last executing test programs: 3m19.879647412s ago: executing program 4 (id=671): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d04"], 0x40) r4 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x2151090, 0x0) syz_pidfd_open(r4, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) setns(0xffffffffffffffff, 0x66020000) add_key$user(&(0x7f00000002c0), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0x1, 0x0) r5 = socket(0x23, 0x5, 0x0) listen(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) write$binfmt_misc(r0, 0x0, 0x0) 3m13.962812675s ago: executing program 4 (id=674): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @random="12d03715a316", 'xfrm0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 3m9.477733645s ago: executing program 4 (id=686): syz_usb_connect$midi(0x4, 0x3e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x34, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x3, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x21}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xe, 0x0, 0x20, 0x7, 0x7f, 0x50, {0x4}}}]}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m8.080802472s ago: executing program 4 (id=690): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, 0x0) 3m7.625915689s ago: executing program 4 (id=691): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x0, 0x759, 0x7, 0x7d, 0x7, 0x8000, 0x4, 0x2}, 0x0, &(0x7f0000000080)={0x3fc, 0x6, 0xffffffffffffffff, 0x2000000000000003, 0x6, 0xf, 0x80000006}, 0x0, 0x0) 3m4.458307597s ago: executing program 4 (id=696): ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000080)=0xf) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) msgrcv(0x0, 0x0, 0x10, 0x1, 0x3000) msgctl$IPC_SET(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002900)={0x0, 0x0, 0x0}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x44, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) 2m48.674363228s ago: executing program 32 (id=696): ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000080)=0xf) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) msgrcv(0x0, 0x0, 0x10, 0x1, 0x3000) msgctl$IPC_SET(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002900)={0x0, 0x0, 0x0}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x44, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) 45.426753687s ago: executing program 3 (id=924): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 38.400449254s ago: executing program 3 (id=931): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 37.483629795s ago: executing program 3 (id=934): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x118}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067", 0x23}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057", 0xad}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 35.149789011s ago: executing program 3 (id=938): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x80000001, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000580)=0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10) 33.633991114s ago: executing program 3 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1e94c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x1, 0x3, 0x276}) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x2404c851) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) close_range(r3, 0xffffffffffffffff, 0x0) 28.770363539s ago: executing program 3 (id=942): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) 20.07954688s ago: executing program 2 (id=956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) 19.270391715s ago: executing program 2 (id=957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x200000, 0x2, 0x0, 0x0, 0x8, 0x1000}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f640094000500", 0x2c}], 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143842, 0x58) fallocate(r4, 0x0, 0x9, 0x10001) timer_gettime(r2, &(0x7f0000000140)={{}, {0x0}}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r4], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000340)={{0x7, 0x0, 0x6, 0xd15cb930, 'syz1\x00', 0xe3}, 0x4, 0x200, 0x0, 0x0, 0x3, 0xfffffe01, 'syz0\x00', &(0x7f00000001c0)=['ecb(cipher_null)\x00', 'skcipher\x00', '\xff\xff'], 0x1c}) copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0xae8, 0x863, 0x0) sync() sync() sync() sync() r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d4, &(0x7f0000000300)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000090a010400000000000000000700000008000a40000000000900020073797a300000000009"], 0x70}}, 0x20050800) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRES64=r5, @ANYRES32=0x0], 0xb) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 14.323662838s ago: executing program 2 (id=960): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.356241641s ago: executing program 33 (id=942): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) 8.800647953s ago: executing program 0 (id=970): socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$kcm(0x2, 0x3, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 8.197163559s ago: executing program 1 (id=971): socket(0x2, 0x80805, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wrr\x00', 0x10, 0x80005, 0x6f}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280"], 0xdc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 8.011116289s ago: executing program 0 (id=972): r0 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x1, 0x3, 0x276}) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 7.206859915s ago: executing program 1 (id=973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0) 6.853133708s ago: executing program 2 (id=974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, 0x0) 6.623082799s ago: executing program 0 (id=975): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 6.281815907s ago: executing program 1 (id=976): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x1ec, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x118, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0xc0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5.982975857s ago: executing program 0 (id=977): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 5.765564658s ago: executing program 2 (id=978): r0 = socket$unix(0x1, 0x1, 0x0) syncfs(r0) 5.145635387s ago: executing program 1 (id=979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 5.111358493s ago: executing program 0 (id=980): socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$kcm(0x2, 0x3, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 5.02307453s ago: executing program 2 (id=981): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x10, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) prlimit64(0x0, 0xe, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f}}, 0x50) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd86) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x33fdf, 0x2) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r7, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4.521750419s ago: executing program 1 (id=982): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 3.677842267s ago: executing program 0 (id=983): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, 0x0, 0x0, 0x4100, 0x0, 0x0) 0s ago: executing program 1 (id=984): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x88, 0x0, 0x8, [{0x1, 0x0, 0x59, 0xfffffe01, '[P*\x04\x1a\xd4C\xacu\xb4n#X\xd9\x13\x19\x8e^\xa5\xeb\xd5\x14 C\x83\xc2\xe5\xad\x9f\x8b\x9b\xe6,\xba\xb5\x96\xeb\x00\xf54\x16m\xd9\x9b%\xbb\xd2\xaa\xfb\x06s\x8c\x12)\xdc_^\xd1C0\x91\xc3\x11\xcb\xa2,\xe7/\xa4\xb3\x85\xd5\x0f\xe7\x8d\xaa\x01n\x13l\x92\x0f\xca\xe6\xce\x8b\xf7\xeb\x1f'}]}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): T5783] worker_thread+0xee4/0x1590 [ 338.514870][ T5783] kthread+0x53f/0x600 [ 338.515073][ T5783] ? __pfx_worker_thread+0x10/0x10 [ 338.515356][ T5783] ? __pfx_kthread+0x10/0x10 [ 338.515553][ T5783] ret_from_fork+0x20f/0x8d0 [ 338.515722][ T5783] ? __switch_to+0x573/0x7a0 [ 338.515927][ T5783] ? __pfx_kthread+0x10/0x10 [ 338.516130][ T5783] ret_from_fork_asm+0x1a/0x30 [ 338.516360][ T5783] [ 339.097157][ T5783] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 339.486729][ T5678] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 339.721615][ T5678] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 339.749935][ T5678] usb 4-1: config 0 has no interface number 0 [ 339.801570][ T5678] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 339.877025][ T5678] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 339.962391][ T5678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.102919][ T5678] usb 4-1: config 0 descriptor?? [ 340.139644][ T6551] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.700261][ T5678] hid_parser_main: 4005 callbacks suppressed [ 340.700375][ T5678] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 340.761604][ T5678] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 340.778578][ T5678] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 340.880640][ T5678] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 340.908831][ T5678] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 340.940371][ T5678] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 340.997613][ T5678] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 341.055422][ T5678] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 341.080358][ T5678] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 341.112380][ T5678] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 341.394103][ T5678] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v7f.fd Device [HID 041e:2801] on usb-dummy_hcd.3-1/input32 [ 341.512369][ T5678] usb 4-1: USB disconnect, device number 8 [ 343.693333][ T6577] loop4: detected capacity change from 0 to 40427 [ 343.752681][ T6576] fido_id[6576]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 343.778304][ T6577] F2FS-fs (loop4): invalid crc value [ 344.188268][ T6577] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 344.200738][ T6577] F2FS-fs (loop4): Start checkpoint disabled! [ 344.214837][ T6577] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 344.231548][ T6577] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 345.080340][ T34] kworker/u8:2: attempt to access beyond end of device [ 345.080340][ T34] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 345.209249][ T34] CPU: 0 UID: 0 PID: 34 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 345.209408][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.209525][ T34] Workqueue: writeback wb_workfn (flush-7:4) [ 345.209742][ T34] Call Trace: [ 345.209796][ T34] [ 345.209853][ T34] __dump_stack+0x26/0x30 [ 345.210034][ T34] dump_stack_lvl+0x14c/0x1c0 [ 345.210222][ T34] dump_stack+0x1e/0x25 [ 345.210380][ T34] f2fs_stop_checkpoint+0xac3/0xc70 [ 345.210573][ T34] f2fs_write_end_io+0x1207/0x2200 [ 345.210823][ T34] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 345.211005][ T34] bio_endio+0xfcc/0x1120 [ 345.211212][ T34] submit_bio_noacct+0x533/0x2920 [ 345.211467][ T34] submit_bio+0x57a/0x620 [ 345.211671][ T34] f2fs_submit_write_bio+0x115/0x310 [ 345.211926][ T34] __submit_merged_bio+0x16b/0x700 [ 345.212151][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 345.212389][ T34] __submit_merged_write_cond+0x4ba/0xae0 [ 345.212642][ T34] f2fs_write_data_pages+0x4f4d/0x5c60 [ 345.212808][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 345.213130][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.213384][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.213601][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 345.213811][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 345.214041][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.214266][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 345.214474][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.214702][ T34] ? clockevents_program_event+0x161/0x830 [ 345.214876][ T34] ? filter_irq_stacks+0x49/0x190 [ 345.215041][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 345.215263][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 345.215479][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.215703][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 345.215911][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.216131][ T34] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 345.216315][ T34] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 345.216485][ T34] do_writepages+0x3f2/0x860 [ 345.216635][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.216863][ T34] ? writeback_sb_inodes+0x21/0x1d50 [ 345.217071][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 345.217316][ T34] __writeback_single_inode+0x101/0x10a0 [ 345.217567][ T34] writeback_sb_inodes+0xb1a/0x1d50 [ 345.217917][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 345.218130][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.218373][ T34] wb_writeback+0x4d3/0xc50 [ 345.218609][ T34] ? queue_io+0x4e1/0x7b0 [ 345.218811][ T34] wb_workfn+0x3a2/0x1970 [ 345.218999][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 345.219253][ T34] ? __pfx_wb_workfn+0x10/0x10 [ 345.219424][ T34] process_scheduled_works+0xb65/0x1e40 [ 345.219690][ T34] worker_thread+0xee4/0x1590 [ 345.219920][ T34] kthread+0x53f/0x600 [ 345.220126][ T34] ? __pfx_worker_thread+0x10/0x10 [ 345.220334][ T34] ? __pfx_kthread+0x10/0x10 [ 345.220542][ T34] ret_from_fork+0x20f/0x8d0 [ 345.220719][ T34] ? __switch_to+0x573/0x7a0 [ 345.220937][ T34] ? __pfx_kthread+0x10/0x10 [ 345.221146][ T34] ret_from_fork_asm+0x1a/0x30 [ 345.221390][ T34] [ 345.827048][ T34] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 346.766846][ T5672] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 347.026930][ T5672] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 347.069532][ T5672] usb 4-1: config 0 has no interface number 0 [ 347.102212][ T5672] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 347.161410][ T5672] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 347.223503][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.299357][ T5672] usb 4-1: config 0 descriptor?? [ 347.343881][ T6607] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 347.981568][ T5672] hid_parser_main: 423 callbacks suppressed [ 347.981684][ T5672] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 348.067713][ T5672] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 348.101205][ T5672] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 348.134560][ T5672] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 348.147518][ T40] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 348.188041][ T5672] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 348.224908][ T5672] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 348.255727][ T5672] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 348.289379][ T5672] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 348.311430][ T5672] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 348.336649][ T40] usb 2-1: Using ep0 maxpacket: 8 [ 348.378640][ T5672] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 348.398299][ T40] usb 2-1: unable to get BOS descriptor or descriptor too short [ 348.446237][ T40] usb 2-1: config 4 interface 0 has no altsetting 0 [ 348.535551][ T40] usb 2-1: string descriptor 0 read error: -22 [ 348.560242][ T40] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 348.688359][ T40] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 348.721984][ T5672] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v7f.fd Device [HID 041e:2801] on usb-dummy_hcd.3-1/input32 [ 348.953793][ T5672] usb 4-1: USB disconnect, device number 9 [ 348.976831][ T40] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 349.129093][ T40] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 349.228809][ T40] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 349.348316][ T40] usb 2-1: media controller created [ 350.019368][ T5672] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 350.280127][ T40] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.389234][ T5672] usb 1-1: Using ep0 maxpacket: 32 [ 350.403806][ T6624] loop2: detected capacity change from 0 to 40427 [ 350.463605][ T6624] F2FS-fs (loop2): invalid crc value [ 350.497644][ T5672] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 350.561118][ T5672] usb 1-1: config 0 has no interface number 0 [ 350.665817][ T5672] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 350.865503][ T6624] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 350.888890][ T6624] F2FS-fs (loop2): Start checkpoint disabled! [ 350.912270][ T6624] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 350.927897][ T6625] fido_id[6625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 350.931525][ T5672] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 350.942820][ T6624] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 351.150017][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.271767][ T40] zl10353_read_register: readreg error (reg=127, ret==0) [ 351.358538][ T5672] usb 1-1: Product: syz [ 351.438413][ T5672] usb 1-1: Manufacturer: syz [ 351.510616][ T12] kworker/u8:0: attempt to access beyond end of device [ 351.510616][ T12] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 351.515982][ T5672] usb 1-1: SerialNumber: syz [ 351.564955][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 351.565111][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 351.565231][ T12] Workqueue: writeback wb_workfn (flush-7:2) [ 351.565456][ T12] Call Trace: [ 351.565512][ T12] [ 351.565566][ T12] __dump_stack+0x26/0x30 [ 351.565743][ T12] dump_stack_lvl+0x14c/0x1c0 [ 351.565925][ T12] dump_stack+0x1e/0x25 [ 351.566084][ T12] f2fs_stop_checkpoint+0xac3/0xc70 [ 351.566287][ T12] f2fs_write_end_io+0x1207/0x2200 [ 351.566544][ T12] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 351.566718][ T12] bio_endio+0xfcc/0x1120 [ 351.566908][ T12] submit_bio_noacct+0x533/0x2920 [ 351.567153][ T12] submit_bio+0x57a/0x620 [ 351.567343][ T12] f2fs_submit_write_bio+0x115/0x310 [ 351.567594][ T12] __submit_merged_bio+0x16b/0x700 [ 351.567810][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 351.568035][ T12] __submit_merged_write_cond+0x4ba/0xae0 [ 351.568293][ T12] f2fs_write_data_pages+0x4f4d/0x5c60 [ 351.568597][ T12] ? kmsan_get_metadata+0x30/0x160 [ 351.568829][ T12] ? update_cfs_rq_load_avg+0x747/0x8c0 [ 351.568996][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 351.569201][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.569422][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 351.569627][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.569851][ T12] ? hrtick_start+0x93/0x2a0 [ 351.570035][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 351.570245][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 351.570456][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.570668][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 351.570872][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.571082][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 351.571253][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 351.571428][ T12] do_writepages+0x3f2/0x860 [ 351.571573][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.571793][ T12] ? writeback_sb_inodes+0x21/0x1d50 [ 351.571990][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 351.572220][ T12] __writeback_single_inode+0x101/0x10a0 [ 351.572474][ T12] writeback_sb_inodes+0xb1a/0x1d50 [ 351.572827][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 351.573031][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.573255][ T12] wb_writeback+0x4d3/0xc50 [ 351.573589][ T12] ? queue_io+0x4e1/0x7b0 [ 351.573812][ T12] wb_workfn+0x3a2/0x1970 [ 351.574007][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 351.574254][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 351.574429][ T12] process_scheduled_works+0xb65/0x1e40 [ 351.574708][ T12] worker_thread+0xee4/0x1590 [ 351.574941][ T12] kthread+0x53f/0x600 [ 351.575230][ T12] ? __pfx_worker_thread+0x10/0x10 [ 351.575433][ T12] ? __pfx_kthread+0x10/0x10 [ 351.575634][ T12] ret_from_fork+0x20f/0x8d0 [ 351.575805][ T12] ? __switch_to+0x573/0x7a0 [ 351.576012][ T12] ? __pfx_kthread+0x10/0x10 [ 351.576225][ T12] ret_from_fork_asm+0x1a/0x30 [ 351.576443][ T12] [ 351.909849][ T5672] usb 1-1: config 0 descriptor?? [ 351.994752][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 352.188465][ T5672] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 352.252529][ T5672] em28xx 1-1:0.132: Video interface 132 found: [ 353.067794][ T40] usb 2-1: USB disconnect, device number 3 [ 353.258497][ T5672] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 353.428754][ T5672] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 353.517982][ T5672] em28xx 1-1:0.132: board has no eeprom [ 353.648262][ T5672] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 353.704670][ T5672] em28xx 1-1:0.132: analog set to bulk mode. [ 353.762437][ T5682] em28xx 1-1:0.132: Registering V4L2 extension [ 353.810005][ T5672] usb 1-1: USB disconnect, device number 3 [ 353.859375][ T5672] em28xx 1-1:0.132: Disconnecting em28xx [ 355.245998][ T6645] loop3: detected capacity change from 0 to 40427 [ 355.276133][ T6645] F2FS-fs (loop3): invalid crc value [ 355.633331][ T6645] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 355.644719][ T6645] F2FS-fs (loop3): Start checkpoint disabled! [ 355.655723][ T6645] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 355.676844][ T6645] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 356.239073][ T34] kworker/u8:2: attempt to access beyond end of device [ 356.239073][ T34] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 356.342663][ T34] CPU: 0 UID: 0 PID: 34 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 356.342829][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 356.342950][ T34] Workqueue: writeback wb_workfn (flush-7:3) [ 356.343168][ T34] Call Trace: [ 356.343224][ T34] [ 356.343279][ T34] __dump_stack+0x26/0x30 [ 356.343464][ T34] dump_stack_lvl+0x14c/0x1c0 [ 356.343647][ T34] dump_stack+0x1e/0x25 [ 356.343810][ T34] f2fs_stop_checkpoint+0xac3/0xc70 [ 356.344032][ T34] f2fs_write_end_io+0x1207/0x2200 [ 356.344280][ T34] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 356.344465][ T34] bio_endio+0xfcc/0x1120 [ 356.344657][ T34] submit_bio_noacct+0x533/0x2920 [ 356.344915][ T34] submit_bio+0x57a/0x620 [ 356.345112][ T34] f2fs_submit_write_bio+0x115/0x310 [ 356.345368][ T34] __submit_merged_bio+0x16b/0x700 [ 356.345590][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 356.345828][ T34] __submit_merged_write_cond+0x4ba/0xae0 [ 356.346098][ T34] f2fs_write_data_pages+0x4f4d/0x5c60 [ 356.346408][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 356.346651][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 356.346865][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 356.347079][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.347305][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 356.347541][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.347760][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 356.347971][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.348187][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 356.348404][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 356.348611][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.348824][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 356.349031][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.349246][ T34] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 356.349431][ T34] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 356.349600][ T34] do_writepages+0x3f2/0x860 [ 356.349753][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.349982][ T34] ? writeback_sb_inodes+0x21/0x1d50 [ 356.350283][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 356.350555][ T34] __writeback_single_inode+0x101/0x10a0 [ 356.350816][ T34] writeback_sb_inodes+0xb1a/0x1d50 [ 356.351191][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 356.351412][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.351660][ T34] wb_writeback+0x4d3/0xc50 [ 356.351926][ T34] ? queue_io+0x4e1/0x7b0 [ 356.352136][ T34] wb_workfn+0x3a2/0x1970 [ 356.352338][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 356.352579][ T34] ? __pfx_wb_workfn+0x10/0x10 [ 356.352747][ T34] process_scheduled_works+0xb65/0x1e40 [ 356.353019][ T34] worker_thread+0xee4/0x1590 [ 356.353255][ T34] kthread+0x53f/0x600 [ 356.353463][ T34] ? __pfx_worker_thread+0x10/0x10 [ 356.353665][ T34] ? __pfx_kthread+0x10/0x10 [ 356.353883][ T34] ret_from_fork+0x20f/0x8d0 [ 356.354053][ T34] ? __switch_to+0x573/0x7a0 [ 356.354273][ T34] ? __pfx_kthread+0x10/0x10 [ 356.354484][ T34] ret_from_fork_asm+0x1a/0x30 [ 356.354709][ T34] [ 356.708784][ T34] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 357.044630][ T5682] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 357.113478][ T5682] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 357.184834][ T5682] em28xx 1-1:0.132: No AC97 audio processor [ 357.277464][ T5682] usb 1-1: Decoder not found [ 357.313289][ T5682] em28xx 1-1:0.132: failed to create media graph [ 357.360864][ T5682] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 357.427125][ T5682] em28xx 1-1:0.132: Remote control support is not available for this card. [ 357.491797][ T5672] em28xx 1-1:0.132: Closing input extension [ 357.582785][ T5672] em28xx 1-1:0.132: Freeing device [ 358.740948][ T5672] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 358.989026][ T5672] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 359.028550][ T5672] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 359.093994][ T5672] usb 5-1: config 220 has no interface number 2 [ 359.130800][ T5672] usb 5-1: too many endpoints for config 220 interface 1 altsetting 5: 109, using maximum allowed: 30 [ 359.205110][ T5672] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 359.269616][ T5672] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 109 [ 359.284476][ T6669] netlink: 68 bytes leftover after parsing attributes in process `syz.0.333'. [ 359.284663][ T6669] netlink: 48 bytes leftover after parsing attributes in process `syz.0.333'. [ 359.414319][ T5672] usb 5-1: config 220 interface 0 has no altsetting 0 [ 359.454068][ T5672] usb 5-1: config 220 interface 76 has no altsetting 0 [ 359.488515][ T5672] usb 5-1: config 220 interface 1 has no altsetting 0 [ 359.534112][ T5672] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 359.574982][ T5672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.614470][ T5672] usb 5-1: Product: syz [ 359.643748][ T5672] usb 5-1: Manufacturer: syz [ 359.673884][ T5672] usb 5-1: SerialNumber: syz [ 360.050549][ T5672] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 360.097777][ T5672] uvcvideo 5-1:220.0: No valid video chain found. [ 360.349872][ T5672] usb 5-1: USB disconnect, device number 5 [ 362.020209][ T5672] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 362.254716][ T6680] loop0: detected capacity change from 0 to 40427 [ 362.302469][ T5672] usb 3-1: Using ep0 maxpacket: 8 [ 362.315406][ T6680] F2FS-fs (loop0): invalid crc value [ 362.422355][ T5672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 362.509819][ T5672] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 362.620700][ T5672] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 362.699629][ T5672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.726890][ T6680] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 362.742400][ T6680] F2FS-fs (loop0): Start checkpoint disabled! [ 362.766149][ T6680] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 362.790624][ T6680] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 362.797124][ T5672] usb 3-1: config 0 descriptor?? [ 362.912149][ T6685] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.435104][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 363.619088][ T6410] kworker/u8:14: attempt to access beyond end of device [ 363.619088][ T6410] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 363.704030][ T6410] CPU: 1 UID: 0 PID: 6410 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 363.704195][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.704324][ T6410] Workqueue: writeback wb_workfn (flush-7:0) [ 363.704547][ T6410] Call Trace: [ 363.704604][ T6410] [ 363.704660][ T6410] __dump_stack+0x26/0x30 [ 363.704837][ T6410] dump_stack_lvl+0x14c/0x1c0 [ 363.705021][ T6410] dump_stack+0x1e/0x25 [ 363.705186][ T6410] f2fs_stop_checkpoint+0xac3/0xc70 [ 363.705398][ T6410] f2fs_write_end_io+0x1207/0x2200 [ 363.705653][ T6410] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 363.705832][ T6410] bio_endio+0xfcc/0x1120 [ 363.706029][ T6410] submit_bio_noacct+0x533/0x2920 [ 363.706286][ T6410] submit_bio+0x57a/0x620 [ 363.706478][ T6410] f2fs_submit_write_bio+0x115/0x310 [ 363.706728][ T6410] __submit_merged_bio+0x16b/0x700 [ 363.706952][ T6410] ? kmsan_get_metadata+0xf1/0x160 [ 363.707185][ T6410] __submit_merged_write_cond+0x4ba/0xae0 [ 363.707452][ T6410] f2fs_write_data_pages+0x4f4d/0x5c60 [ 363.707722][ T6410] ? irqentry_exit+0x7b/0x760 [ 363.707956][ T6410] ? kmsan_get_metadata+0xf1/0x160 [ 363.708167][ T6410] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 363.708409][ T6410] ? kmsan_get_metadata+0xf1/0x160 [ 363.708618][ T6410] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 363.708838][ T6410] ? kmsan_get_metadata+0xf1/0x160 [ 363.709046][ T6410] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 363.709274][ T6410] ? kmsan_get_metadata+0xf1/0x160 [ 363.709486][ T6410] ? kmsan_get_metadata+0xf1/0x160 [ 363.709694][ T6410] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 363.709916][ T6410] ? kmsan_get_metadata+0xf1/0x160 [ 363.710121][ T6410] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 363.710345][ T6410] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 363.710527][ T6410] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 363.710703][ T6410] do_writepages+0x3f2/0x860 [ 363.710855][ T6410] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 363.711086][ T6410] ? writeback_sb_inodes+0x21/0x1d50 [ 363.711308][ T6410] ? kmsan_get_metadata+0xf1/0x160 [ 363.711549][ T6410] __writeback_single_inode+0x101/0x10a0 [ 363.711801][ T6410] writeback_sb_inodes+0xb1a/0x1d50 [ 363.712158][ T6410] ? kmsan_get_metadata+0xf1/0x160 [ 363.712378][ T6410] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 363.712610][ T6410] wb_writeback+0x4d3/0xc50 [ 363.712839][ T6410] ? queue_io+0x4e1/0x7b0 [ 363.713041][ T6410] wb_workfn+0x3a2/0x1970 [ 363.713220][ T6410] ? kmsan_get_metadata+0xf1/0x160 [ 363.713461][ T6410] ? __pfx_wb_workfn+0x10/0x10 [ 363.713636][ T6410] process_scheduled_works+0xb65/0x1e40 [ 363.713919][ T6410] worker_thread+0xee4/0x1590 [ 363.714213][ T6410] kthread+0x53f/0x600 [ 363.714471][ T6410] ? __pfx_worker_thread+0x10/0x10 [ 363.714696][ T6410] ? __pfx_kthread+0x10/0x10 [ 363.714895][ T6410] ret_from_fork+0x20f/0x8d0 [ 363.715067][ T6410] ? __switch_to+0x573/0x7a0 [ 363.715288][ T6410] ? __pfx_kthread+0x10/0x10 [ 363.715497][ T6410] ret_from_fork_asm+0x1a/0x30 [ 363.715730][ T6410] [ 364.161772][ T6410] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 364.173371][ T5672] usbhid 3-1:0.0: can't add hid device: -71 [ 364.180547][ T5672] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 364.200088][ T5672] usb 3-1: USB disconnect, device number 8 [ 366.863280][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 368.138036][ T6717] loop1: detected capacity change from 0 to 40427 [ 368.170365][ T6717] F2FS-fs (loop1): invalid crc value [ 368.556720][ T6717] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 368.572197][ T6717] F2FS-fs (loop1): Start checkpoint disabled! [ 368.593716][ T5682] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 368.616571][ T6717] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 368.644723][ T6717] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 368.984622][ T5682] usb 4-1: Using ep0 maxpacket: 8 [ 369.096606][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 369.191222][ T5682] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 369.264412][ T5682] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 369.330155][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.392821][ T5682] usb 4-1: config 0 descriptor?? [ 369.439490][ T6727] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 369.900653][ T6417] kworker/u8:15: attempt to access beyond end of device [ 369.900653][ T6417] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 369.977348][ T6417] CPU: 1 UID: 0 PID: 6417 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 369.977513][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 369.977630][ T6417] Workqueue: writeback wb_workfn (flush-7:1) [ 369.977851][ T6417] Call Trace: [ 369.977907][ T6417] [ 369.977963][ T6417] __dump_stack+0x26/0x30 [ 369.978150][ T6417] dump_stack_lvl+0x14c/0x1c0 [ 369.978333][ T6417] dump_stack+0x1e/0x25 [ 369.978497][ T6417] f2fs_stop_checkpoint+0xac3/0xc70 [ 369.978694][ T6417] f2fs_write_end_io+0x1207/0x2200 [ 369.978944][ T6417] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 369.979126][ T6417] bio_endio+0xfcc/0x1120 [ 369.979313][ T6417] submit_bio_noacct+0x533/0x2920 [ 369.979549][ T6417] submit_bio+0x57a/0x620 [ 369.979740][ T6417] f2fs_submit_write_bio+0x115/0x310 [ 369.979984][ T6417] __submit_merged_bio+0x16b/0x700 [ 369.980214][ T6417] ? kmsan_get_metadata+0xf1/0x160 [ 369.980449][ T6417] __submit_merged_write_cond+0x4ba/0xae0 [ 369.980718][ T6417] f2fs_write_data_pages+0x4f4d/0x5c60 [ 369.981021][ T6417] ? kmsan_get_metadata+0xf1/0x160 [ 369.981301][ T6417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 369.981530][ T6417] ? kmsan_get_metadata+0xf1/0x160 [ 369.981746][ T6417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 369.981979][ T6417] ? __update_load_avg_cfs_rq+0xe9/0x1050 [ 369.982210][ T6417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 369.982446][ T6417] ? kmsan_get_metadata+0xf1/0x160 [ 369.982658][ T6417] ? kmsan_get_metadata+0xf1/0x160 [ 369.982870][ T6417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 369.983101][ T6417] ? kmsan_get_metadata+0xf1/0x160 [ 369.983318][ T6417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 369.983541][ T6417] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 369.983722][ T6417] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 369.983899][ T6417] do_writepages+0x3f2/0x860 [ 369.984052][ T6417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 369.984287][ T6417] ? writeback_sb_inodes+0x21/0x1d50 [ 369.984493][ T6417] ? kmsan_get_metadata+0xf1/0x160 [ 369.984727][ T6417] __writeback_single_inode+0x101/0x10a0 [ 369.984979][ T6417] writeback_sb_inodes+0xb1a/0x1d50 [ 369.985336][ T6417] ? kmsan_get_metadata+0xf1/0x160 [ 369.985550][ T6417] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 369.985783][ T6417] wb_writeback+0x4d3/0xc50 [ 369.986018][ T6417] ? queue_io+0x4e1/0x7b0 [ 369.986228][ T6417] wb_workfn+0x3a2/0x1970 [ 369.986406][ T6417] ? kmsan_get_metadata+0xf1/0x160 [ 369.986646][ T6417] ? __pfx_wb_workfn+0x10/0x10 [ 369.986825][ T6417] process_scheduled_works+0xb65/0x1e40 [ 369.987108][ T6417] worker_thread+0xee4/0x1590 [ 369.987346][ T6417] kthread+0x53f/0x600 [ 369.987556][ T6417] ? __pfx_worker_thread+0x10/0x10 [ 369.987763][ T6417] ? __pfx_kthread+0x10/0x10 [ 369.987968][ T6417] ret_from_fork+0x20f/0x8d0 [ 369.988149][ T6417] ? __switch_to+0x573/0x7a0 [ 369.988347][ T6417] ? __pfx_kthread+0x10/0x10 [ 369.988548][ T6417] ret_from_fork_asm+0x1a/0x30 [ 369.988772][ T6417] [ 370.461491][ T6417] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 370.470789][ T5682] usbhid 4-1:0.0: can't add hid device: -71 [ 370.482945][ T5682] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 370.497717][ T5682] usb 4-1: USB disconnect, device number 10 [ 372.257837][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.367'. [ 372.629490][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 373.225830][ T6760] netlink: 'syz.4.370': attribute type 29 has an invalid length. [ 373.401169][ T6758] netlink: 'syz.4.370': attribute type 29 has an invalid length. [ 373.462860][ T6762] netlink: 'syz.4.370': attribute type 29 has an invalid length. [ 375.112064][ T29] audit: type=1326 audit(1777653180.472:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.4.377" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80499cdd9 code=0x7ffc0000 [ 375.160555][ T29] audit: type=1326 audit(1777653180.502:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.4.377" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80499cdd9 code=0x7ffc0000 [ 375.238691][ T29] audit: type=1326 audit(1777653180.562:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.4.377" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80499cdd9 code=0x7ffc0000 [ 375.323124][ T29] audit: type=1326 audit(1777653180.562:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.4.377" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80499cdd9 code=0x7ffc0000 [ 375.442468][ T29] audit: type=1326 audit(1777653180.562:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.4.377" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe80499cdd9 code=0x7ffc0000 [ 375.582186][ T29] audit: type=1326 audit(1777653180.562:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.4.377" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80499cdd9 code=0x7ffc0000 [ 375.702752][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 375.727643][ T29] audit: type=1326 audit(1777653180.562:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.4.377" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80499cdd9 code=0x7ffc0000 [ 375.757255][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.854431][ T29] audit: type=1326 audit(1777653180.572:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.4.377" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80499cdd9 code=0x7ffc0000 [ 375.953049][ T29] audit: type=1326 audit(1777653180.572:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.4.377" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80499cdd9 code=0x7ffc0000 [ 375.997926][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.380'. [ 376.149037][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.156200][ T29] audit: type=1326 audit(1777653180.572:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.4.377" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe80499cdd9 code=0x7ffc0000 [ 376.835059][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 377.548470][ T6798] netlink: 'syz.1.384': attribute type 29 has an invalid length. [ 377.627837][ T6794] netlink: 'syz.1.384': attribute type 29 has an invalid length. [ 377.723926][ T6800] netlink: 'syz.1.384': attribute type 29 has an invalid length. [ 379.259496][ T6812] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 379.595300][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'. [ 380.198411][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 380.764643][ T6830] capability: warning: `syz.4.399' uses deprecated v2 capabilities in a way that may be insecure [ 380.993676][ T6836] netlink: 'syz.1.400': attribute type 29 has an invalid length. [ 381.062702][ T6832] netlink: 'syz.1.400': attribute type 29 has an invalid length. [ 381.129236][ T6838] netlink: 'syz.1.400': attribute type 29 has an invalid length. [ 381.622203][ T6842] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 382.003898][ T6846] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 382.613174][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 383.329618][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 384.197238][ T6870] netlink: 'syz.2.416': attribute type 29 has an invalid length. [ 384.255979][ T6872] netlink: 'syz.2.416': attribute type 29 has an invalid length. [ 384.356068][ T6869] netlink: 'syz.2.416': attribute type 29 has an invalid length. [ 386.023095][ T6887] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 388.682566][ T6907] netlink: 'syz.2.430': attribute type 29 has an invalid length. [ 388.804524][ T6906] netlink: 'syz.2.430': attribute type 29 has an invalid length. [ 388.888412][ T6908] netlink: 'syz.2.430': attribute type 29 has an invalid length. [ 390.934335][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 390.934424][ T29] audit: type=1326 audit(1777653196.282:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.434" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0a59cdd9 code=0x7ffc0000 [ 391.261152][ T29] audit: type=1326 audit(1777653196.352:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.434" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0a59cdd9 code=0x7ffc0000 [ 391.517742][ T29] audit: type=1326 audit(1777653196.422:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.434" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0a59cdd9 code=0x7ffc0000 [ 391.724358][ T29] audit: type=1326 audit(1777653196.432:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.434" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4b0a59cdd9 code=0x7ffc0000 [ 391.967215][ T29] audit: type=1326 audit(1777653196.452:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.434" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0a59cdd9 code=0x7ffc0000 [ 392.090442][ T29] audit: type=1326 audit(1777653196.872:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.434" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b0a55d60e code=0x7ffc0000 [ 392.205155][ T29] audit: type=1326 audit(1777653196.932:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.434" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0a59cdd9 code=0x7ffc0000 [ 392.318209][ T29] audit: type=1326 audit(1777653196.962:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.434" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b0a55d60e code=0x7ffc0000 [ 392.423450][ T29] audit: type=1326 audit(1777653196.972:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.434" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0a59cdd9 code=0x7ffc0000 [ 392.526672][ T5682] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 392.580751][ T29] audit: type=1326 audit(1777653197.032:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.2.434" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b0a59cdd9 code=0x7ffc0000 [ 392.745113][ T5682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.777067][ T5682] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 392.838258][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 392.919472][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 392.991308][ T5682] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 393.077064][ T5682] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 393.107554][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 393.144393][ T5682] usb 4-1: Product: syz [ 393.162545][ T5682] usb 4-1: Manufacturer: syz [ 393.193202][ T5682] usb 4-1: SerialNumber: syz [ 393.246128][ T5682] usb 4-1: config 0 descriptor?? [ 393.595822][ T5682] radio-si470x 4-1:0.0: DeviceID=0x7379 ChipID=0x732f [ 393.669790][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.689389][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.812061][ T5682] radio-si470x 4-1:0.0: software version 115, hardware version 121 [ 393.917992][ T6945] netlink: 'syz.2.444': attribute type 29 has an invalid length. [ 393.977212][ T6944] netlink: 'syz.2.444': attribute type 29 has an invalid length. [ 394.030597][ T5682] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 394.072763][ T6947] netlink: 'syz.2.444': attribute type 29 has an invalid length. [ 394.672082][ T5682] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 394.747898][ T5682] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 394.858676][ T5682] usb 4-1: USB disconnect, device number 11 [ 394.864801][ T6954] netlink: 276 bytes leftover after parsing attributes in process `syz.4.448'. [ 397.378997][ T6980] netlink: 'syz.4.459': attribute type 29 has an invalid length. [ 397.451255][ T6982] netlink: 'syz.4.459': attribute type 29 has an invalid length. [ 397.559959][ T6978] netlink: 'syz.4.459': attribute type 29 has an invalid length. [ 398.379108][ T5672] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 398.617344][ T5672] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.674669][ T5672] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 398.723718][ T5672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 398.805202][ T5672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 398.863485][ T5672] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 398.969907][ T5672] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 399.014111][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 399.050828][ T5672] usb 4-1: Product: syz [ 399.071160][ T5672] usb 4-1: Manufacturer: syz [ 399.091599][ T5672] usb 4-1: SerialNumber: syz [ 399.152719][ T5672] usb 4-1: config 0 descriptor?? [ 399.482054][ T5672] radio-si470x 4-1:0.0: DeviceID=0x7379 ChipID=0x732f [ 399.690146][ T5672] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 399.748725][ T5672] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 399.791509][ T5672] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 399.836671][ T5678] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 399.934415][ T5672] usb 4-1: USB disconnect, device number 12 [ 400.016693][ T5678] usb 2-1: Using ep0 maxpacket: 32 [ 400.070293][ T5678] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 400.147078][ T5678] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 400.178399][ T5678] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 400.255095][ T5678] usb 2-1: config 1 has no interface number 0 [ 400.262938][ T5678] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.280520][ T5678] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 400.295257][ T5678] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 400.311043][ T5678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.492528][ T5678] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 400.662225][ T5678] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 401.142310][ T5678] usb 2-1: USB disconnect, device number 4 [ 401.181280][ T5678] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 401.633742][ T7016] netlink: 'syz.2.475': attribute type 29 has an invalid