last executing test programs: 13.079609835s ago: executing program 2 (id=895): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000001340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201201010000f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 9.773958561s ago: executing program 4 (id=906): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = eventfd2(0x7f, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r2], 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={0x0, 0x1}) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 9.102250365s ago: executing program 2 (id=910): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000740)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000400)={0x60, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.574714259s ago: executing program 4 (id=915): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x6a7, 0x0, 0x5}]}) 6.473983258s ago: executing program 3 (id=916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0xffe) 5.756406242s ago: executing program 0 (id=918): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000c00)}, 0x3) 5.404466129s ago: executing program 4 (id=919): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xe0e65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, 0x0) 5.374443573s ago: executing program 3 (id=920): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000001340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201201010000f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.25141334s ago: executing program 0 (id=922): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) msync(&(0x7f0000352000/0x4000)=nil, 0x4000, 0x5) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4402000010000100feffffff00010000fe880000000000000000000000000001fe8000000000000000000000000000bb000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d56c0000007f0000016b69ca39b18f5ccd00000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffcffffff080000002abd700004350000020001022000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f00000000000000810000000000400009000000000000005f000000000000000800180009"], 0x244}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) clock_gettime(0x6, 0x0) clock_settime(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80) 4.627145925s ago: executing program 4 (id=923): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.520474302s ago: executing program 2 (id=924): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 4.481864114s ago: executing program 1 (id=925): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x1d, 0x10001, 0x5, 0x4, 0x4, 0x2, 0x809, 0x40000003, 0x6, 0x7, 0xfffffffa, 0x8, 0x7fffffff, 0x0, 0x1], 0x1, 0x20000001}) 3.930500539s ago: executing program 0 (id=926): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x7, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x10, 0x1, 0x51, 0x107}}], 0x18}, 0x404c840) 3.689081611s ago: executing program 1 (id=927): set_mempolicy(0x2003, 0x0, 0x3f) 3.634576526s ago: executing program 2 (id=928): syz_open_dev$evdev(0x0, 0x2, 0x822b01) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.302052917s ago: executing program 0 (id=929): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x5, 0xa64a, 0x52, 0x4000008000, 0x4, 0x58}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xa, 0x7, 0x4, 0xb, 0x80000006, 0x400}, 0x0, 0x0) 3.222631811s ago: executing program 1 (id=930): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003b80)=""/4066, 0xfe2}, {&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f0000002b40)=""/4126, 0x101e}], 0x3}, 0x40000020) 2.870345731s ago: executing program 2 (id=931): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x880) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)=""/76, 0x4c}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f0000000c00)=""/4134, 0x1026}, {&(0x7f00000006c0)=""/207, 0xcf}, {&(0x7f0000000140)=""/132, 0x84}, {&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f00000003c0)=""/195, 0xc3}], 0x8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 2.79214752s ago: executing program 1 (id=932): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000c00)}, 0x3) 2.0782262s ago: executing program 2 (id=933): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000040)={0x0, 0xa, 0xfffffffffffffff4, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.07783563s ago: executing program 1 (id=934): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, 0x0) 1.655787174s ago: executing program 3 (id=935): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x33, 0x2000051b) 1.39020965s ago: executing program 3 (id=936): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) 1.011319962s ago: executing program 4 (id=937): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) getpgid(0xffffffffffffffff) getpid() bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local, 0x1}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.010934441s ago: executing program 0 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214042, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 646.49524ms ago: executing program 3 (id=939): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x7, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x10, 0x1, 0x51, 0x107}}], 0x18}, 0x404c840) 312.434212ms ago: executing program 3 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd110f31ba5ae65e31", 0xf8, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 100.019838ms ago: executing program 4 (id=941): syz_open_dev$evdev(0x0, 0x2, 0x822b01) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 46.079302ms ago: executing program 0 (id=942): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003b80)=""/4066, 0xfe2}, {&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f0000002b40)=""/4126, 0x101e}], 0x3}, 0x40000020) 0s ago: executing program 1 (id=943): r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x10, 0x700, 0x6, 0x0, {{0x5, 0x4, 0x2, 0x34, 0x14, 0x68, 0x0, 0xc, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 188.172941][ T5559] cgroup: Unknown subsys name 'net' [ 188.290469][ T5559] cgroup: Unknown subsys name 'cpuset' [ 188.308875][ T5559] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 194.638293][ T5559] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 199.389293][ T5580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.401916][ T5580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.414533][ T5580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.441266][ T5580] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.457536][ T5580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.511728][ T5583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.526914][ T5586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.536770][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.551685][ T5586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.563936][ T5586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.594216][ T5586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.604758][ T5586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.615233][ T5586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.624671][ T5586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.639473][ T5580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.671487][ T5586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.683105][ T5586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.691357][ T5580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.721778][ T4877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.733882][ T4877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.910680][ T5583] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.920379][ T5583] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.933222][ T5583] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.947959][ T5583] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.961498][ T5583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.545041][ T5583] Bluetooth: hci0: command tx timeout [ 201.624814][ T5583] Bluetooth: hci1: command tx timeout [ 201.785104][ T5583] Bluetooth: hci3: command tx timeout [ 201.790902][ T4877] Bluetooth: hci2: command tx timeout [ 202.026495][ T4877] Bluetooth: hci4: command tx timeout [ 203.626219][ T4877] Bluetooth: hci0: command tx timeout [ 203.705541][ T4877] Bluetooth: hci1: command tx timeout [ 203.866630][ T4877] Bluetooth: hci2: command tx timeout [ 203.872396][ T5583] Bluetooth: hci3: command tx timeout [ 204.041968][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.049655][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.105269][ T5583] Bluetooth: hci4: command tx timeout [ 204.643986][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.665063][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.687930][ T5577] bridge_slave_0: entered allmulticast mode [ 204.712060][ T5577] bridge_slave_0: entered promiscuous mode [ 204.743723][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.775343][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.789880][ T5577] bridge_slave_1: entered allmulticast mode [ 204.827326][ T5577] bridge_slave_1: entered promiscuous mode [ 204.926001][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.061785][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.177749][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.187465][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.197375][ T5581] bridge_slave_0: entered allmulticast mode [ 205.208814][ T5581] bridge_slave_0: entered promiscuous mode [ 205.226212][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.235512][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.244140][ T5582] bridge_slave_0: entered allmulticast mode [ 205.277401][ T5582] bridge_slave_0: entered promiscuous mode [ 205.352074][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.361578][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.370604][ T5581] bridge_slave_1: entered allmulticast mode [ 205.380115][ T5581] bridge_slave_1: entered promiscuous mode [ 205.392408][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.400131][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.408726][ T5582] bridge_slave_1: entered allmulticast mode [ 205.417692][ T5582] bridge_slave_1: entered promiscuous mode [ 205.469414][ T5577] team0: Port device team_slave_0 added [ 205.648902][ T5577] team0: Port device team_slave_1 added [ 205.704933][ T5583] Bluetooth: hci0: command tx timeout [ 205.755482][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.784981][ T5583] Bluetooth: hci1: command tx timeout [ 205.805036][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.816838][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.825772][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.836090][ T5593] bridge_slave_0: entered allmulticast mode [ 205.845205][ T5593] bridge_slave_0: entered promiscuous mode [ 205.857152][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.865027][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.872981][ T5584] bridge_slave_0: entered allmulticast mode [ 205.881777][ T5584] bridge_slave_0: entered promiscuous mode [ 205.902654][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.944931][ T5583] Bluetooth: hci3: command tx timeout [ 205.950858][ T4877] Bluetooth: hci2: command tx timeout [ 205.953821][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.000515][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.008956][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.017222][ T5593] bridge_slave_1: entered allmulticast mode [ 206.026355][ T5593] bridge_slave_1: entered promiscuous mode [ 206.037000][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.045168][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.053049][ T5584] bridge_slave_1: entered allmulticast mode [ 206.062325][ T5584] bridge_slave_1: entered promiscuous mode [ 206.100988][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.108598][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.135415][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.185243][ T5583] Bluetooth: hci4: command tx timeout [ 206.264199][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.271461][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.297853][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.318009][ T5581] team0: Port device team_slave_0 added [ 206.389650][ T5582] team0: Port device team_slave_0 added [ 206.422806][ T5581] team0: Port device team_slave_1 added [ 206.451486][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.470850][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.488233][ T5582] team0: Port device team_slave_1 added [ 206.534292][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.551946][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.728846][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.736407][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.763316][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.834929][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.842518][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.869282][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.911097][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.918909][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.945806][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.966542][ T5593] team0: Port device team_slave_0 added [ 206.981050][ T5584] team0: Port device team_slave_0 added [ 206.989344][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.997213][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.024976][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.052095][ T5577] hsr_slave_0: entered promiscuous mode [ 207.061287][ T5577] hsr_slave_1: entered promiscuous mode [ 207.097074][ T5593] team0: Port device team_slave_1 added [ 207.110773][ T5584] team0: Port device team_slave_1 added [ 207.264425][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.271949][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.299119][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.370940][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.378578][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.405452][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.448734][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.456559][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.483032][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.540925][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.548264][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.574792][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.682937][ T5581] hsr_slave_0: entered promiscuous mode [ 207.691970][ T5581] hsr_slave_1: entered promiscuous mode [ 207.700543][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 207.706535][ T5581] Cannot create hsr debugfs directory [ 207.745124][ T5582] hsr_slave_0: entered promiscuous mode [ 207.754008][ T5582] hsr_slave_1: entered promiscuous mode [ 207.762499][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 207.768495][ T5582] Cannot create hsr debugfs directory [ 207.786271][ T5583] Bluetooth: hci0: command tx timeout [ 207.865041][ T5583] Bluetooth: hci1: command tx timeout [ 208.024905][ T5583] Bluetooth: hci3: command tx timeout [ 208.030636][ T4877] Bluetooth: hci2: command tx timeout [ 208.131731][ T5593] hsr_slave_0: entered promiscuous mode [ 208.140794][ T5593] hsr_slave_1: entered promiscuous mode [ 208.149296][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 208.155392][ T5593] Cannot create hsr debugfs directory [ 208.175867][ T5584] hsr_slave_0: entered promiscuous mode [ 208.185353][ T5584] hsr_slave_1: entered promiscuous mode [ 208.193359][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 208.199569][ T5584] Cannot create hsr debugfs directory [ 208.266322][ T5583] Bluetooth: hci4: command tx timeout [ 209.400081][ T5577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.425531][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 209.470088][ T5577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.489416][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.516220][ T5577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.537415][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.566100][ T5577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.587103][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.670621][ T5581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.715870][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 209.727051][ T5581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.748569][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.759283][ T5581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.780288][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.797262][ T5581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.819989][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.062115][ T5582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.089599][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.122191][ T5582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.143511][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.159095][ T5582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.182457][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.227669][ T5582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.249887][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.581608][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.642417][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.679747][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.702151][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.713757][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.742929][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.788839][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.810070][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.026945][ T5584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.051234][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.062408][ T5584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.083489][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.124120][ T5584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.147513][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.185477][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.201567][ T5584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.227741][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.532743][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.553318][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.661737][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.669299][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.755434][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.762892][ T3366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.812455][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.951564][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.971700][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.979403][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.044277][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.051791][ T3366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.183989][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.225881][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.358341][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.365895][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.436285][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.443795][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.508804][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.641110][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.648750][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.727595][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.862919][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.870903][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.062790][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.239147][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.246879][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.377745][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.385426][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.881851][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.396680][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.871140][ T5577] veth0_vlan: entered promiscuous mode [ 217.150999][ T5577] veth1_vlan: entered promiscuous mode [ 217.240843][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.439345][ T5581] veth0_vlan: entered promiscuous mode [ 217.544964][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.722911][ T5581] veth1_vlan: entered promiscuous mode [ 217.755270][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.969857][ T5577] veth0_macvtap: entered promiscuous mode [ 218.038850][ T5577] veth1_macvtap: entered promiscuous mode [ 218.373572][ T5593] veth0_vlan: entered promiscuous mode [ 218.399714][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.409735][ T5581] veth0_macvtap: entered promiscuous mode [ 218.500506][ T5581] veth1_macvtap: entered promiscuous mode [ 218.533880][ T5593] veth1_vlan: entered promiscuous mode [ 218.559767][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.680654][ T112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.691995][ T3366] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.720875][ T5584] veth0_vlan: entered promiscuous mode [ 218.744182][ T3366] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.753978][ T3366] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.863403][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.919008][ T5584] veth1_vlan: entered promiscuous mode [ 218.946130][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.080800][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.096644][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.142953][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.163781][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.278355][ T5582] veth0_vlan: entered promiscuous mode [ 219.418409][ T5593] veth0_macvtap: entered promiscuous mode [ 219.461603][ T5582] veth1_vlan: entered promiscuous mode [ 219.538612][ T5593] veth1_macvtap: entered promiscuous mode [ 219.758969][ T5584] veth0_macvtap: entered promiscuous mode [ 219.812068][ T5584] veth1_macvtap: entered promiscuous mode [ 219.963693][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.123040][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.233822][ T5582] veth0_macvtap: entered promiscuous mode [ 220.290517][ T5582] veth1_macvtap: entered promiscuous mode [ 220.314343][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.447202][ T3345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.485279][ T3345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.512911][ T3345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.523967][ T3345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.573482][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.738847][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.762932][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.801685][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.813825][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.858548][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.050146][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.203801][ T5705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.246136][ T5705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.297345][ T5705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.337271][ T5705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.880604][ T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.930403][ T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.231469][ T3345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.262125][ T3345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.809715][ T3345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.868789][ T5577] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 225.890436][ T3345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.162981][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.214823][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.817537][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.871386][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.488764][ T3345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.541680][ T3345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.009724][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.069728][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.220513][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.252179][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.702733][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.747965][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.917383][ T5865] C: renamed from batadv_slave_0 (while UP) [ 229.962296][ T5865] netlink: 'syz.0.13': attribute type 8 has an invalid length. [ 230.002734][ T5865] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 230.081768][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.146911][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.411846][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 230.447181][ T5869] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15'. [ 230.498614][ T5869] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 233.567172][ T5908] netlink: 152 bytes leftover after parsing attributes in process `syz.2.29'. [ 234.570493][ T5921] ======================================================= [ 234.570493][ T5921] WARNING: The mand mount option has been deprecated and [ 234.570493][ T5921] and is ignored by this kernel. Remove the mand [ 234.570493][ T5921] option from the mount to silence this warning. [ 234.570493][ T5921] ======================================================= [ 234.723119][ T5925] netlink: 'syz.4.37': attribute type 29 has an invalid length. [ 234.790784][ T5926] netlink: 'syz.4.37': attribute type 29 has an invalid length. [ 237.117558][ T5948] syz.1.46 