_event+0x10/0x10 [ 453.156460][ T5852] process_scheduled_works+0xb8e/0x1d80 [ 453.162332][ T5852] worker_thread+0xedf/0x1590 [ 453.167587][ T5852] kthread+0xd5c/0xf00 [ 453.171906][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 453.177482][ T5852] ? __pfx_kthread+0x10/0x10 [ 453.182311][ T5852] ret_from_fork+0x1e3/0x310 [ 453.187114][ T5852] ? __pfx_kthread+0x10/0x10 [ 453.191928][ T5852] ret_from_fork_asm+0x1a/0x30 [ 453.196999][ T5852] [ 453.200583][ T5852] Kernel Offset: disabled [ 453.205159][ T5852] Rebooting in 86400 seconds..