length. [ 401.765354][ T7015] netlink: 'syz.2.475': attribute type 29 has an invalid length. [ 401.843062][ T7018] netlink: 'syz.2.475': attribute type 29 has an invalid length. [ 403.529932][ T5678] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 403.583570][ T7033] netlink: 149 bytes leftover after parsing attributes in process `syz.1.482'. [ 403.766995][ T5678] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 403.792152][ T5678] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 403.814211][ T5678] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 403.869075][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 403.890590][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 403.907852][ T5678] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 403.937610][ T5678] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 403.948148][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.989916][ T5678] usb 5-1: config 0 descriptor?? [ 404.001689][ T7035] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 404.293473][ T5678] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 404.517798][ C0] usblp0: nonzero read bulk status received: -71 [ 404.544868][ T5682] usb 5-1: USB disconnect, device number 6 [ 405.830981][ T7053] netlink: 'syz.2.490': attribute type 29 has an invalid length. [ 405.877158][ T5672] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 405.892706][ T7050] netlink: 'syz.2.490': attribute type 29 has an invalid length. [ 405.959209][ T7054] netlink: 'syz.2.490': attribute type 29 has an invalid length. [ 406.076718][ T5672] usb 2-1: Using ep0 maxpacket: 32 [ 406.142005][ T5672] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 406.180754][ T5672] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 406.199667][ T5672] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 406.214966][ T5672] usb 2-1: config 1 has no interface number 0 [ 406.228188][ T5672] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.271900][ T5672] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 406.344811][ T5672] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 406.371671][ T5672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.587936][ T5672] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 406.661007][ T7044] usblp0: removed [ 406.830973][ T5672] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 407.212062][ T5678] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 407.296220][ T9] usb 2-1: USB disconnect, device number 5 [ 407.361286][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 407.415243][ T5678] usb 1-1: Using ep0 maxpacket: 32 [ 407.474451][ T5678] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.533700][ T5678] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 407.631614][ T5678] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 407.704235][ T5678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.751778][ T5678] usb 1-1: Product: syz [ 407.762140][ T5678] usb 1-1: Manufacturer: syz [ 407.781305][ T5678] usb 1-1: SerialNumber: syz [ 407.821275][ T5678] usb 1-1: config 0 descriptor?? [ 409.194770][ T7086] netlink: 'syz.3.502': attribute type 29 has an invalid length. [ 409.210484][ T7083] netlink: 'syz.3.502': attribute type 29 has an invalid length. [ 409.225785][ T7083] netlink: 'syz.3.502': attribute type 29 has an invalid length. [ 410.318870][ T5678] usb 1-1: USB disconnect, device number 4 [ 411.713857][ T7110] Ð6±ÿ: renamed from team_slave_1 (while UP) [ 411.849290][ T7115] netlink: 'syz.2.514': attribute type 29 has an invalid length. [ 411.887411][ T7113] netlink: 'syz.2.514': attribute type 29 has an invalid length. [ 411.937058][ T7115] netlink: 'syz.2.514': attribute type 29 has an invalid length. [ 411.952929][ T5678] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 412.139501][ T5678] usb 4-1: Using ep0 maxpacket: 32 [ 412.187557][ T5678] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 412.249417][ T5678] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 412.284230][ T5678] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 412.340060][ T5678] usb 4-1: config 1 has no interface number 0 [ 412.377338][ T5678] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.441844][ T5678] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 412.512416][ T5678] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 412.562476][ T5678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.747980][ T5678] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 412.965427][ T5678] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 413.490511][ T5678] usb 4-1: USB disconnect, device number 13 [ 413.533355][ T5678] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 413.937984][ T5672] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 414.168959][ T5672] usb 1-1: Using ep0 maxpacket: 32 [ 414.225552][ T5672] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.286517][ T5672] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 414.382872][ T5672] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 414.418622][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.441392][ T5672] usb 1-1: Product: syz [ 414.455512][ T5672] usb 1-1: Manufacturer: syz [ 414.479372][ T5672] usb 1-1: SerialNumber: syz [ 414.544467][ T5672] usb 1-1: config 0 descriptor?? [ 415.980740][ T7155] netlink: 'syz.1.528': attribute type 29 has an invalid length. [ 416.045480][ T7151] netlink: 'syz.1.528': attribute type 29 has an invalid length. [ 416.129495][ T7156] netlink: 'syz.1.528': attribute type 29 has an invalid length. [ 416.146589][ T5682] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 416.316623][ T5682] usb 4-1: Using ep0 maxpacket: 32 [ 416.356498][ T5682] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 416.388391][ T5682] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 416.441072][ T5682] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 416.491626][ T5682] usb 4-1: config 1 has no interface number 0 [ 416.517732][ T5682] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 416.580296][ T5682] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 416.636618][ T5682] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 416.677505][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.888330][ T5682] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 417.002009][ T5672] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 417.132185][ T5682] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 417.259373][ T5672] usb 2-1: Using ep0 maxpacket: 32 [ 417.287002][ T5672] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 417.327475][ T5672] usb 2-1: config 0 has no interface number 0 [ 417.395018][ T5672] usb 2-1: config 0 interface 12 has no altsetting 0 [ 417.450028][ T5678] usb 1-1: USB disconnect, device number 5 [ 417.465473][ T5672] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 417.545397][ T5672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.602774][ T5672] usb 2-1: Product: syz [ 417.653019][ T5672] usb 2-1: Manufacturer: syz [ 417.701758][ T5672] usb 2-1: SerialNumber: syz [ 417.887288][ T5672] usb 2-1: config 0 descriptor?? [ 417.923611][ T9] usb 4-1: USB disconnect, device number 14 [ 417.981553][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 418.750436][ T5672] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 418.788399][ T5672] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 418.816123][ T5672] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 418.855875][ T5672] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 418.985425][ T5672] usb 2-1: USB disconnect, device number 6 [ 421.296595][ T5672] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 421.337004][ T5678] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 421.347544][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 421.476818][ T5672] usb 2-1: Using ep0 maxpacket: 32 [ 421.529520][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 421.544918][ T5672] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 421.550029][ T5678] usb 1-1: Using ep0 maxpacket: 8 [ 421.585935][ T5672] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.619329][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 421.627633][ T5672] usb 2-1: config 0 has no interface number 0 [ 421.653133][ T5678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 421.682263][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 421.682815][ T5672] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 421.704343][ T5678] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 421.724097][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 421.727134][ T5672] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 421.748120][ T9] usb 4-1: config 1 has no interface number 0 [ 421.748269][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 421.748445][ T9] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 421.748696][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 421.749213][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.750519][ T5678] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 421.843248][ T5672] usb 2-1: config 0 interface 184 has no altsetting 0 [ 421.863973][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 421.876149][ T5672] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 421.891246][ T5678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.932394][ T5678] usb 1-1: config 0 descriptor?? [ 421.986079][ T7194] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 421.987299][ T5672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.025990][ T5672] usb 2-1: Product: syz [ 422.065665][ T5672] usb 2-1: Manufacturer: syz [ 422.094596][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 422.097283][ T5672] usb 2-1: SerialNumber: syz [ 422.177554][ T5672] usb 2-1: config 0 descriptor?? [ 422.255070][ T5672] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 422.323239][ T5672] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 422.565273][ T5678] usbhid 1-1:0.0: can't add hid device: -71 [ 422.576112][ T5672] usb 4-1: USB disconnect, device number 15 [ 422.601002][ T5678] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 422.614925][ T5672] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 422.651634][ T5678] usb 1-1: USB disconnect, device number 6 [ 423.527079][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 423.716637][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 423.744827][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 423.766937][ T24] usb 3-1: config 0 has no interface number 0 [ 423.776668][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 423.836039][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 423.866449][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.899410][ T24] usb 3-1: Product: syz [ 423.907475][ T24] usb 3-1: Manufacturer: syz [ 423.936567][ T24] usb 3-1: SerialNumber: syz [ 423.961284][ T24] usb 3-1: config 0 descriptor?? [ 424.476692][ T5678] usb 2-1: USB disconnect, device number 7 [ 424.749036][ T24] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 424.779264][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 424.813241][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 424.850730][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 425.028638][ T24] usb 3-1: USB disconnect, device number 9 [ 426.396530][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 426.412229][ T5672] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 426.586554][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 426.626985][ T5672] usb 3-1: Using ep0 maxpacket: 32 [ 426.634709][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 426.675726][ T5672] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 426.705556][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 426.728817][ T5672] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 426.778741][ T5672] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 426.798336][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 426.883737][ T5672] usb 3-1: config 1 has no interface number 0 [ 426.908426][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.867843][ T5672] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.888829][ T5672] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 427.905820][ T24] usb 4-1: config 0 descriptor?? [ 427.915210][ T7238] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 427.923514][ T5672] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 428.121975][ T7245] netlink: 108 bytes leftover after parsing attributes in process `syz.1.568'. [ 428.897608][ T5672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.962004][ T5672] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 429.561967][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 429.570596][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 429.588860][ T24] usb 4-1: USB disconnect, device number 16 [ 429.670244][ T5672] snd_usb_pod 3-1:1.1: set_interface failed [ 429.686656][ T5672] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 429.735424][ T5672] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 429.844132][ T5672] usb 3-1: USB disconnect, device number 10 [ 435.586064][ T7273] loop0: detected capacity change from 0 to 16 [ 435.624173][ T7273] erofs (device loop0): mounted with root inode @ nid 36. [ 435.720248][ T7275] netlink: 108 bytes leftover after parsing attributes in process `syz.1.580'. [ 436.556562][ T5678] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 436.806157][ T5678] usb 5-1: Using ep0 maxpacket: 32 [ 436.913588][ T5678] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 437.021830][ T5678] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 437.089753][ T5678] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 437.126963][ T5678] usb 5-1: config 1 has no interface number 0 [ 437.133875][ T5678] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 437.173261][ T5678] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 437.264769][ T5678] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 437.355853][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.525870][ T5678] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 437.900469][ T5678] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 438.144024][ T3092] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 438.518604][ T3092] usb 1-1: Using ep0 maxpacket: 8 [ 438.535922][ T5678] usb 5-1: USB disconnect, device number 7 [ 438.594198][ T5678] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 438.642499][ T3092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 438.765870][ T3092] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 438.863686][ T3092] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 438.923632][ T3092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.026177][ T3092] usb 1-1: config 0 descriptor?? [ 439.088353][ T7291] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 439.719351][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 439.748044][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 439.769761][ T3092] usbhid 1-1:0.0: can't add hid device: -71 [ 439.779328][ T3092] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 439.846055][ T3092] usb 1-1: USB disconnect, device number 7 [ 440.503678][ T7306] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 441.251081][ T7304] lo speed is unknown, defaulting to 1000 [ 441.262105][ T7304] lo speed is unknown, defaulting to 1000 [ 441.282623][ T7304] lo speed