uses obsolete (PF_INET,SOCK_PACKET) [ 238.052483][ T5963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 238.101562][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 238.740685][ T5971] netlink: 'syz.0.56': attribute type 29 has an invalid length. [ 238.831676][ T5973] netlink: 'syz.0.56': attribute type 29 has an invalid length. [ 240.101065][ T5985] sctp: [Deprecated]: syz.3.63 (pid 5985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.101065][ T5985] Use struct sctp_sack_info instead [ 240.433180][ T5992] netem: change failed [ 240.772339][ T5996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.68'. [ 240.870598][ T5998] netlink: 48 bytes leftover after parsing attributes in process `syz.3.69'. [ 240.883233][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 241.615133][ T6009] capability: warning: `syz.2.74' uses 32-bit capabilities (legacy support in use) [ 241.710689][ T6009] program syz.2.74 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.321450][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 243.861329][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 243.899124][ T6028] syzkaller0: entered promiscuous mode [ 243.905070][ T6028] syzkaller0: entered allmulticast mode [ 244.525636][ T6043] program syz.1.88 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.730825][ T5583] Bluetooth: hci4: link tx timeout [ 246.736951][ T5583] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 247.013267][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.101'. [ 247.323762][ T6078] netlink: 'syz.4.102': attribute type 29 has an invalid length. [ 247.444778][ T6082] netlink: 'syz.4.102': attribute type 29 has an invalid length. [ 247.532162][ T6083] program syz.2.104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.544751][ T6078] netlink: 'syz.4.102': attribute type 29 has an invalid length. [ 248.408193][ T6093] netlink: 'syz.4.108': attribute type 10 has an invalid length. [ 248.679766][ T6093] team0: Port device macvlan0 added [ 248.828491][ T4877] Bluetooth: hci4: command 0x0406 tx timeout [ 249.447473][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.115'. [ 251.539614][ T6131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'. [ 252.220603][ T6139] netlink: 'syz.0.126': attribute type 28 has an invalid length. [ 252.274170][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 252.335734][ T6134] syzkaller0: entered promiscuous mode [ 252.364091][ T6134] syzkaller0: entered allmulticast mode [ 252.798071][ T6148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.129'. [ 253.253733][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 254.714742][ T6170] netlink: 'syz.2.138': attribute type 29 has an invalid length. [ 254.770398][ T6170] netlink: 'syz.2.138': attribute type 29 has an invalid length. [ 254.811277][ T6170] netlink: 'syz.2.138': attribute type 29 has an invalid length. [ 256.262387][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'. [ 257.466817][ T6207] netlink: 'syz.4.152': attribute type 29 has an invalid length. [ 257.512204][ T6207] netlink: 'syz.4.152': attribute type 29 has an invalid length. [ 257.562480][ T6207] netlink: 'syz.4.152': attribute type 29 has an invalid length. [ 258.127849][ T6212] Zero length message leads to an empty skb [ 259.349938][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.163'. [ 260.460491][ T6241] netlink: 'syz.4.167': attribute type 29 has an invalid length. [ 260.498832][ T6241] netlink: 'syz.4.167': attribute type 29 has an invalid length. [ 260.570629][ T6245] netlink: 'syz.4.167': attribute type 29 has an invalid length. [ 261.927854][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.177'. [ 261.991756][ T6260] netlink: 64467 bytes leftover after parsing attributes in process `syz.1.176'. [ 262.011214][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.177'. [ 263.708503][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 265.208773][ T6304] netlink: 'syz.1.192': attribute type 29 has an invalid length. [ 265.262713][ T6304] netlink: 'syz.1.192': attribute type 29 has an invalid length. [ 265.290471][ T6304] netlink: 'syz.1.192': attribute type 29 has an invalid length. [ 265.484346][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.492917][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.567464][ T6283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.725472][ T6332] loop3: detected capacity change from 0 to 128 [ 267.870260][ T6332] syz.3.204: attempt to access beyond end of device [ 267.870260][ T6332] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 267.991653][ T6332] syz.3.204: attempt to access beyond end of device [ 267.991653][ T6332] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 268.013462][ T6324] loop0: detected capacity change from 0 to 8192 [ 268.063917][ T6332] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 268.148898][ T6324] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.219326][ T6332] syz.3.204: attempt to access beyond end of device [ 268.219326][ T6332] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 268.391711][ T6332] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 270.950801][ T6369] netlink: 'syz.1.215': attribute type 29 has an invalid length. [ 271.053010][ T6370] netlink: 'syz.1.215': attribute type 29 has an invalid length. [ 271.457558][ T29] audit: type=1326 audit(1781657215.459:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.1.217" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f99ce59 code=0x7ffc0000 [ 271.578264][ T29] audit: type=1326 audit(1781657215.459:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.1.217" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f99ce59 code=0x7ffc0000 [ 271.640965][ T29] audit: type=1326 audit(1781657215.499:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.1.217" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fa31f99ce59 code=0x7ffc0000 [ 271.687088][ T29] audit: type=1326 audit(1781657215.519:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.1.217" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f99ce59 code=0x7ffc0000 [ 271.714694][ T29] audit: type=1326 audit(1781657215.519:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.1.217" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa31f99ce59 code=0x7ffc0000 [ 271.791704][ T29] audit: type=1326 audit(1781657215.519:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.1.217" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f99ce59 code=0x7ffc0000 [ 271.821305][ T29] audit: type=1326 audit(1781657215.529:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.1.217" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa31f99ce59 code=0x7ffc0000 [ 271.849015][ T29] audit: type=1326 audit(1781657215.529:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.1.217" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f99ce59 code=0x7ffc0000 [ 271.920549][ T29] audit: type=1326 audit(1781657215.529:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.1.217" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31f99ce59 code=0x7ffc0000 [ 271.951952][ T29] audit: type=1326 audit(1781657215.539:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.1.217" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa31f99ce59 code=0x7ffc0000 [ 272.676828][ T6355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.971975][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 275.017043][ T6411] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 275.509091][ T6415] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 276.463706][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 277.649454][ T6450] netlink: 'syz.2.244': attribute type 29 has an invalid length. [ 277.682016][ T6450] netlink: 'syz.2.244': attribute type 29 has an invalid length. [ 277.709725][ T6450] netlink: 'syz.2.244': attribute type 29 has an invalid length. [ 278.487156][ T6461] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.249'. [ 278.502306][ T6461] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.249'. [ 278.797457][ T6422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.467777][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 279.775407][ T6480] netlink: 'syz.2.256': attribute type 29 has an invalid length. [ 279.852433][ T6482] netlink: 'syz.2.256': attribute type 29 has an invalid length. [ 279.948718][ T6480] netlink: 'syz.2.256': attribute type 29 has an invalid length. [ 280.743439][ T6494] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.260'. [ 280.835636][ T6496] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.260'. [ 281.155335][ T6501] netlink: 'syz.1.262': attribute type 1 has an invalid length. [ 281.257462][ T6500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.261'. [ 283.313833][ T6526] netlink: 'syz.0.270': attribute type 29 has an invalid length. [ 283.372095][ T6527] netlink: 'syz.0.270': attribute type 29 has an invalid length. [ 283.442450][ T6526] netlink: 'syz.0.270': attribute type 29 has an invalid length. [ 284.967942][ T6507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.665126][ T6551] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.335513][ T6567] netlink: 'syz.4.284': attribute type 29 has an invalid length. [ 286.427929][ T6568] netlink: 'syz.4.284': attribute type 29 has an invalid length. [ 286.503577][ T6567] netlink: 'syz.4.284': attribute type 29 has an invalid length. [ 288.318471][ T6573] syzkaller0: entered promiscuous mode [ 288.357595][ T6573] syzkaller0: entered allmulticast mode [ 289.238427][ T6599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.292'. [ 290.110712][ T6616] netlink: 'syz.1.297': attribute type 29 has an invalid length. [ 290.263021][ T6620] netlink: 'syz.1.297': attribute type 29 has an invalid length. [ 290.358364][ T6616] netlink: 'syz.1.297': attribute type 29 has an invalid length. [ 290.451884][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 293.415446][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.308'. [ 293.691754][ T5233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.685633][ T6680] syzkaller0: entered promiscuous mode [ 294.704286][ T6680] syzkaller0: entered allmulticast mode [ 296.351918][ T6663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.628431][ T6702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.323'. [ 297.949900][ T6718] syzkaller0: entered promiscuous mode [ 298.009567][ T6718] syzkaller0: entered allmulticast mode [ 299.008178][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.106608][ T6735] batadv_slave_0: entered promiscuous mode [ 301.317380][ T6765] syzkaller0: entered promiscuous mode [ 301.326334][ T6765] syzkaller0: entered allmulticast mode [ 301.641411][ T6770] program syz.2.347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.476412][ T6741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.188927][ T6809] ip6erspan0: entered allmulticast mode [ 311.152153][ T6879] syzkaller0: entered promiscuous mode [ 311.183930][ T6879] syzkaller0: entered allmulticast mode [ 312.285224][ T6889] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 312.351975][ T808] team_slave_0: entered promiscuous mode [ 312.358126][ T808] team_slave_1: entered promiscuous mode [ 313.885905][ T6922] loop1: detected capacity change from 0 to 128 [ 313.984038][ T6919] syzkaller0: entered promiscuous mode [ 313.998295][ T6919] syzkaller0: entered allmulticast mode [ 315.468984][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 316.471714][ T6945] syzkaller0: entered promiscuous mode [ 316.500562][ T6945] syzkaller0: entered allmulticast mode [ 318.175881][ T6967] syzkaller0: entered promiscuous mode [ 318.227483][ T6967] syzkaller0: entered allmulticast mode [ 320.743518][ T6994] syzkaller0: entered promiscuous mode [ 320.777258][ T6994] syzkaller0: entered allmulticast mode [ 322.850561][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 322.987676][ T7029] netlink: 'syz.0.432': attribute type 12 has an invalid length. [ 323.052475][ T7029] netlink: 'syz.0.432': attribute type 29 has an invalid length. [ 323.113594][ T7029] netlink: 148 bytes leftover after parsing attributes in process `syz.0.432'. [ 323.865630][ T7010] Bluetooth: hci0: command 0x0406 tx timeout [ 323.866763][ T7009] Bluetooth: hci2: command 0x0406 tx timeout [ 323.875969][ T7010] Bluetooth: hci3: command 0x0406 tx timeout [ 323.879946][ T7009] Bluetooth: hci1: command 0x0406 tx timeout [ 326.277040][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 326.677196][ T7081] 9p: Bad value for 'rfdno' [ 326.922842][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.932414][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.347637][ T7083] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 327.561170][ T7089] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 327.690675][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.452'. [ 328.116367][ T7089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.428332][ T7094] bond1: (slave dummy0): making interface the new active one [ 328.448205][ T7100] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.455'. [ 328.468705][ T7094] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 330.211413][ T5586] Bluetooth: hci4: link tx timeout [ 330.217207][ T5586] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 332.265962][ T5583] Bluetooth: hci4: command 0x0406 tx timeout [ 332.614996][ T7154] capability: warning: `syz.0.475' uses deprecated v2 capabilities in a way that may be insecure [ 334.737313][ T7182] netlink: 64475 bytes leftover after parsing attributes in process `syz.1.484'. [ 336.487563][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 336.682574][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 336.756323][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 336.784825][ T9] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 336.842796][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 336.877455][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 336.891401][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.935467][ T9] usb 4-1: Product: syz [ 336.944151][ T9] usb 4-1: Manufacturer: syz [ 336.964112][ T9] usb 4-1: SerialNumber: syz [ 337.015900][ T9] usb 4-1: config 0 descriptor?? [ 337.041331][ T7206] syzkaller0: entered promiscuous mode [ 337.199624][ T7206] syzkaller0: entered allmulticast mode [ 337.457060][ T7211] netlink: 64475 bytes leftover after parsing attributes in process `syz.2.496'. [ 337.507570][ T9] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 338.430003][ T9] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 338.464531][ T9] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 338.828731][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 339.147422][ T9] usb 4-1: USB disconnect, device number 2 [ 342.240585][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 342.395039][ T7251] netlink: 64 bytes leftover after parsing attributes in process `syz.1.506'. [ 342.773132][ T7249] bond1: entered promiscuous mode [ 342.823868][ T7249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.919222][ T7266] loop1: detected capacity change from 0 to 128 [ 345.598052][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'. [ 346.223091][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'. [ 347.726064][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.521'. [ 347.892336][ T7278] syzkaller0: entered promiscuous mode [ 347.911416][ T7278] syzkaller0: entered allmulticast mode [ 349.268681][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 349.367763][ T7304] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 351.471358][ T5586] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 351.985717][ T808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 352.189790][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 352.221161][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.281323][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.315689][ T808] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 352.332483][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.393671][ T808] usb 2-1: config 0 descriptor?? [ 352.919263][ T808] ft260 0003:0403:6030.0001: item fetching failed at offset 0/2 [ 352.987684][ T808] ft260 0003:0403:6030.0001: failed to parse HID [ 353.003057][ T808] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -22 [ 353.076419][ T808] usb 2-1: USB disconnect, device number 2 [ 353.443323][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 353.573729][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.536'. [ 354.356458][ T7346] bond1: entered promiscuous mode [ 354.451251][ T7346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.177688][ T7352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.322724][ T7352] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 355.546517][ T7352] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 357.857771][ T7393] syzkaller0: entered promiscuous mode [ 357.864073][ T7393] syzkaller0: entered allmulticast mode [ 359.126623][ T807] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 359.348751][ T807] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 359.382764][ T807] usb 2-1: config 0 has no interface number 0 [ 359.405876][ T807] usb 2-1: config 0 interface 41 has no altsetting 0 [ 359.415410][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 359.459132][ T807] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 359.482666][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.499809][ T807] usb 2-1: Product: syz [ 359.517069][ T807] usb 2-1: Manufacturer: syz [ 359.538958][ T807] usb 2-1: SerialNumber: syz [ 359.576340][ T807] usb 2-1: config 0 descriptor?? [ 359.622232][ T9] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 359.671562][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 359.706394][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.796373][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 360.696062][ T807] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 360.811717][ T807] usb 2-1: USB disconnect, device number 3 [ 361.039394][ T9] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 361.092273][ T9] stv0680 3-1:4.0: Could not get descriptor 0200 [ 361.117301][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 361.157758][ T9] stv0680 3-1:4.0: last error: 14, command = 0x4 [ 361.211231][ T9] usb 3-1: USB disconnect, device number 2 [ 361.320625][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.555'. [ 361.477632][ T808] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 361.760364][ T808] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 361.814273][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.860403][ T808] usb 1-1: Product: syz [ 361.882044][ T808] usb 1-1: Manufacturer: syz [ 361.902546][ T808] usb 1-1: SerialNumber: syz [ 362.012481][ T808] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 362.323849][ T30] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 362.823331][ T7420] bond2: entered promiscuous mode [ 363.025348][ T7420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.108926][ T7421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.241514][ T7421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.362070][ T807] usb 1-1: USB disconnect, device number 2 [ 363.631336][ T30] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 363.660447][ T30] ath9k_htc: Failed to initialize the device [ 363.720358][ T807] usb 1-1: ath9k_htc: USB layer deinitialized [ 363.832947][ T7423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.962208][ T7423] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 364.103635][ T7423] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 365.415006][ T30] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 365.536118][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 365.595168][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 365.636495][ T30] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 365.657451][ T30] usb 3-1: config 0 has no interface number 0 [ 365.696032][ T30] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 365.711553][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 365.740734][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.760113][ T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 365.760309][ T30] usb 3-1: Product: syz [ 365.797714][ T30] usb 3-1: Manufacturer: syz [ 365.810107][ T9] usb 2-1: config 0 has no interface number 0 [ 365.811905][ T30] usb 3-1: SerialNumber: syz [ 365.832860][ T9] usb 2-1: config 0 interface 12 has no altsetting 0 [ 365.891520][ T30] usb 3-1: config 0 descriptor?? [ 365.923495][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 365.973648][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.044262][ T9] usb 2-1: Product: syz [ 366.062306][ T9] usb 2-1: Manufacturer: syz [ 366.080775][ T9] usb 2-1: SerialNumber: syz [ 366.153519][ T9] usb 2-1: config 0 descriptor?? [ 366.432524][ T30] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 366.459050][ T30] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 367.191409][ T7454] netlink: 64467 bytes leftover after parsing attributes in process `syz.0.570'. [ 367.574195][ T9] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 367.610759][ T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 367.658787][ T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 367.695893][ T9] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 367.750485][ T30] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 367.813837][ T30] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 367.836447][ T9] usb 2-1: USB disconnect, device number 4 [ 367.969422][ T30] usb 3-1: USB disconnect, device number 3 [ 369.796414][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 369.975823][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 370.313475][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 370.365034][ T30] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 370.402505][ T30] usb 2-1: can't read configurations, error -71 [ 371.145830][ T808] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 371.269534][ T7458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.347099][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 371.396627][ T808] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 371.442797][ T808] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.473002][ T808] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 371.519532][ T808] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.565030][ T808] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.632818][ T808] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 371.665542][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.989408][ T808] usb 3-1: GET_CAPABILITIES returned 2f [ 372.010419][ T808] usbtmc 3-1:16.0: can't read capabilities [ 372.211035][ T7485] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 372.232104][ T808] usb 3-1: USB disconnect, device number 4 [ 372.267484][ T7485] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.582'. [ 374.578502][ T7505] netem: change failed [ 376.285868][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 376.376654][ T7528] netlink: 48 bytes leftover after parsing attributes in process `syz.1.597'. [ 376.475867][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 376.567968][ T9] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 376.640783][ T9] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 376.663353][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.693393][ T9] usb 4-1: Product: syz [ 376.723152][ T9] usb 4-1: Manufacturer: syz [ 376.757516][ T9] usb 4-1: SerialNumber: syz [ 376.801499][ T9] usb 4-1: config 0 descriptor?? [ 376.820615][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 376.829825][ T9] usb 4-1: setting power ON [ 376.902362][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 376.932446][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 377.025991][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 377.061977][ T9] usb 4-1: media controller created [ 377.381647][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 377.702287][ T9] usb 4-1: selecting invalid altsetting 6 [ 377.713363][ T9] usb 4-1: digital interface selection failed (-22) [ 377.771011][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 377.813602][ T9] usb 4-1: setting power OFF [ 377.828504][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 377.867734][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 377.904063][ T9] (NULL device *): no alternate interface [ 378.387859][ T7539] netem: change failed [ 378.468515][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 378.585568][ T9] usb 4-1: USB disconnect, device number 3 [ 378.626653][ T7520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.753075][ T7541] loop9: detected capacity change from 0 to 1 [ 378.849644][ T7541] Dev loop9: unable to read RDB block 1 [ 378.875899][ T7541] loop9: unable to read partition table [ 378.932575][ T7541] loop9: partition table beyond EOD, truncated [ 378.977658][ T7541] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 380.395263][ T7557] netlink: 'syz.4.607': attribute type 29 has an invalid length. [ 380.536873][ T7558] netlink: 'syz.4.607': attribute type 29 has an invalid length. [ 380.762448][ T7559] netlink: 'syz.4.607': attribute type 29 has an invalid length. [ 381.683796][ T7567] netlink: 48 bytes leftover after parsing attributes in process `syz.3.610'. [ 383.306712][ T808] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 383.499358][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 383.536435][ T808] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 383.571259][ T808] usb 3-1: config 0 has no interface number 0 [ 383.603922][ T808] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.656571][ T808] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 383.731486][ T808] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 383.773439][ T808] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 383.837139][ T808] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 383.878377][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.943657][ T808] usb 3-1: config 0 descriptor?? [ 384.022576][ T808] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 