is unknown, defaulting to 1000 [ 441.316605][ T7304] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 441.332757][ T7304] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 441.351819][ T7304] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 441.490016][ T7304] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 443.037079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 443.046848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 443.447013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 443.856787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 443.958587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 444.368713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 445.181375][ T7304] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 445.639010][ T7304] lo speed is unknown, defaulting to 1000 [ 445.728750][ T7304] lo speed is unknown, defaulting to 1000 [ 445.785920][ T7304] lo speed is unknown, defaulting to 1000 [ 445.834563][ T7304] lo speed is unknown, defaulting to 1000 [ 445.839840][ T7318] netlink: 108 bytes leftover after parsing attributes in process `syz.3.596'. [ 445.885158][ T7304] lo speed is unknown, defaulting to 1000 [ 446.137476][ T7317] ======================================================= [ 446.137476][ T7317] WARNING: The mand mount option has been deprecated and [ 446.137476][ T7317] and is ignored by this kernel. Remove the mand [ 446.137476][ T7317] option from the mount to silence this warning. [ 446.137476][ T7317] ======================================================= [ 449.287549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 450.650633][ T3092] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 450.856896][ T3092] usb 5-1: Using ep0 maxpacket: 32 [ 450.903866][ T3092] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 450.949081][ T3092] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 450.988958][ T3092] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 451.055111][ T3092] usb 5-1: config 1 has no interface number 0 [ 451.095560][ T3092] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 451.170545][ T5672] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 451.181361][ T3092] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 451.283406][ T3092] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 451.326680][ T3092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.406615][ T5672] usb 4-1: Using ep0 maxpacket: 8 [ 451.474266][ T5672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 451.502496][ T5672] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 451.503198][ T3092] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 451.569636][ T5672] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 451.632330][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.720828][ T5672] usb 4-1: config 0 descriptor?? [ 451.722946][ T3092] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 451.795740][ T7339] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 452.408390][ T7346] overlayfs: failed to resolve './file0': -2 [ 453.068013][ T3092] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 455.917072][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.995276][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.186358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 456.250601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 456.416143][ T24] usb 5-1: USB disconnect, device number 8 [ 456.593838][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 457.187559][ T5672] usbhid 4-1:0.0: can't add hid device: -71 [ 457.219119][ T5672] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 457.295051][ T5672] usb 4-1: USB disconnect, device number 17 [ 458.310596][ T5672] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 458.505981][ T5672] usb 3-1: Using ep0 maxpacket: 32 [ 458.571363][ T5672] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 458.610708][ T5672] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.656081][ T5672] usb 3-1: config 0 has no interface number 0 [ 458.689740][ T5672] usb 3-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.753808][ T5672] usb 3-1: config 0 interface 184 has no altsetting 0 [ 458.794211][ T5672] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 458.829965][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.856431][ T5672] usb 3-1: Product: syz [ 458.871168][ T5672] usb 3-1: Manufacturer: syz [ 458.886615][ T5672] usb 3-1: SerialNumber: syz [ 458.934133][ T5672] usb 3-1: config 0 descriptor?? [ 458.965002][ T5672] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 459.000823][ T5672] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 460.277041][ T5672] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 460.624808][ T5672] usb 2-1: Using ep0 maxpacket: 8 [ 460.711498][ T3092] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 460.951425][ T3092] usb 5-1: Using ep0 maxpacket: 32 [ 461.005221][ T3092] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 461.055806][ T3092] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 461.089017][ T5672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 461.144250][ T3092] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 461.202276][ T3092] usb 5-1: config 1 has no interface number 0 [ 461.230106][ T5672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 461.248146][ T3092] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.295862][ T5672] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 461.324484][ T5672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.384942][ T3092] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 461.419275][ T5672] usb 2-1: config 0 descriptor?? [ 461.454782][ T7377] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 461.522695][ T3092] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 461.595076][ T3092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.847902][ T3092] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 461.852702][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 462.059663][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 462.103230][ T3092] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 462.134757][ T5678] usb 3-1: USB disconnect, device number 11 [ 462.150685][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.215198][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.290442][ T5672] usbhid 2-1:0.0: can't add hid device: -71 [ 462.311838][ T24] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 462.334322][ T5672] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 462.361060][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.409766][ T5672] usb 2-1: USB disconnect, device number 8 [ 462.449828][ T24] usb 4-1: config 0 descriptor?? [ 462.581362][ T5682] usb 5-1: USB disconnect, device number 9 [ 462.604536][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 462.639392][ T5682] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 463.871191][ T7396] netlink: 149 bytes leftover after parsing attributes in process `syz.1.628'. [ 464.884245][ T5682] usb 4-1: USB disconnect, device number 18 [ 465.331665][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.342170][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.396191][ T5678] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 465.460048][ T7416] bridge0: entered allmulticast mode [ 465.469574][ T3092] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 465.582814][ T7417] bridge_slave_1: left allmulticast mode [ 465.596929][ T5678] usb 1-1: Using ep0 maxpacket: 32 [ 465.596964][ T7417] bridge_slave_1: left promiscuous mode [ 465.598021][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.615643][ T5678] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 465.638631][ T5678] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.649822][ T3092] usb 3-1: Using ep0 maxpacket: 8 [ 465.699202][ T3092] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.712375][ T7417] bridge_slave_0: left allmulticast mode [ 465.716868][ T5678] usb 1-1: config 0 has no interface number 0 [ 465.723435][ T7417] bridge_slave_0: left promiscuous mode [ 465.737588][ T5678] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.758666][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.766869][ T3092] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 465.811619][ T5678] usb 1-1: config 0 interface 184 has no altsetting 0 [ 465.822042][ T3092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.849597][ T5679] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 465.859274][ T5678] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 465.883420][ T3092] usb 3-1: Product: syz [ 465.895692][ T3092] usb 3-1: Manufacturer: syz [ 465.904874][ T3092] usb 3-1: SerialNumber: syz [ 465.914803][ T5678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.953066][ T5678] usb 1-1: Product: syz [ 465.986447][ T5678] usb 1-1: Manufacturer: syz [ 466.005311][ T3092] usb 3-1: config 0 descriptor?? [ 466.031175][ T5678] usb 1-1: SerialNumber: syz [ 466.036738][ T5679] usb 5-1: Using ep0 maxpacket: 32 [ 466.067067][ T5679] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 466.122066][ T5678] usb 1-1: config 0 descriptor?? [ 466.143835][ T5679] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 466.199206][ T5679] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 466.222773][ T5679] usb 5-1: config 1 has no interface number 0 [ 466.249538][ T5678] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 466.260839][ T5679] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 466.287270][ T5678] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 466.296791][ T5679] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 466.342457][ T3092] usb 3-1: USB disconnect, device number 12 [ 466.362474][ T5679] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 466.442502][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.633303][ T5679] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 466.853835][ T5679] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 467.331480][ T5682] usb 5-1: USB disconnect, device number 10 [ 467.392802][ T5682] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 468.626206][ T5682] usb 1-1: USB disconnect, device number 8 [ 468.929685][ T5679] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 469.139727][ T5679] usb 5-1: Using ep0 maxpacket: 16 [ 469.190714][ T5679] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.225861][ T5679] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.295497][ T5679] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 469.328501][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.402450][ T5679] usb 5-1: config 0 descriptor?? [ 469.543227][ T5679] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 474.894341][ T3092] usb 5-1: USB disconnect, device number 11 [ 475.386983][ T5682] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 475.567566][ T5672] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 475.628037][ T5682] usb 1-1: Using ep0 maxpacket: 32 [ 475.678517][ T5682] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 475.712047][ T5682] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 475.756502][ T5682] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 475.800418][ T5682] usb 1-1: config 1 has no interface number 0 [ 475.820597][ T5672] usb 5-1: Using ep0 maxpacket: 32 [ 475.862341][ T5682] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.928063][ T5672] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 475.954407][ T5682] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 475.975335][ T5672] usb 5-1: config 0 has no interface number 0 [ 476.046543][ T5672] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 476.101804][ T5682] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 476.148361][ T5672] usb 5-1: config 0 interface 184 has no altsetting 0 [ 476.184316][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.222447][ T5672] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 476.247989][ T5672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.279288][ T5672] usb 5-1: Product: syz [ 476.305599][ T5682] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 476.312817][ T5672] usb 5-1: Manufacturer: syz [ 476.333020][ T5672] usb 5-1: SerialNumber: syz [ 476.403448][ T5672] usb 5-1: config 0 descriptor?? [ 476.487356][ T5672] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 476.558178][ T5672] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 476.567930][ T5682] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 477.072943][ T5682] usb 1-1: USB disconnect, device number 9 [ 477.095822][ T5682] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 478.603102][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 478.831341][ T7490] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 479.204719][ T5682] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 479.311526][ T5672] usb 5-1: USB disconnect, device number 12 [ 479.464080][ T5682] usb 2-1: Using ep0 maxpacket: 16 [ 479.557698][ T5682] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.783917][ T5682] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.715687][ T5682] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 480.806147][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.871298][ T5682] usb 2-1: config 0 descriptor?? [ 480.971978][ T5682] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 481.006817][ T5674] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 485.858285][ T3092] usb 2-1: USB disconnect, device number 9 [ 486.549938][ T5674] usb 4-1: device descriptor read/all, error -110 [ 486.757235][ T5674] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 488.390785][ T3092] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 488.648008][ T3092] usb 2-1: Using ep0 maxpacket: 32 [ 488.724201][ T3092] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 488.767089][ T3092] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 488.831727][ T3092] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 488.880172][ T3092] usb 2-1: config 1 has no interface number 0 [ 488.896650][ T3092] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.947711][ T3092] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 489.010522][ T3092] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 489.041372][ T3092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.092954][ T3092] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 489.248524][ T5679] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 489.377989][ T3092] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 489.545963][ T5679] usb 3-1: Using ep0 maxpacket: 32 [ 489.618472][ T5679] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 489.689073][ T5679] usb 3-1: config 0 has no interface number 0 [ 489.716808][ T5679] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 489.756646][ T5679] usb 3-1: config 0 interface 184 has no altsetting 0 [ 489.797463][ T5679] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 489.849584][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.860720][ T5674] usb 2-1: USB disconnect, device number 10 [ 489.890543][ T5679] usb 3-1: Product: syz [ 489.903754][ T5674] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 489.925662][ T5679] usb 3-1: Manufacturer: syz [ 489.954057][ T5679] usb 3-1: SerialNumber: syz [ 490.005999][ T5679] usb 3-1: config 0 descriptor?? [ 490.077053][ T5679] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 