384.460809][ T9] usb 3-1: USB disconnect, device number 5 [ 384.582848][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 386.072257][ T7606] netlink: 48 bytes leftover after parsing attributes in process `syz.1.627'. [ 386.445168][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 387.166953][ T7616] comedi comedi1: 8255: I/O base address not correctly aligned [ 388.095196][ T808] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 388.164913][ T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 388.285422][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 388.341228][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 388.361812][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.372818][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.388414][ T808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.425283][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 388.440584][ T808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.462518][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.511200][ T808] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.525509][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 388.567148][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.616349][ T30] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 388.637725][ T808] usb 3-1: Product: syz [ 388.656433][ T808] usb 3-1: Manufacturer: syz [ 388.675256][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.687764][ T808] usb 3-1: SerialNumber: syz [ 388.742935][ T30] usb 2-1: Product: syz [ 388.768622][ T30] usb 2-1: Manufacturer: syz [ 388.799024][ T30] usb 2-1: SerialNumber: syz [ 388.882131][ T808] usb 3-1: 0:2 : does not exist [ 389.155667][ T808] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 389.702389][ T30] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 389.747818][ T808] usb 3-1: USB disconnect, device number 6 [ 389.765635][ T30] usb 2-1: MIDIStreaming interface descriptor not found [ 390.553042][ T30] usb 2-1: USB disconnect, device number 7 [ 391.448008][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.001468][ T7647] udevd[7647]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 392.115922][ T30] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 392.354701][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 392.547529][ T30] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 392.622156][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.669250][ T30] usb 4-1: Product: syz [ 392.685094][ T30] usb 4-1: Manufacturer: syz [ 392.692691][ T30] usb 4-1: SerialNumber: syz [ 392.752566][ T30] usb 4-1: config 0 descriptor?? [ 392.920160][ T30] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 392.935825][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 393.167347][ T7664] netlink: 48 bytes leftover after parsing attributes in process `syz.1.645'. [ 393.488003][ T30] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 393.529914][ T30] visor 4-1:0.0: probe with driver visor failed with error -5 [ 393.771001][ T9] usb 4-1: USB disconnect, device number 4 [ 394.220682][ T7664] netlink: 48 bytes leftover after parsing attributes in process `syz.1.645'. [ 395.499619][ T7672] sg_write: data in/out 467008/136 bytes for SCSI command 0x0-- guessing data in; [ 395.499619][ T7672] program syz.0.648 not setting count and/or reply_len properly [ 396.260597][ T7678] netlink: 'syz.1.652': attribute type 29 has an invalid length. [ 396.327861][ T7679] netlink: 'syz.1.652': attribute type 29 has an invalid length. [ 396.378288][ T7678] netlink: 'syz.1.652': attribute type 29 has an invalid length. [ 397.742953][ T7693] netlink: 48 bytes leftover after parsing attributes in process `syz.3.656'. [ 397.941904][ T7693] netlink: 48 bytes leftover after parsing attributes in process `syz.3.656'. [ 398.665803][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 398.848010][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 398.951209][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 398.995026][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.033349][ T9] usb 3-1: Product: syz [ 399.049375][ T9] usb 3-1: Manufacturer: syz [ 399.087082][ T9] usb 3-1: SerialNumber: syz [ 399.147728][ T9] usb 3-1: config 0 descriptor?? [ 399.229965][ T9] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 399.723775][ T9] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 399.760856][ T9] visor 3-1:0.0: probe with driver visor failed with error -71 [ 399.850178][ T9] usb 3-1: USB disconnect, device number 7 [ 401.911230][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.666'. [ 403.140045][ T7738] netlink: 48 bytes leftover after parsing attributes in process `syz.2.672'. [ 403.471105][ T7735] netlink: 'syz.0.671': attribute type 29 has an invalid length. [ 403.503554][ T7738] netlink: 48 bytes leftover after parsing attributes in process `syz.2.672'. [ 405.465738][ T807] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 405.665276][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 405.785516][ T807] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 405.818118][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.857422][ T807] usb 4-1: Product: syz [ 405.885047][ T807] usb 4-1: Manufacturer: syz [ 405.924002][ T807] usb 4-1: SerialNumber: syz [ 405.978232][ T807] usb 4-1: config 0 descriptor?? [ 406.050524][ T807] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 406.687284][ T807] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 406.718664][ T807] visor 4-1:0.0: probe with driver visor failed with error -71 [ 406.791567][ T807] usb 4-1: USB disconnect, device number 5 [ 407.009756][ T7772] netlink: 'syz.0.684': attribute type 29 has an invalid length. [ 407.840664][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.687'. [ 408.152322][ T7783] netlink: 'syz.2.688': attribute type 29 has an invalid length. [ 408.235467][ T7784] netlink: 'syz.2.688': attribute type 29 has an invalid length. [ 408.333604][ T7786] netlink: 'syz.2.688': attribute type 29 has an invalid length. [ 408.558724][ T7787] netlink: 48 bytes leftover after parsing attributes in process `syz.4.685'. [ 408.675929][ T7787] netlink: 48 bytes leftover after parsing attributes in process `syz.4.685'. [ 408.979222][ T7791] netlink: 48 bytes leftover after parsing attributes in process `syz.3.689'. [ 411.019876][ T5586] Bluetooth: hci4: unexpected event 0x34 length: 13 > 6 [ 411.583744][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.700'. [ 411.735261][ T807] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 411.925071][ T807] usb 2-1: Using ep0 maxpacket: 16 [ 411.995593][ T807] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 412.049728][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.076812][ T807] usb 2-1: Product: syz [ 412.090737][ T807] usb 2-1: Manufacturer: syz [ 412.114234][ T807] usb 2-1: SerialNumber: syz [ 412.154084][ T807] usb 2-1: config 0 descriptor?? [ 412.223260][ T807] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 412.649137][ T807] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 412.681787][ T807] visor 2-1:0.0: probe with driver visor failed with error -71 [ 412.695668][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 412.747647][ T807] usb 2-1: USB disconnect, device number 8 [ 412.813431][ T7823] netlink: 'syz.3.701': attribute type 29 has an invalid length. [ 412.907077][ T7824] netlink: 'syz.3.701': attribute type 29 has an invalid length. [ 412.997704][ T7823] netlink: 'syz.3.701': attribute type 29 has an invalid length. [ 413.938447][ T7835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.705'. [ 413.990323][ T7835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.705'. [ 414.158523][ T7833] netlink: 48 bytes leftover after parsing attributes in process `syz.4.704'. [ 416.702549][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 416.705220][ T30] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 416.907221][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 416.963455][ T30] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 417.002725][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.037195][ T30] usb 2-1: Product: syz [ 417.060484][ T30] usb 2-1: Manufacturer: syz [ 417.086605][ T30] usb 2-1: SerialNumber: syz [ 417.111290][ T30] usb 2-1: config 0 descriptor?? [ 417.185123][ T30] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 417.360487][ T7864] netlink: 48 bytes leftover after parsing attributes in process `syz.0.719'. [ 417.376478][ T30] usb 2-1: clie_3_5_startup: get config number failed: -32 [ 417.456648][ T30] visor 2-1:0.0: probe with driver visor failed with error -32 [ 417.543226][ T30] usb 2-1: USB disconnect, device number 9 [ 418.108641][ T7864] netlink: 48 bytes leftover after parsing attributes in process `syz.0.719'. [ 418.119833][ T7869] netlink: 'syz.3.717': attribute type 29 has an invalid length. [ 418.229682][ T7871] netlink: 'syz.3.717': attribute type 29 has an invalid length. [ 418.353730][ T7872] netlink: 'syz.3.717': attribute type 29 has an invalid length. [ 419.248920][ T7879] netlink: 596 bytes leftover after parsing attributes in process `syz.2.722'. [ 419.474636][ T7881] netlink: 48 bytes leftover after parsing attributes in process `syz.0.723'. [ 422.545848][ T30] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 422.830264][ T30] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 422.928744][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.072653][ T30] usb 1-1: config 0 descriptor?? [ 423.279788][ T30] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 423.770352][ T30] gp8psk: usb in 128 operation failed. [ 423.829603][ T30] gp8psk: usb in 137 operation failed. [ 423.919123][ T30] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 424.028660][ T30] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 424.203564][ T30] usb 1-1: USB disconnect, device number 3 [ 424.980058][ T30] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 425.240223][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 425.385069][ T30] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 425.440512][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.465896][ T30] usb 3-1: Product: syz [ 425.496425][ T30] usb 3-1: Manufacturer: syz [ 425.536376][ T30] usb 3-1: SerialNumber: syz [ 425.636034][ T30] usb 3-1: config 0 descriptor?? [ 425.849541][ T30] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 426.334650][ T30] usb 3-1: clie_3_5_startup: get config number failed: -32 [ 426.430463][ T30] visor 3-1:0.0: probe with driver visor failed with error -32 [ 426.605853][ T30] usb 3-1: USB disconnect, device number 8 [ 427.172039][ T7911] netlink: 48 bytes leftover after parsing attributes in process `syz.4.731'. [ 427.402002][ T7911] netlink: 48 bytes leftover after parsing attributes in process `syz.4.731'. [ 427.528603][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.734'. [ 429.641365][ T7922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.737'. [ 429.853816][ T30] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 430.065760][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 430.112397][ T30] usb 2-1: not running at top speed; connect to a high speed hub [ 430.147682][ T30] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 430.199975][ T30] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.244793][ T30] usb 2-1: config 1 interface 0 has no altsetting 0 [ 430.278077][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 430.309360][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.324052][ T30] usb 2-1: Product: syz [ 430.355597][ T30] usb 2-1: Manufacturer: syz [ 430.371828][ T30] usb 2-1: SerialNumber: syz [ 430.426227][ T7924] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 431.134715][ T7924] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 431.382706][ T30] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 431.473832][ T30] usb 2-1: USB disconnect, device number 10 [ 431.525388][ T808] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 431.747324][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 431.811981][ T808] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 431.847590][ T808] usb 5-1: config 0 has no interface number 0 [ 431.886358][ T808] usb 5-1: config 0 interface 12 has no altsetting 0 [ 431.947692][ T808] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 431.959680][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.978979][ T808] usb 5-1: Product: syz [ 431.986735][ T808] usb 5-1: Manufacturer: syz [ 432.001103][ T808] usb 5-1: SerialNumber: syz [ 432.023293][ T808] usb 5-1: config 0 descriptor?? [ 432.056121][ T30] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 432.267897][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 432.384178][ T30] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 432.436107][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.470606][ T30] usb 1-1: Product: syz [ 432.476861][ T30] usb 1-1: Manufacturer: syz [ 432.481972][ T30] usb 1-1: SerialNumber: syz [ 432.523937][ T30] usb 1-1: config 0 descriptor?? [ 432.563732][ T30] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 432.820522][ T30] usb 1-1: clie_3_5_startup: get config number failed: -32 [ 432.861910][ T30] visor 1-1:0.0: probe with driver visor failed with error -32 [ 432.946757][ T30] usb 1-1: USB disconnect, device number 4 [ 434.346895][ T808] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 434.400175][ T808] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 434.457358][ T808] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 434.501397][ T808] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 434.641687][ T808] usb 5-1: USB disconnect, device number 2 [ 435.226494][ T7962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.751'. [ 435.271082][ T7960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.750'. [ 435.289547][ T7962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.751'. [ 436.298735][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 439.445580][ T8003] process 'syz.4.766' launched './file0' with NULL argv: empty string added [ 439.654241][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 441.715243][ T808] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 441.895275][ T808] usb 2-1: Using ep0 maxpacket: 16 [ 441.930826][ T808] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 441.965927][ T808] usb 2-1: config 0 has no interface number 0 [ 441.977394][ T807] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 441.990737][ T808] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 442.013808][ T808] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 442.074630][ T808] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 442.105717][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.143338][ T808] usb 2-1: Product: syz [ 442.169344][ T808] usb 2-1: Manufacturer: syz [ 442.178487][ T808] usb 2-1: SerialNumber: syz [ 442.196677][ T807] usb 5-1: Using ep0 maxpacket: 32 [ 442.205859][ T808] usb 2-1: config 0 descriptor?? [ 442.248326][ T8024] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 442.305009][ T8024] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 442.357623][ T807] usb 5-1: config 0 has no interfaces? [ 442.420670][ T807] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 442.458032][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.511088][ T807] usb 5-1: Product: syz [ 442.530364][ T807] usb 5-1: Manufacturer: syz [ 442.558333][ T807] usb 5-1: SerialNumber: syz [ 442.584182][ T8024] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 442.643778][ T807] usb 5-1: config 0 descriptor?? [ 442.652091][ T8024] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 442.732016][ T8032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.782'. [ 442.932933][ T808] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 443.091047][ T9] usb 5-1: USB disconnect, device number 3 [ 443.355331][ T807] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 443.562651][ T807] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 443.630269][ T807] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 443.656591][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.682370][ T807] usb 1-1: Product: syz [ 443.698558][ T807] usb 1-1: Manufacturer: syz [ 443.738892][ T807] usb 1-1: SerialNumber: syz [ 443.797713][ T807] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 444.172261][ T808] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 444.234627][ T808] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 444.291657][ T807] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 444.323648][ T808] asix 2-1:0.34: probe with driver asix failed with error -71 [ 444.395898][ T807] usb 1-1: USB disconnect, device number 5 [ 444.428909][ T808] usb 2-1: USB disconnect, device number 11 [ 445.117451][ T8041] netlink: 'syz.3.785': attribute type 29 has an invalid length. [ 445.299275][ T8044] netlink: 'syz.3.785': attribute type 29 has an invalid length. [ 445.526103][ T8048] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 445.590059][ T807] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 445.803791][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.822917][ T807] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 445.872470][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.915644][ T807] usb 1-1: config 0 descriptor?? [ 446.224246][ T807] usbhid 1-1:0.0: can't add hid device: -71 [ 446.276378][ T807] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 446.327617][ T807] usb 1-1: USB disconnect, device number 6 [ 446.798772][ T807] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 446.950068][ T8060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 447.030126][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.048723][ T8062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.794'. [ 447.059772][ T807] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 447.097142][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.163600][ T807] usb 1-1: config 0 descriptor?? [ 447.178273][ T8063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.794'. [ 448.074789][ T807] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 448.125405][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 448.147207][ T807] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 448.327586][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 448.438272][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 448.465185][ T9] usb 3-1: config 0 has no interface number 0 [ 448.486085][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 448.537956][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 448.662573][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 448.717611][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.748427][ T808] usb 1-1: USB disconnect, device number 7 [ 448.748440][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 448.777206][ T9] usb 3-1: Product: syz [ 448.803053][ T9] usb 3-1: Manufacturer: syz [ 448.840359][ T9] usb 3-1: SerialNumber: syz [ 448.901282][ T9] usb 3-1: config 0 descriptor?? [ 448.971121][ T8069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 449.003453][ T8069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 449.324970][ T8069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 449.402445][ T8069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 449.517817][ T30] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 449.667274][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 449.817910][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.830046][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.921948][ T30] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 450.047625][ T30] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 450.086952][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.111497][ T30] usb 5-1: Product: syz [ 450.143290][ T30] usb 5-1: Manufacturer: syz [ 450.186187][ T30] usb 5-1: SerialNumber: syz [ 450.333503][ T30] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 450.365527][ T8084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.804'. [ 450.913028][ T30] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 450.935467][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 450.990254][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 451.052586][ T30] usb 5-1: USB disconnect, device number 4 [ 451.060769][ T9] asix 3-1:0.34: probe with driver asix failed with error -71 [ 451.193434][ T9] usb 3-1: USB disconnect, device number 9 [ 452.215468][ T30] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 452.255205][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.810'. [ 452.330557][ T8102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.810'. [ 452.402045][ T30] usb 2-1: too many configurations: 57, using maximum allowed: 8 [ 452.591422][ T30] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 452.636760][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.646040][ T30] usb 2-1: Product: syz [ 452.650805][ T30] usb 2-1: Manufacturer: syz [ 452.661344][ T30] usb 2-1: SerialNumber: syz [ 453.459039][ T30] rtl8150 2-1:1.0: couldn't reset the device [ 453.497067][ T30] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 453.591188][ T30] usb 2-1: USB disconnect, device number 12 [ 454.335501][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 454.567128][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 454.593237][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 454.624961][ T9] usb 3-1: config 0 has no interface number 0 [ 454.649793][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 454.715038][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 454.792142][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 454.820759][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.829577][ T9] usb 3-1: Product: syz [ 454.847684][ T9] usb 3-1: Manufacturer: syz [ 454.852615][ T9] usb 3-1: SerialNumber: syz [ 454.904313][ T9] usb 3-1: config 0 descriptor?? [ 454.952859][ T8122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.963299][ T8122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 455.242353][ T8122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 455.291217][ T8122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 455.524594][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 455.738672][ T8135] sg_write: data in/out 307589/136 bytes for SCSI command 0x0-- guessing data in; [ 455.738672][ T8135] program syz.1.825 not setting count and/or reply_len properly [ 456.769117][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 456.833525][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 456.883790][ T9] asix 3-1:0.34: probe with driver asix failed with error -71 [ 456.969630][ T9] usb 3-1: USB disconnect, device number 10 [ 457.838136][ T30] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 458.045090][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 458.075235][ T30] usb 1-1: no configurations [ 458.097778][ T30] usb 1-1: can't read configurations, error -22 [ 458.259710][ T30] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 458.444700][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 458.480700][ T30] usb 1-1: no configurations [ 458.497382][ T30] usb 1-1: can't read configurations, error -22 [ 458.510820][ T8167] faux_driver vkms: [drm] Unknown color mode 3; guessing buffer size. [ 458.521640][ T30] usb usb1-port1: attempt power cycle [ 458.887471][ T30] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 458.941777][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 458.968803][ T30] usb 1-1: no configurations [ 458.987967][ T30] usb 1-1: can't read configurations, error -22 [ 459.205266][ T30] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 459.250143][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 459.281831][ T30] usb 1-1: no configurations [ 459.309251][ T30] usb 1-1: can't read configurations, error -22 [ 459.345295][ T30] usb usb1-port1: unable to enumerate USB device [ 459.466197][ T8174] sg_write: data in/out 478684/136 bytes for SCSI command 0x0-- guessing data in; [ 459.466197][ T8174] program syz.2.841 not setting count and/or reply_len properly [ 461.925701][ T30] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 462.007149][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 462.104738][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 462.120185][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.147667][ T30] usb 4-1: config 0 has no interfaces? [ 462.167715][ T30] usb 4-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 462.192910][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 462.205239][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.223697][ T9] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 462.244961][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.260981][ T9] usb 1-1: config 0 has no interface number 0 [ 462.279577][ T9] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 462.289933][ T30] usb 4-1: config 0 descriptor?? [ 462.320060][ T9] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 462.384863][ T9] usb 1-1: config 0 interface 98 has no altsetting 0 [ 462.458922][ T9] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 462.508126][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.549225][ T9] usb 1-1: Product: syz [ 462.574519][ T9] usb 1-1: Manufacturer: syz [ 462.589189][ T9] usb 1-1: SerialNumber: syz [ 462.605003][ T30] usb 4-1: USB disconnect, device number 6 [ 462.622161][ T9] usb 1-1: config 0 descriptor?? [ 462.643359][ T8204] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 462.689837][ T8204] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 463.023521][ T8204] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 463.041312][ T8204] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 463.079039][ T8208] netlink: 'syz.2.857': attribute type 29 has an invalid length. [ 463.130299][ T8208] netlink: 'syz.2.857': attribute type 29 has an invalid length. [ 463.167793][ T8208] netlink: 'syz.2.857': attribute type 29 has an invalid length. [ 463.941182][ T9] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 463.972463][ T9] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 