490.107695][ T5679] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 492.452015][ T5674] usb 3-1: USB disconnect, device number 13 [ 492.530217][ T7559] tipc: Can't bind to reserved service type 1 [ 492.554754][ T7559] misc userio: No port type given on /dev/userio [ 496.477397][ T5674] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 496.682749][ T5674] usb 4-1: Using ep0 maxpacket: 32 [ 496.741237][ T5674] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 496.781801][ T5674] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 496.819600][ T5674] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 496.851990][ T5674] usb 4-1: config 1 has no interface number 0 [ 496.877382][ T5674] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 496.925552][ T5674] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 497.002704][ T5674] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 497.024513][ T5674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.196001][ T5674] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 497.362218][ T5679] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 497.402225][ T5674] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 497.556817][ T5679] usb 1-1: Using ep0 maxpacket: 32 [ 497.633915][ T5679] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 497.665569][ T5679] usb 1-1: config 0 has no interface number 0 [ 497.692376][ T5679] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 497.775316][ T5679] usb 1-1: config 0 interface 184 has no altsetting 0 [ 497.814915][ T5679] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 497.882972][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.912709][ T5674] usb 4-1: USB disconnect, device number 21 [ 497.941220][ T5679] usb 1-1: Product: syz [ 497.955484][ T5674] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 497.966400][ T5679] usb 1-1: Manufacturer: syz [ 497.981582][ T5679] usb 1-1: SerialNumber: syz [ 498.041917][ T5679] usb 1-1: config 0 descriptor?? [ 498.089668][ T5679] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 498.139657][ T5679] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 500.488344][ T5679] usb 1-1: USB disconnect, device number 10 [ 501.227679][ T5674] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 501.418027][ T5674] usb 1-1: Using ep0 maxpacket: 16 [ 501.472561][ T5674] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.538413][ T5674] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 501.587829][ T5674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.663324][ T5674] usb 1-1: config 0 descriptor?? [ 501.753410][ T5674] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 501.767240][ T7620] netlink: 108 bytes leftover after parsing attributes in process `syz.2.717'. [ 501.910397][ T5679] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 502.177127][ T5679] usb 2-1: Using ep0 maxpacket: 32 [ 502.213449][ T5679] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 502.320557][ T5679] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 502.387372][ T5679] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 502.502550][ T5679] usb 2-1: config 1 has no interface number 0 [ 502.547797][ T5679] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.655007][ T5679] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 502.827776][ T5679] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 504.756395][ T5679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.506531][ T7630] misc userio: Invalid payload size [ 506.543895][ T7630] misc userio: No port type given on /dev/userio [ 508.177954][ T5674] usb 1-1: USB disconnect, device number 11 [ 508.221649][ T5679] usb 2-1: can't set config #1, error -71 [ 508.347679][ T5679] usb 2-1: USB disconnect, device number 11 [ 509.243837][ T7640] netlink: 149 bytes leftover after parsing attributes in process `syz.0.721'. [ 509.700145][ T5674] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 509.907106][ T5674] usb 4-1: Using ep0 maxpacket: 32 [ 509.947312][ T5674] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 509.967931][ T5674] usb 4-1: config 0 has no interface number 0 [ 509.994341][ T5674] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 510.053804][ T5674] usb 4-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 510.110693][ T5674] usb 4-1: config 0 interface 184 has no altsetting 0 [ 510.157949][ T5674] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 510.188292][ T5674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.232252][ T5674] usb 4-1: Product: syz [ 510.255172][ T5674] usb 4-1: Manufacturer: syz [ 510.273837][ T5674] usb 4-1: SerialNumber: syz [ 510.335413][ T5674] usb 4-1: config 0 descriptor?? [ 510.448754][ T5674] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 510.503735][ T5674] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 511.021140][ T5679] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 511.316492][ T5679] usb 3-1: Using ep0 maxpacket: 8 [ 511.350546][ T5679] usb 3-1: config 8 has an invalid interface number: 201 but max is 1 [ 511.392862][ T5679] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 511.465316][ T5679] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 511.482177][ T5679] usb 3-1: config 8 has no interface number 0 [ 511.513260][ T5679] usb 3-1: config 8 interface 201 altsetting 4 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 511.525515][ T3092] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 511.577342][ T5679] usb 3-1: config 8 interface 201 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 511.591432][ T5679] usb 3-1: config 8 interface 201 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 511.613138][ T5679] usb 3-1: config 8 interface 201 has no altsetting 0 [ 511.635727][ T5679] usb 3-1: New USB device found, idVendor=0421, idProduct=01f5, bcdDevice=e9.6f [ 511.681870][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.706632][ T5679] usb 3-1: Product: syz [ 511.711278][ T5679] usb 3-1: Manufacturer: syz [ 511.716571][ T5674] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 511.720052][ T5679] usb 3-1: SerialNumber: syz [ 511.754148][ T3092] usb 1-1: Using ep0 maxpacket: 16 [ 511.771155][ T3092] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 511.826621][ T3092] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 511.870904][ T3092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.896825][ T5674] usb 2-1: Using ep0 maxpacket: 32 [ 511.936367][ T3092] usb 1-1: config 0 descriptor?? [ 511.941083][ T5674] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 511.998549][ T5674] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 512.041585][ T5674] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 512.044325][ T3092] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 512.082587][ T5674] usb 2-1: config 1 has no interface number 0 [ 512.131813][ T5674] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 512.179597][ T5679] rndis_host 3-1:8.201: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 512.195133][ T5674] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 512.233507][ T5679] cdc_acm 3-1:8.201: Zero length descriptor references [ 512.250068][ T5674] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 512.282987][ T5679] cdc_acm 3-1:8.201: probe with driver cdc_acm failed with error -22 [ 512.302547][ T5674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.387462][ T5679] usb 3-1: USB disconnect, device number 14 [ 512.450353][ T5674] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 512.512281][ T4869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 512.527365][ T4869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 512.542536][ T4869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 512.593546][ T4869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 512.624759][ T4869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 512.710583][ T5674] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 513.071426][ T5674] usb 4-1: USB disconnect, device number 22 [ 513.290399][ T5672] usb 2-1: USB disconnect, device number 12 [ 513.374089][ T5672] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 514.697136][ T5573] Bluetooth: hci5: command tx timeout [ 514.748130][ T5672] usb 1-1: USB disconnect, device number 12 [ 515.153986][ T7681] netlink: 149 bytes leftover after parsing attributes in process `syz.1.737'. [ 516.448558][ T5679] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 516.587142][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.604531][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.773799][ T5679] usb 2-1: Using ep0 maxpacket: 32 [ 516.779974][ T5573] Bluetooth: hci5: command tx timeout [ 516.817646][ T5679] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 516.836664][ T5679] usb 2-1: config 0 has no interface number 0 [ 516.850450][ T5679] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 516.885584][ T5679] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 516.885769][ T5679] usb 2-1: config 0 interface 184 has no altsetting 0 [ 516.900836][ T5679] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 516.901017][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.901160][ T5679] usb 2-1: Product: syz [ 516.901312][ T5679] usb 2-1: Manufacturer: syz [ 516.901426][ T5679] usb 2-1: SerialNumber: syz [ 516.918307][ T5679] usb 2-1: config 0 descriptor?? [ 516.961546][ T5679] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 516.962587][ T5679] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 517.443275][ T7575] syz_tun (unregistering): left promiscuous mode [ 517.607438][ T5679] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 517.764697][ T66] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.778832][ T5679] usb 1-1: Using ep0 maxpacket: 32 [ 517.812585][ T5679] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 517.812742][ T5679] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 517.812883][ T5679] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 517.815552][ T5679] usb 1-1: config 1 has no interface number 0 [ 517.815689][ T5679] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.815867][ T5679] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 517.816111][ T5679] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 517.827300][ T5679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.976058][ T5679] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 518.051967][ T66] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.244495][ T7667] lo speed is unknown, defaulting to 1000 [ 518.257115][ T5679] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 518.560047][ T66] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.749109][ T5679] usb 1-1: USB disconnect, device number 13 [ 518.800148][ T5679] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 518.858621][ T5573] Bluetooth: hci5: command tx timeout [ 518.982796][ T66] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.007142][ T5672] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 519.206687][ T5672] usb 4-1: Using ep0 maxpacket: 16 [ 519.250409][ T5672] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.311453][ T5672] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 519.350798][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.415869][ T5672] usb 4-1: config 0 descriptor?? [ 519.516734][ T5672] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 519.565102][ T5679] usb 2-1: USB disconnect, device number 13 [ 519.862460][ T7724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'. [ 520.115208][ T7727] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 520.412959][ T7733] netlink: 149 bytes leftover after parsing attributes in process `syz.1.751'. [ 520.945128][ T5573] Bluetooth: hci5: command tx timeout [ 520.999414][ T66] bridge_slave_1: left allmulticast mode [ 521.043645][ T66] bridge_slave_1: left promiscuous mode [ 521.112749][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.798648][ T66] bridge_slave_0: left allmulticast mode [ 524.179690][ T66] bridge_slave_0: left promiscuous mode [ 524.788743][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.433635][ T3092] usb 4-1: USB disconnect, device number 23 [ 529.048090][ T5678] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 529.246801][ T5682] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 529.282061][ T5678] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.327322][ T5678] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 529.368921][ T5674] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 529.382186][ T5678] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.440142][ T5678] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 529.456596][ T5682] usb 4-1: Using ep0 maxpacket: 32 [ 529.500235][ T5678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.505988][ T5682] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 529.568954][ T5682] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 529.579242][ T5674] usb 1-1: Using ep0 maxpacket: 32 [ 529.616722][ T5674] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 529.630264][ T5682] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 529.649589][ T5678] usb 3-1: config 0 descriptor?? [ 529.652163][ T5674] usb 1-1: config 0 has no interface number 0 [ 529.681605][ T5682] usb 4-1: config 1 has no interface number 0 [ 529.712568][ T5674] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 529.724732][ T5682] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 529.762083][ T5674] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 529.781899][ T5682] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 529.829987][ T5674] usb 1-1: config 0 interface 184 has no altsetting 0 [ 529.841564][ T5682] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 529.887223][ T5674] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 529.902405][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.913532][ T5674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.929261][ T5674] usb 1-1: Product: syz [ 529.934142][ T5674] usb 1-1: Manufacturer: syz [ 529.941810][ T5674] usb 1-1: SerialNumber: syz [ 530.029046][ T5674] usb 1-1: config 0 descriptor?? [ 530.087934][ T5674] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 530.103618][ T5682] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 530.131379][ T5674] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 530.258229][ T5678] hid-picolcd 0003:04D8:F002.0004: item fetching failed at offset 4/5 [ 530.350219][ T5682] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 530.423127][ T5678] hid-picolcd 0003:04D8:F002.0004: device report parse failed [ 530.496907][ T5678] hid-picolcd 0003:04D8:F002.0004: probe with driver hid-picolcd failed with error -22 [ 530.529620][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.637072][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.649775][ T5678] usb 3-1: USB disconnect, device number 15 [ 530.669832][ T66] bond0 (unregistering): Released all slaves [ 530.882766][ T5682] usb 4-1: USB disconnect, device number 24 [ 530.924748][ T5682] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 532.565365][ T5679] usb 1-1: USB disconnect, device number 14 [ 532.752980][ T66] hsr_slave_0: left promiscuous mode [ 532.808323][ T66] hsr_slave_1: left promiscuous mode [ 532.838736][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.884509][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.939078][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.991904][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.954888][ T66] veth1_macvtap: left promiscuous mode [ 534.830608][ T5682] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 534.956622][ T66] veth0_macvtap: left promiscuous mode [ 534.976972][ T66] veth1_vlan: left promiscuous mode [ 534.997339][ T66] veth0_vlan: left promiscuous mode [ 535.086654][ T5682] usb 4-1: Using ep0 maxpacket: 16 [ 535.184043][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.265293][ T5682] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 535.357973][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.487707][ T5682] usb 4-1: config 0 descriptor?? [ 535.744244][ T5682] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 537.435052][ T5678] usb 4-1: USB disconnect, device number 25 [ 537.554977][ T5679] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 537.820066][ T5679] usb 2-1: Using ep0 maxpacket: 16 [ 538.216990][ T5679] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 538.240104][ T5679] usb 2-1: config 0 has no interface number 0 [ 539.094488][ T5679] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 539.132502][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.226793][ T5679] usb 2-1: Product: syz [ 539.437310][ T5679] usb 2-1: Manufacturer: syz [ 539.753671][ T5679] usb 2-1: SerialNumber: syz [ 542.096431][ T5679] usb 2-1: config 0 descriptor?? [ 542.307526][ T5678] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 542.715712][ T5679] usb 2-1: can't set config #0, error -71 [ 542.813681][ T5679] usb 2-1: USB disconnect, device number 14 [ 543.832525][ T66] team0 (unregistering): Port device team_slave_1 removed [ 543.970872][ T66] team0 (unregistering): Port device team_slave_0 removed [ 545.284104][ T5225] 8021q: adding VLAN 0 to HW filter on device eth1 [ 549.090884][ T5679] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 549.286824][ T5679] usb 3-1: Using ep0 maxpacket: 16 [ 549.298657][ T5678] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 549.346916][ T5679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.382610][ T5679] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 549.423387][ T5679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.499713][ T5682] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 549.538268][ T5678] usb 2-1: Using ep0 maxpacket: 32 [ 549.577644][ T5678] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 549.593011][ T5679] usb 3-1: config 0 descriptor?? [ 549.611422][ T5678] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 549.668940][ T5678] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 549.701202][ T5682] usb 4-1: Using ep0 maxpacket: 32 [ 549.705838][ T5679] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 549.718256][ T5678] usb 2-1: config 1 has no interface number 0 [ 549.749590][ T5682] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 549.755481][ T5678] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 549.785882][ T5682] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 549.810683][ T5682] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 549.814484][ T5678] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 549.848602][ T5682] usb 4-1: config 1 has no interface number 0 [ 549.882532][ T5682] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 549.885779][ T5678] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 549.922863][ T5682] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 549.924520][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.950764][ T5678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.958749][ T5682] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 549.988423][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.031244][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.064631][ T5678] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 550.072289][ T7667] bridge_slave_0: entered allmulticast mode [ 550.117738][ T7667] bridge_slave_0: entered promiscuous mode [ 550.132545][ T5682] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 550.232237][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.270645][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.279183][ T5678] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 550.313413][ T5682] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 550.325651][ T7667] bridge_slave_1: entered allmulticast mode [ 550.405026][ T7667] bridge_slave_1: entered promiscuous mode [ 550.588059][ T5674] usb 2-1: USB disconnect, device number 15 [ 550.680481][ T5674] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 550.847419][ T5679] usb 4-1: USB disconnect, device number 27 [ 550.928556][ T5679] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 551.119408][ T7667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.186583][ T7667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.673207][ T7667] team0: Port device team_slave_0 added [ 551.812526][ T7667] team0: Port device team_slave_1 added [ 552.214551][ T5674] usb 3-1: USB disconnect, device number 16 [ 552.481362][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.540217][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.713105][ T7667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.799031][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.849041][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.034404][ T7667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.332865][ T7667] hsr_slave_0: entered promiscuous mode [ 556.526963][ T7667] hsr_slave_1: entered promiscuous mode [ 556.645200][ T7667] debugfs: 'hsr0' already exists in 'hsr' [ 556.731551][ T7667] Cannot create hsr debugfs directory [ 557.549341][ T5679] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 557.610814][ T7904] warning: `syz.1.799' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 557.767748][ T5679] usb 1-1: Using ep0 maxpacket: 32 [ 557.822785][ T5679] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 557.883013][ T5679] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 557.942981][ T5679] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 557.985319][ T5679] usb 1-1: config 1 has no interface number 0 [ 558.022575][ T5679] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 558.093072][ T5679] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 558.168274][ T5679] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 558.210765][ T5679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.399707][ T5679] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 558.591597][ T5679] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 558.888611][ T5679] usb 1-1: USB disconnect, device number 15 [ 558.929398][ T5679] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 559.138958][ T5225] 8021q: adding VLAN 0 to HW filter on device eth2 [ 560.113910][ T7921] netlink: 149 bytes leftover after parsing attributes in process `syz.1.805'. [ 560.299617][ T7667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 560.477184][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 560.529903][ T7667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 560.656027][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 560.731999][ T7667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 560.901851][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'. [ 560.910829][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 560.976939][ T7667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 561.151500][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 566.131241][ T5679] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 566.785461][ T5679] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.955654][ T5679] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 568.135932][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 568.211229][ T5679] usb 3-1: Product: syz [ 568.251760][ T5679] usb 3-1: Manufacturer: syz [ 568.287197][ T5679] usb 3-1: SerialNumber: syz [ 568.352403][ T5679] usb 3-1: config 0 descriptor?? [ 570.396491][ T5679] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 570.654501][ T7667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.824821][ T9] usb 3-1: USB disconnect, device number 17 [ 571.535165][ T7667] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.899904][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.907890][ T5765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.539530][ T7977] netlink: 149 bytes leftover after parsing attributes in process `syz.1.819'. [ 574.847615][ T7987] loop7: detected capacity change from 0 to 16384 [ 575.194167][ T7987] loop7: detected capacity change from 16384 to 0 [ 575.777621][ T4869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 575.797862][ T4869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 575.810064][ T4869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 575.825330][ T4869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 575.827082][ T5679] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 575.846690][ T4869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 576.499765][ T5679] usb 3-1: unable to get BOS descriptor or descriptor too short [ 576.541844][ T5679] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 576.616024][ T5679] usb 3-1: can't read configurations, error -71 [ 576.928698][ T8005] PKCS8: Unsupported PKCS#8 version [ 577.631953][ T5225] 8021q: adding VLAN 0 to HW filter on device eth3 [ 577.758593][ T5672] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 577.898150][ T4869] Bluetooth: hci3: command tx timeout [ 578.007443][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.015990][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.026942][ T5672] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.130679][ T5672] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 578.200581][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 578.251828][ T5672] usb 1-1: Product: syz [ 578.272746][ T5672] usb 1-1: Manufacturer: syz [ 578.311259][ T5672] usb 1-1: SerialNumber: syz [ 578.376755][ T5672] usb 1-1: config 0 descriptor?? [ 579.504347][ T8026] netlink: 149 bytes leftover after parsing attributes in process `syz.3.832'. [ 579.977154][ T4869] Bluetooth: hci3: command tx timeout [ 581.177806][ T5672] usb 1-1: USB disconnect, device number 16 [ 581.210026][ T7995] lo speed is unknown, defaulting to 1000 [ 581.655436][ T5765] bridge_slave_1: left allmulticast mode [ 581.692387][ T5765] bridge_slave_1: left promiscuous mode [ 581.714220][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.781748][ T5765] bridge_slave_0: left allmulticast mode [ 581.850787][ T5765] bridge_slave_0: left promiscuous mode [ 581.865029][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.065366][ T4869] Bluetooth: hci3: command tx timeout [ 584.176779][ T4869] Bluetooth: hci3: command tx timeout [ 585.649240][ T8079] netlink: 149 bytes leftover after parsing attributes in process `syz.1.845'. [ 585.764523][ T5765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.826429][ T5765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.875867][ T5765] bond0 (unregistering): Released all slaves [ 586.492572][ T5765] hsr_slave_0: left promiscuous mode [ 586.533727][ T5765] hsr_slave_1: left promiscuous mode [ 586.551888][ T5765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.589022][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 586.598838][ T5765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.824031][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.939755][ T9] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 586.995161][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 587.033183][ T9] usb 3-1: Product: syz [ 587.043108][ T9] usb 3-1: Manufacturer: syz [ 587.071316][ T9] usb 3-1: SerialNumber: syz [ 587.092601][ T9] usb 3-1: config 0 descriptor?? [ 589.852924][ T5672] usb 3-1: USB disconnect, device number 20 [ 591.083798][ T5765] team0 (unregistering): Port device team_slave_1 removed [ 591.153179][ T5765] team0 (unregistering): Port device team_slave_0 removed [ 593.851341][ T5225] 8021q: adding VLAN 0 to HW filter on device eth4 [ 595.170066][ T8128] netlink: 149 bytes leftover after parsing attributes in process `syz.3.860'. [ 595.885324][ T8144] random: crng reseeded on system resumption [ 596.096786][ T5682] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 596.347283][ T5682] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.389227][ T5682] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.479543][ T5682] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 596.517288][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 596.575792][ T5682] usb 1-1: Product: syz [ 596.590309][ T5682] usb 1-1: Manufacturer: syz [ 596.610782][ T5682] usb 1-1: SerialNumber: syz [ 596.668712][ T5682] usb 1-1: config 0 descriptor?? [ 596.770370][ T5682] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 596.810473][ T5682] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 596.869224][ T5682] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 597.809496][ T8170] fuse: Bad value for 'fd' [ 598.062530][ T7995] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.104464][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.119265][ T7995] bridge_slave_0: entered allmulticast mode [ 598.153683][ T7995] bridge_slave_0: entered promiscuous mode [ 598.208074][ T7995] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.225674][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.236825][ T7995] bridge_slave_1: entered allmulticast mode [ 598.259173][ T7995] bridge_slave_1: entered promiscuous mode [ 598.885806][ T7995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.061881][ T7995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.361233][ T9] usb 1-1: USB disconnect, device number 17 [ 599.694012][ T8195] netlink: 149 bytes leftover after parsing attributes in process `syz.3.875'. [ 599.736606][ T8188] syzkaller0: entered promiscuous mode [ 599.756694][ T8188] syzkaller0: entered allmulticast mode [ 601.317505][ T5225] 8021q: adding VLAN 0 to HW filter on device eth5 [ 601.384711][ T7995] team0: Port device team_slave_0 added [ 601.512176][ T7995] team0: Port device team_slave_1 added [ 602.316025][ T7995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.364901][ T7995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.466754][ T7995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.641406][ T7995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.723265][ T7995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.842152][ T7995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.429662][ T7995] hsr_slave_0: entered promiscuous mode [ 605.571595][ T7995] hsr_slave_1: entered promiscuous mode [ 605.700162][ T7995] debugfs: 'hsr0' already exists in 'hsr' [ 605.776635][ T7995] Cannot create hsr debugfs directory [ 606.381094][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 606.663252][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.837047][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.061317][ T9] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 609.878349][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 610.019008][ T9] usb 1-1: Product: syz [ 610.108860][ T9] usb 1-1: Manufacturer: syz [ 610.147423][ T9] usb 1-1: SerialNumber: syz [ 610.280345][ T9] usb 1-1: config 0 descriptor?? [ 610.699356][ T9] usb 1-1: can't set config #0, error -71 [ 610.753236][ T9] usb 1-1: USB disconnect, device number 18 [ 616.651798][ T7995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 616.677097][ T5672] IPVS: starting estimator thread 0... [ 616.770002][ T7995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 616.803212][ T7995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 616.827003][ T8290] IPVS: using max 192 ests per chain, 9600 per kthread [ 616.922991][ T7995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.964842][ T7995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 617.103407][ T7995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 617.155910][ T7995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 618.108410][ T7995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.492285][ T8313] can: request_module (can-proto-0) failed. [ 622.460542][ T8324] netlink: 149 bytes leftover after parsing attributes in process `syz.0.905'. [ 623.204390][ T8335] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 623.211236][ T8335] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 623.221103][ T8335] vhci_hcd vhci_hcd.0: Device attached [ 623.278837][ T8338] vhci_hcd: connection closed [ 623.552311][ T7995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.731677][ T5672] usb 38-1: SetAddress Request (2) to port 0 [ 623.747503][ T6417] vhci_hcd vhci_hcd.2: stop threads [ 623.832062][ T6417] vhci_hcd vhci_hcd.2: release socket [ 623.848447][ T5672] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 623.912881][ T6417] vhci_hcd vhci_hcd.2: disconnect device [ 624.264174][ T7995] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.596102][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.604009][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.254500][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.262304][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.677808][ T5674] IPVS: starting estimator thread 0... [ 626.898421][ T8357] IPVS: using max 144 ests per chain, 7200 per kthread [ 627.594089][ T8361] netlink: 64 bytes leftover after parsing attributes in process `syz.0.910'. [ 628.150153][ T8363] netdevsim netdevsim3 ªªªªª»: renamed from netdevsim0 (while UP) [ 629.017319][ T5672] usb 38-1: device descriptor read/8, error -110 [ 629.477230][ T5672] usb usb38-port1: attempt power cycle [ 630.183533][ T5672] usb usb38-port1: unable to enumerate USB device [ 632.261337][ T4869] Bluetooth: hci1: unexpected event for opcode 0x0c14 [ 632.644156][ T8404] netlink: 149 bytes leftover after parsing attributes in process `syz.1.919'. [ 639.427167][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.475900][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.712216][ T8438] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 639.722818][ T8438] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 639.737621][ T8438] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 639.770101][ T8438] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 639.788011][ T8438] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 640.163170][ T8444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.927'. [ 641.899225][ T4869] Bluetooth: hci5: command tx timeout [ 642.381713][ T8464] netlink: 149 bytes leftover after parsing attributes in process `syz.2.932'. [ 643.976631][ T4869] Bluetooth: hci5: command tx timeout [ 646.056999][ T4869] Bluetooth: hci5: command tx timeout [ 648.217388][ T4869] Bluetooth: hci5: command tx timeout [ 651.442339][ T8437] lo speed is unknown, defaulting to 1000 [ 651.999641][ T8512] lo speed is unknown, defaulting to 1000 [ 653.884861][ T1057] bridge_slave_1: left allmulticast mode [ 653.918875][ T1057] bridge_slave_1: left promiscuous mode [ 653.940320][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.053331][ T1057] bridge_slave_0: left allmulticast mode [ 654.076730][ T1057] bridge_slave_0: left promiscuous mode [ 654.142990][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.497979][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.671311][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.779386][ T1057] bond0 (unregistering): Released all slaves [ 658.847121][ T5672] IPVS: starting estimator thread 0... [ 658.878277][ T8555] netlink: 108 bytes leftover after parsing attributes in process `syz.2.952'. [ 658.899409][ T1057] hsr_slave_0: left promiscuous mode [ 658.956794][ T1057] hsr_slave_1: left promiscuous mode [ 658.980810][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.005593][ T8556] IPVS: using max 192 ests per chain, 9600 per kthread [ 659.057372][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.239573][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 660.239663][ T29] audit: type=1800 audit(1777653465.572:32): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.955" name="/newroot/232/file0" dev="tmpfs" ino=1211 res=0 errno=0 [ 660.989656][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 662.108367][ T8573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.957'. [ 662.439796][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 665.787461][ T8596] netem: change failed [ 668.045523][ T8438] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 668.064804][ T8438] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 668.081045][ T8438] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 668.099884][ T8438] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 668.131230][ T8438] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 668.176766][ T8618] netlink: 108 bytes leftover after parsing attributes in process `syz.1.965'. [ 669.965426][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.998390][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.043285][ T8437] bridge_slave_0: entered allmulticast mode [ 670.092251][ T8437] bridge_slave_0: entered promiscuous mode [ 670.192685][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.224701][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.226727][ T8438] Bluetooth: hci3: command tx timeout [ 670.286771][ T8437] bridge_slave_1: entered allmulticast mode [ 670.361884][ T8437] bridge_slave_1: entered promiscuous mode [ 671.005542][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.142240][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.744149][ T8437] team0: Port device team_slave_0 added [ 671.857319][ T8437] team0: Port device team_slave_1 added [ 672.307868][ T8438] Bluetooth: hci3: command tx timeout [ 672.347564][ T5572] syz_tun (unregistering): left promiscuous mode [ 673.089724][ T8662] netlink: 108 bytes leftover after parsing attributes in process `syz.0.975'. [ 673.165888][ T6506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.250953][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.266539][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.338679][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.474065][ T6506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.594384][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.632879][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.756608][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.960016][ T6506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.369424][ T6506] netdevsim netdevsim3 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.386893][ T8438] Bluetooth: hci3: command tx timeout [ 674.484025][ T8614] lo speed is unknown, defaulting to 1000 [ 676.188147][ T8437] hsr_slave_0: entered promiscuous mode [ 676.226442][ T8437] hsr_slave_1: entered promiscuous mode [ 676.283573][ T8437] debugfs: 'hsr0' already exists in 'hsr' [ 676.298953][ T8437] Cannot create hsr debugfs directory [ 676.467316][ T8438] Bluetooth: hci3: command tx timeout [ 679.660965][ T8689] ===================================================== [ 679.668720][ T8689] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 679.677620][ T8689] mptcp_established_options+0x112f/0x3530 [ 679.689702][ T8689] tcp_established_options+0x312/0xcc0 [ 679.698217][ T8689] __tcp_transmit_skb+0x5dc/0x5fe0 [ 679.703799][ T8689] __tcp_send_ack+0x967/0xad0 [ 679.709359][ T8689] tcp_send_ack+0x3d/0x60 [ 679.714336][ T8689] mptcp_subflow_shutdown+0x164/0x690 [ 679.720075][ T8689] mptcp_check_send_data_fin+0x31b/0x3d0 [ 679.725960][ T8689] __mptcp_close+0x860/0x1360 [ 679.731124][ T8689] mptcp_close+0x42/0x260 [ 679.735662][ T8689] inet_release+0x1ee/0x2a0 [ 679.740773][ T8689] inet6_release+0x75/0xe0 [ 679.745845][ T8689] sock_close+0xd6/0x2f0 [ 679.750649][ T8689] __fput+0x60e/0x1010 [ 679.754971][ T8689] ____fput+0x25/0x30 [ 679.759964][ T8689] task_work_run+0x208/0x2b0 [ 679.765057][ T8689] exit_to_user_mode_loop+0x306/0x1b60 [ 679.770971][ T8689] do_syscall_64+0x236/0xf80 [ 679.776022][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.782408][ T8689] [ 679.790262][ T8689] Local variable opts created at: [ 679.795485][ T8689] __tcp_transmit_skb+0x4d/0x5fe0 [ 679.803219][ T8689] __tcp_send_ack+0x967/0xad0 [ 679.808541][ T8689] [ 679.811060][ T8689] CPU: 0 UID: 0 PID: 8689 Comm: syz.0.983 Not tainted syzkaller #0 PREEMPT(full) [ 679.820768][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 679.831446][ T8689] ===================================================== [ 679.838597][ T8689] Disabling lock debugging due to kernel taint [ 679.844936][ T8693] ===================================================== [ 679.852538][ T8693] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 679.861545][ T8693] mptcp_established_options+0x112f/0x3530 [ 679.867897][ T8693] tcp_established_options+0x312/0xcc0 [ 679.874056][ T8693] __tcp_transmit_skb+0x5dc/0x5fe0 [ 679.879806][ T8693] __tcp_send_ack+0x967/0xad0 [ 679.885196][ T8693] tcp_send_ack+0x3d/0x60 [ 679.892423][ T8693] mptcp_subflow_shutdown+0x164/0x690 [ 679.899252][ T8693] mptcp_check_send_data_fin+0x31b/0x3d0 [ 679.905263][ T8693] __mptcp_close+0x860/0x1360 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 679.910360][ T8693] mptcp_close+0x42/0x260 [ 679.914938][ T8693] inet_release+0x1ee/0x2a0 [ 679.920693][ T8693] sock_close+0xd6/0x2f0 [ 679.925281][ T8693] __fput+0x60e/0x1010 [ 679.930058][ T8693] ____fput+0x25/0x30 [ 679.934261][ T8693] task_work_run+0x208/0x2b0 [ 679.939802][ T8693] exit_to_user_mode_loop+0x306/0x1b60 [ 679.945681][ T8693] do_syscall_64+0x236/0xf80 [ 679.951453][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.958013][ T8693] [ 679.960446][ T8693] Local variable opts created at: [ 679.965749][ T8693] __tcp_transmit_skb+0x4d/0x5fe0 [ 679.971437][ T8693] __tcp_send_ack+0x967/0xad0 [ 679.976785][ T8693] [ 679.979286][ T8693] CPU: 1 UID: 0 PID: 8693 Comm: syz.0.983 Tainted: G B syzkaller #0 PREEMPT(full) [ 679.992766][ T8693] Tainted: [B]=BAD_PAGE [ 679.998020][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.008620][ T8693] ===================================================== [ 680.064205][ T8689] Kernel panic - not syncing: kmsan.panic set ... [ 680.070936][ T8689] CPU: 0 UID: 0 PID: 8689 Comm: syz.0.983 Tainted: G B syzkaller #0 PREEMPT(full) [ 680.082135][ T8689] Tainted: [B]=BAD_PAGE [ 680.086412][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.096805][ T8689] Call Trace: [ 680.100385][ T8689] [ 680.103527][ T8689] __dump_stack+0x26/0x30 [ 680.108087][ T8689] dump_stack_lvl+0x50/0x1c0 [ 680.113118][ T8689] ? dump_stack+0x12/0x25 [ 680.117819][ T8689] dump_stack+0x1e/0x25 [ 680.122463][ T8689] vpanic+0x7b4/0x1430 [ 680.126818][ T8689] panic+0x15d/0x160 [ 680.131198][ T8689] kmsan_report+0x31a/0x320 [ 680.136133][ T8689] ? __msan_warning+0x1b/0x30 [ 680.141035][ T8689] ? mptcp_established_options+0x112f/0x3530 [ 680.147342][ T8689] ? tcp_established_options+0x312/0xcc0 [ 680.153245][ T8689] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 680.159012][ T8689] ? __tcp_send_ack+0x967/0xad0 [ 680.164240][ T8689] ? tcp_send_ack+0x3d/0x60 [ 680.168910][ T8689] ? mptcp_subflow_shutdown+0x164/0x690 [ 680.174890][ T8689] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 680.181127][ T8689] ? __mptcp_close+0x860/0x1360 [ 680.186230][ T8689] ? mptcp_close+0x42/0x260 [ 680.191000][ T8689] ? inet_release+0x1ee/0x2a0 [ 680.196028][ T8689] ? inet6_release+0x75/0xe0 [ 680.200797][ T8689] ? sock_close+0xd6/0x2f0 [ 680.205572][ T8689] ? __fput+0x60e/0x1010 [ 680.210050][ T8689] ? ____fput+0x25/0x30 [ 680.214437][ T8689] ? task_work_run+0x208/0x2b0 [ 680.219520][ T8689] ? exit_to_user_mode_loop+0x306/0x1b60 [ 680.225513][ T8689] ? do_syscall_64+0x236/0xf80 [ 680.230639][ T8689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.237168][ T8689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.243436][ T8689] ? kmsan_get_metadata+0xf1/0x160 [ 680.248886][ T8689] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 680.255273][ T8689] ? mptcp_established_options+0xe1/0x3530 [ 680.261346][ T8689] ? filter_irq_stacks+0x49/0x190 [ 680.266622][ T8689] ? stack_depot_save_flags+0x35/0x790 [ 680.272467][ T8689] ? kmsan_get_metadata+0xf1/0x160 [ 680.278675][ T8689] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 680.285303][ T8689] ? kmsan_get_metadata+0xf1/0x160 [ 680.290711][ T8689] __msan_warning+0x1b/0x30 [ 680.295487][ T8689] mptcp_established_options+0x112f/0x3530 [ 680.301561][ T8689] ? kmsan_get_metadata+0xf1/0x160 [ 680.307073][ T8689] tcp_established_options+0x312/0xcc0 [ 680.312932][ T8689] __tcp_transmit_skb+0x5dc/0x5fe0 [ 680.318440][ T8689] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 680.325163][ T8689] ? kmsan_get_metadata+0xf1/0x160 [ 680.330924][ T8689] ? kmsan_get_metadata+0xf1/0x160 [ 680.336410][ T8689] ? kmsan_get_metadata+0xf1/0x160 [ 680.341802][ T8689] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 680.347908][ T8689] ? __alloc_skb+0xb7d/0x1190 [ 680.352854][ T8689] __tcp_send_ack+0x967/0xad0 [ 680.358101][ T8689] tcp_send_ack+0x3d/0x60 [ 680.363040][ T8689] mptcp_subflow_shutdown+0x164/0x690 [ 680.368869][ T8689] mptcp_check_send_data_fin+0x31b/0x3d0 [ 680.374863][ T8689] __mptcp_close+0x860/0x1360 [ 680.379899][ T8689] ? __pfx_mptcp_close+0x10/0x10 [ 680.385467][ T8689] mptcp_close+0x42/0x260 [ 680.390005][ T8689] ? __pfx_mptcp_close+0x10/0x10 [ 680.395335][ T8689] inet_release+0x1ee/0x2a0 [ 680.400145][ T8689] inet6_release+0x75/0xe0 [ 680.405094][ T8689] ? __pfx_inet6_release+0x10/0x10 [ 680.410509][ T8689] sock_close+0xd6/0x2f0 [ 680.415123][ T8689] ? __pfx_sock_close+0x10/0x10 [ 680.420172][ T8689] __fput+0x60e/0x1010 [ 680.424694][ T8689] ? __pfx_____fput+0x10/0x10 [ 680.429617][ T8689] ____fput+0x25/0x30 [ 680.433771][ T8689] task_work_run+0x208/0x2b0 [ 680.439155][ T8689] exit_to_user_mode_loop+0x306/0x1b60 [ 680.444901][ T8689] ? __x64_sys_close_range+0x97/0xe0 [ 680.450484][ T8689] do_syscall_64+0x236/0xf80 [ 680.455780][ T8689] ? clear_bhb_loop+0x50/0xa0 [ 680.460705][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.466755][ T8689] RIP: 0033:0x7fb495b9cdd9 [ 680.471716][ T8689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.491918][ T8689] RSP: 002b:00007ffcbf589638 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 680.500842][ T8689] RAX: 0000000000000000 RBX: 00007fb495e17da0 RCX: 00007fb495b9cdd9 [ 680.508932][ T8689] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 680.517631][ T8689] RBP: 00007fb495e17da0 R08: 0000000000000006 R09: 0000000000000000 [ 680.526158][ T8689] R10: 00007fb495e17cb0 R11: 0000000000000246 R12: 00000000000a5e98 [ 680.534766][ T8689] R13: 00007fb495e1618c R14: 00000000000a5e04 R15: 00007ffcbf589740 [ 680.542987][ T8689] [ 682.245034][ T8689] Shutting down cpus with NMI [ 682.251305][ T8689] Kernel Offset: disabled [ 682.255788][ T8689] Rebooting in 86400 seconds..