464.039210][ T9] asix 1-1:0.98: probe with driver asix failed with error -71 [ 464.101440][ T9] usb 1-1: USB disconnect, device number 12 [ 464.275022][ T11] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 464.478775][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 464.523893][ T11] usb 4-1: no configurations [ 464.551088][ T11] usb 4-1: can't read configurations, error -22 [ 464.737600][ T11] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 464.926308][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 464.955489][ T11] usb 4-1: no configurations [ 464.978469][ T11] usb 4-1: can't read configurations, error -22 [ 465.020858][ T11] usb usb4-port1: attempt power cycle [ 465.415789][ T11] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 465.486153][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 465.544612][ T11] usb 4-1: no configurations [ 465.587986][ T11] usb 4-1: can't read configurations, error -22 [ 465.796582][ T11] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 465.873723][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 465.888108][ T11] usb 4-1: no configurations [ 465.906294][ T11] usb 4-1: can't read configurations, error -22 [ 465.914719][ T11] usb usb4-port1: unable to enumerate USB device [ 466.466063][ T8237] netlink: 'syz.4.869': attribute type 29 has an invalid length. [ 466.566086][ T8241] netlink: 'syz.4.869': attribute type 29 has an invalid length. [ 466.621815][ T8237] netlink: 'syz.4.869': attribute type 29 has an invalid length. [ 466.764941][ T30] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 467.004263][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.045558][ T30] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 467.082970][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.155404][ T30] usb 3-1: config 0 descriptor?? [ 467.481864][ T30] usbhid 3-1:0.0: can't add hid device: -71 [ 467.512232][ T30] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 467.608697][ T30] usb 3-1: USB disconnect, device number 11 [ 468.077099][ T30] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 468.315133][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.345505][ T30] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 468.372509][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.413327][ T30] usb 3-1: config 0 descriptor?? [ 468.706393][ T808] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 468.877157][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 468.909442][ T808] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 468.919836][ T808] usb 4-1: config 0 has no interface number 0 [ 468.931546][ T808] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 468.953807][ T808] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 469.003034][ T808] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 469.025061][ T11] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 469.025749][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.059662][ T808] usb 4-1: Product: syz [ 469.073572][ T808] usb 4-1: Manufacturer: syz [ 469.083039][ T808] usb 4-1: SerialNumber: syz [ 469.121879][ T808] usb 4-1: config 0 descriptor?? [ 469.161600][ T8258] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 469.188112][ T11] usb 1-1: device descriptor read/64, error -71 [ 469.220283][ T8258] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 469.268196][ T30] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 469.335901][ T30] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 469.485891][ T11] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 469.541940][ T8258] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 469.590919][ T8258] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 469.618811][ T30] usb 3-1: USB disconnect, device number 12 [ 469.625477][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 469.705119][ T11] usb 1-1: device descriptor read/64, error -71 [ 469.870821][ T11] usb usb1-port1: attempt power cycle [ 469.874229][ T808] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 470.350920][ T11] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 470.404705][ T11] usb 1-1: device descriptor read/8, error -71 [ 470.452116][ T807] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 470.637244][ T807] usb 2-1: Using ep0 maxpacket: 8 [ 470.674291][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.689225][ T11] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 470.774164][ T807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 470.807329][ T11] usb 1-1: device descriptor read/8, error -71 [ 470.870333][ T807] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 470.889726][ T8273] netlink: 'syz.2.882': attribute type 29 has an invalid length. [ 470.952195][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.963222][ T11] usb usb1-port1: unable to enumerate USB device [ 470.972675][ T8273] netlink: 'syz.2.882': attribute type 29 has an invalid length. [ 471.032595][ T8274] netlink: 'syz.2.882': attribute type 29 has an invalid length. [ 471.061182][ T807] usb 2-1: config 0 descriptor?? [ 471.111195][ T808] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 471.135007][ T5674] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 471.165237][ T808] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 471.211758][ T808] asix 4-1:0.34: probe with driver asix failed with error -71 [ 471.294081][ T808] usb 4-1: USB disconnect, device number 11 [ 471.346650][ T5674] usb 5-1: Using ep0 maxpacket: 32 [ 471.358868][ T807] usbhid 2-1:0.0: can't add hid device: -71 [ 471.375714][ T807] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 471.418401][ T5674] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.465263][ T5674] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.492461][ T807] usb 2-1: USB disconnect, device number 13 [ 471.509866][ T5674] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 471.549184][ T5674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.610507][ T5674] usb 5-1: config 0 descriptor?? [ 472.338352][ T8276] syzkaller1: entered promiscuous mode [ 472.347463][ T5674] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 472.386579][ T5674] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 472.402660][ T8276] syzkaller1: entered allmulticast mode [ 472.529433][ T5674] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 472.735131][ T5674] ft260 0003:0403:6030.0002: failed to retrieve system status [ 472.777651][ T5674] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -32 [ 472.985617][ T9] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 473.224035][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 473.251911][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 473.293893][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 473.351785][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.416066][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 473.466155][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 473.518343][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 473.579348][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 473.629480][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 473.656214][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 473.701929][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 473.727216][ T808] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 473.760946][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.798606][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 473.834810][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 473.865288][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 473.915807][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 473.928135][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 473.958774][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.969972][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 473.990557][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 473.995772][ T808] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 474.059430][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 474.086979][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.125101][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 474.146492][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.194859][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 474.213584][ T808] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 474.256010][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.261406][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 474.281098][ T808] usb 1-1: Product: syz [ 474.298585][ T808] usb 1-1: Manufacturer: syz [ 474.328303][ T808] usb 1-1: SerialNumber: syz [ 474.337909][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 474.374165][ T808] usb 1-1: config 0 descriptor?? [ 474.409712][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 474.441957][ T808] appledisplay 1-1:0.0: Submitting URB failed [ 474.468272][ T9] usb 2-1: string descriptor 0 read error: -22 [ 474.475244][ T808] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -5 [ 474.492920][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 474.538480][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.673550][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 474.721481][ T8300] netlink: 'syz.3.893': attribute type 29 has an invalid length. [ 474.786892][ T8300] netlink: 'syz.3.893': attribute type 29 has an invalid length. [ 474.850557][ T808] usb 1-1: USB disconnect, device number 17 [ 474.869665][ T8301] netlink: 'syz.3.893': attribute type 29 has an invalid length. [ 474.901521][ T5684] usb 5-1: USB disconnect, device number 5 [ 474.912249][ T9] usb 2-1: USB disconnect, device number 14 [ 475.564877][ T5674] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 475.796256][ T5674] usb 3-1: Using ep0 maxpacket: 16 [ 475.830413][ T5674] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 475.860842][ T5674] usb 3-1: config 0 has no interface number 0 [ 475.879635][ T5674] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 475.925141][ T5674] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 475.994697][ T5674] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 476.064663][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.085263][ T5674] usb 3-1: Product: syz [ 476.091566][ T5674] usb 3-1: Manufacturer: syz [ 476.104023][ T5674] usb 3-1: SerialNumber: syz [ 476.147495][ T5674] usb 3-1: config 0 descriptor?? [ 476.183352][ T8303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 476.218756][ T8303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 476.538118][ T8303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 476.569265][ T8303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 476.814807][ T5674] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 477.833627][ T8333] netlink: 'syz.3.904': attribute type 29 has an invalid length. [ 477.895476][ T8333] netlink: 'syz.3.904': attribute type 29 has an invalid length. [ 477.966116][ T8335] netlink: 'syz.3.904': attribute type 29 has an invalid length. [ 478.076715][ T5674] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 478.128999][ T5674] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 478.181720][ T5674] asix 3-1:0.34: probe with driver asix failed with error -71 [ 478.252044][ T5674] usb 3-1: USB disconnect, device number 13 [ 479.127416][ T5674] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 479.346597][ T5674] usb 5-1: Using ep0 maxpacket: 16 [ 479.422384][ T5674] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.496254][ T5674] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.585997][ T5684] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 479.658922][ T5674] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 479.701814][ T5674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.737975][ T5674] usb 5-1: Product: syz [ 479.762806][ T5674] usb 5-1: Manufacturer: syz [ 479.792060][ T5674] usb 5-1: SerialNumber: syz [ 479.837565][ T5684] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 479.899053][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.933969][ T5674] usb 5-1: 0:2 : does not exist [ 479.963761][ T5684] usb 3-1: Product: syz [ 479.978571][ T5684] usb 3-1: Manufacturer: syz [ 479.994746][ T5684] usb 3-1: SerialNumber: syz [ 480.222579][ T5674] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 480.598413][ T5684] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 480.651133][ T5684] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 480.682513][ T8351] syzkaller0: entered promiscuous mode [ 480.711121][ T8351] syzkaller0: entered allmulticast mode [ 481.039937][ T5674] usb 5-1: USB disconnect, device number 6 [ 481.370912][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.770030][ T8357] warning: `syz.1.914' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 481.957887][ T5684] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 481.990677][ T5684] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 482.034788][ T5684] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 482.151036][ T5684] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -110 [ 482.435258][ T8365] netlink: 'syz.1.917': attribute type 29 has an invalid length. [ 482.459386][ T8366] netlink: 'syz.1.917': attribute type 29 has an invalid length. [ 482.473103][ T8365] netlink: 'syz.1.917': attribute type 29 has an invalid length. [ 483.194755][ T5684] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 483.378632][ T5684] usb 4-1: Using ep0 maxpacket: 16 [ 483.420345][ T5684] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 483.453408][ T5684] usb 4-1: config 0 has no interface number 0 [ 483.464158][ T5684] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 483.492923][ T5684] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 483.530280][ T5684] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 483.552869][ T808] usb 3-1: USB disconnect, device number 14 [ 483.579761][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.618407][ T5684] usb 4-1: Product: syz [ 483.651601][ T5684] usb 4-1: Manufacturer: syz [ 483.668203][ T5684] usb 4-1: SerialNumber: syz [ 483.704084][ T5684] usb 4-1: config 0 descriptor?? [ 483.716678][ T8372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 483.756776][ T8372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.040537][ T8372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.120893][ T8372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.145245][ T808] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 484.358624][ T808] usb 5-1: device descriptor read/64, error -71 [ 484.418878][ T5684] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 484.637868][ T808] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 484.822922][ T808] usb 5-1: device descriptor read/64, error -71 [ 484.965992][ T808] usb usb5-port1: attempt power cycle [ 485.132306][ T8395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.930'. [ 485.170651][ T8395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.930'. [ 485.355277][ T808] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 485.397420][ T30] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 485.441938][ T808] usb 5-1: device descriptor read/8, error -71 [ 485.522416][ T8397] netlink: 'syz.2.931': attribute type 29 has an invalid length. [ 485.557578][ T8397] netlink: 'syz.2.931': attribute type 29 has an invalid length. [ 485.577948][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 485.594821][ T8397] netlink: 'syz.2.931': attribute type 29 has an invalid length. [ 485.622822][ T30] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 485.654217][ T30] usb 1-1: config 0 has no interface number 0 [ 485.660573][ T5684] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 485.681789][ T30] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 485.705773][ T5684] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 485.733318][ T30] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 485.746447][ T808] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 485.762896][ T5684] asix 4-1:0.34: probe with driver asix failed with error -71 [ 485.772102][ T30] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 485.800555][ T808] usb 5-1: device descriptor read/8, error -71 [ 485.821846][ T30] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.852671][ T5684] usb 4-1: USB disconnect, device number 12 [ 485.878384][ T30] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 485.913828][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.930779][ T808] usb usb5-port1: unable to enumerate USB device [ 485.962090][ T30] usb 1-1: config 0 descriptor?? [ 486.054542][ T30] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 486.245518][ T9] usb 1-1: USB disconnect, device number 18 [ 486.326767][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 486.496002][ T30] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 486.525312][ T5674] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 486.676465][ T30] usb 3-1: device descriptor read/64, error -71 [ 486.696333][ T5674] usb 2-1: Using ep0 maxpacket: 16 [ 486.728363][ T5674] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.746885][ T5674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 486.769218][ T5674] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 486.803855][ T5674] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 486.844083][ T5674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.909244][ T5674] usb 2-1: config 0 descriptor?? [ 486.931966][ T30] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 487.115188][ T30] usb 3-1: device descriptor read/64, error -71 [ 487.246921][ T30] usb usb3-port1: attempt power cycle [ 487.253022][ T5674] usb 2-1: USB disconnect, device number 15 [ 487.641590][ T30] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 487.687836][ T30] usb 3-1: device descriptor read/8, error -71 [ 487.749489][ T8414] Set syz1 is full, maxelem 14 reached [ 487.974821][ T30] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 488.052077][ T30] usb 3-1: device descriptor read/8, error -71 [ 488.216453][ T30] usb usb3-port1: unable to enumerate USB device [ 489.130290][ T8425] ===================================================== [ 489.137731][ T8425] BUG: KMSAN: uninit-value in irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 489.146745][ T8425] irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 489.153402][ T8425] irqentry_exit+0x82/0xa00 [ 489.158283][ T8425] sysvec_reschedule_ipi+0x74/0x80 [ 489.163638][ T8425] asm_sysvec_reschedule_ipi+0x1f/0x30 [ 489.169326][ T8425] mptcp_incoming_options+0x1f22/0x43b0 [ 489.175210][ T8425] tcp_data_queue+0x80/0x7c90 [ 489.180359][ T8425] tcp_rcv_established+0x19bb/0x3200 [ 489.185865][ T8425] tcp_v4_do_rcv+0xc5b/0x1b70 [ 489.190826][ T8425] __release_sock+0x360/0x7d0 [ 489.195767][ T8425] release_sock+0x22d/0x300 [ 489.200514][ T8425] mptcp_subflow_shutdown+0x358/0x690 [ 489.206204][ T8425] mptcp_check_send_data_fin+0x31b/0x3d0 [ 489.212081][ T8425] __mptcp_close+0x860/0x1360 [ 489.216993][ T8425] mptcp_close+0x42/0x260 [ 489.221509][ T8425] inet_release+0x1ee/0x2a0 [ 489.226326][ T8425] sock_close+0xd6/0x2f0 [ 489.230749][ T8425] __fput+0x60e/0x1010 [ 489.235025][ T8425] ____fput+0x25/0x30 [ 489.239189][ T8425] task_work_run+0x208/0x2b0 [ 489.243988][ T8425] exit_to_user_mode_loop+0x505/0x2420 [ 489.249638][ T8425] do_syscall_64+0x261/0x3c0 [ 489.254411][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.260504][ T8425] [ 489.262922][ T8425] Local variable mp_opt created at: [ 489.268226][ T8425] mptcp_incoming_options+0x11d/0x43b0 [ 489.273930][ T8425] tcp_data_queue+0x80/0x7c90 [ 489.278823][ T8425] [ 489.281312][ T8425] CPU: 0 UID: 0 PID: 8425 Comm: syz.4.941 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 489.292307][ T8425] Tainted: [L]=SOFTLOCKUP [ 489.296754][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.306956][ T8425] ===================================================== [ 489.314002][ T8425] Disabling lock debugging due to kernel taint [ 489.320285][ T8425] Kernel panic - not syncing: kmsan.panic set ... [ 489.326852][ T8425] CPU: 0 UID: 0 PID: 8425 Comm: syz.4.941 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 489.337864][ T8425] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 489.343537][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.353768][ T8425] Call Trace: [ 489.357178][ T8425] [ 489.360230][ T8425] __dump_stack+0x26/0x30 [ 489.364774][ T8425] dump_stack_lvl+0x50/0x1c0 [ 489.369575][ T8425] ? dump_stack+0x12/0x25 [ 489.374121][ T8425] dump_stack+0x1e/0x25 [ 489.378478][ T8425] vpanic+0x7b4/0x1430 [ 489.382815][ T8425] panic+0x15d/0x160 [ 489.386984][ T8425] kmsan_report+0x31a/0x320 [ 489.391746][ T8425] ? __msan_warning+0x1b/0x30 [ 489.396641][ T8425] ? irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 489.403460][ T8425] ? irqentry_exit+0x82/0xa00 [ 489.408389][ T8425] ? sysvec_reschedule_ipi+0x74/0x80 [ 489.413949][ T8425] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 489.419884][ T8425] ? mptcp_incoming_options+0x1f22/0x43b0 [ 489.425891][ T8425] ? tcp_data_queue+0x80/0x7c90 [ 489.430985][ T8425] ? tcp_rcv_established+0x19bb/0x3200 [ 489.436683][ T8425] ? tcp_v4_do_rcv+0xc5b/0x1b70 [ 489.441793][ T8425] ? __release_sock+0x360/0x7d0 [ 489.446821][ T8425] ? release_sock+0x22d/0x300 [ 489.451706][ T8425] ? mptcp_subflow_shutdown+0x358/0x690 [ 489.457538][ T8425] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 489.463601][ T8425] ? __mptcp_close+0x860/0x1360 [ 489.468696][ T8425] ? mptcp_close+0x42/0x260 [ 489.473390][ T8425] ? inet_release+0x1ee/0x2a0 [ 489.478344][ T8425] ? sock_close+0xd6/0x2f0 [ 489.482961][ T8425] ? __fput+0x60e/0x1010 [ 489.487409][ T8425] ? ____fput+0x25/0x30 [ 489.491850][ T8425] ? task_work_run+0x208/0x2b0 [ 489.496796][ T8425] ? exit_to_user_mode_loop+0x505/0x2420 [ 489.502629][ T8425] ? do_syscall_64+0x261/0x3c0 [ 489.507848][ T8425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.514145][ T8425] ? kmsan_get_metadata+0xf1/0x160 [ 489.519508][ T8425] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 489.526090][ T8425] ? kmsan_get_metadata+0xf1/0x160 [ 489.531721][ T8425] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 489.538292][ T8425] ? kmsan_get_metadata+0xf1/0x160 [ 489.544008][ T8425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 489.550095][ T8425] ? kmsan_get_metadata+0xf1/0x160 [ 489.555556][ T8425] __msan_warning+0x1b/0x30 [ 489.560290][ T8425] irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 489.567214][ T8425] irqentry_exit+0x82/0xa00 [ 489.572155][ T8425] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 489.578747][ T8425] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 489.585164][ T8425] ? trace_reschedule_exit+0x22/0x1a0 [ 489.590816][ T8425] sysvec_reschedule_ipi+0x74/0x80 [ 489.596200][ T8425] asm_sysvec_reschedule_ipi+0x1f/0x30 [ 489.601879][ T8425] RIP: 0010:mptcp_incoming_options+0x1f22/0x43b0 [ 489.608493][ T8425] Code: 94 c1 20 c1 44 89 f0 20 c8 0f b6 75 b8 40 08 f1 0f b6 c9 0f b6 c0 45 84 ed 0f 45 c1 41 20 f6 3c 01 0f 84 49 05 00 00 45 84 f6 <48> 8b 5d b0 74 67 48 8d bd 80 fe ff ff 48 8b 85 80 fe ff ff 48 89 [ 489.628427][ T8425] RSP: 0000:ffff8880650bb3f0 EFLAGS: 00000246 [ 489.634791][ T8425] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000000000001 [ 489.642950][ T8425] RDX: ffff888051924300 RSI: 0000000000000000 RDI: 0000000000000001 [ 489.651084][ T8425] RBP: ffff8880650bb5a0 R08: ffffea000000000f R09: 0000000000000000 [ 489.659222][ T8425] R10: ffff888237cb2028 R11: 0000000000000002 R12: 0000000007560219 [ 489.667362][ T8425] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000ffffffff [ 489.675543][ T8425] ? tcp_urg+0x371/0x400 [ 489.680017][ T8425] ? filter_irq_stacks+0x49/0x190 [ 489.685314][ T8425] tcp_data_queue+0x80/0x7c90 [ 489.690225][ T8425] ? kmsan_get_metadata+0xf1/0x160 [ 489.695619][ T8425] ? kmsan_get_metadata+0xf1/0x160 [ 489.701028][ T8425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 489.707159][ T8425] ? tcp_urg+0xfe/0x400 [ 489.711590][ T8425] tcp_rcv_established+0x19bb/0x3200 [ 489.717166][ T8425] tcp_v4_do_rcv+0xc5b/0x1b70 [ 489.722087][ T8425] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 489.728399][ T8425] ? kmsan_get_metadata+0xf1/0x160 [ 489.733767][ T8425] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 489.739127][ T8425] __release_sock+0x360/0x7d0 [ 489.744004][ T8425] ? kmsan_get_metadata+0xf1/0x160 [ 489.749391][ T8425] release_sock+0x22d/0x300 [ 489.754118][ T8425] ? sk_reset_timer+0x105/0x140 [ 489.759177][ T8425] mptcp_subflow_shutdown+0x358/0x690 [ 489.764911][ T8425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 489.770996][ T8425] mptcp_check_send_data_fin+0x31b/0x3d0 [ 489.776917][ T8425] __mptcp_close+0x860/0x1360 [ 489.781872][ T8425] ? __pfx_mptcp_close+0x10/0x10 [ 489.787014][ T8425] mptcp_close+0x42/0x260 [ 489.791552][ T8425] ? __pfx_mptcp_close+0x10/0x10 [ 489.796702][ T8425] inet_release+0x1ee/0x2a0 [ 489.801464][ T8425] ? __pfx_inet_release+0x10/0x10 [ 489.806928][ T8425] sock_close+0xd6/0x2f0 [ 489.811373][ T8425] ? __pfx_sock_close+0x10/0x10 [ 489.816414][ T8425] __fput+0x60e/0x1010 [ 489.820718][ T8425] ? __pfx_____fput+0x10/0x10 [ 489.825601][ T8425] ____fput+0x25/0x30 [ 489.829798][ T8425] task_work_run+0x208/0x2b0 [ 489.834589][ T8425] exit_to_user_mode_loop+0x505/0x2420 [ 489.840318][ T8425] ? __x64_sys_close_range+0x97/0xe0 [ 489.845880][ T8425] do_syscall_64+0x261/0x3c0 [ 489.850683][ T8425] ? clear_bhb_loop+0x50/0xa0 [ 489.855627][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.861744][ T8425] RIP: 0033:0x7f71b2b9ce59 [ 489.866356][ T8425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.886216][ T8425] RSP: 002b:00007f71b39d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 489.894863][ T8425] RAX: 0000000000000000 RBX: 00007f71b2e15fa0 RCX: 00007f71b2b9ce59 [ 489.903002][ T8425] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 489.911127][ T8425] RBP: 00007f71b2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 489.919259][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.927381][ T8425] R13: 00007f71b2e16038 R14: 00007f71b2e15fa0 R15: 00007fffba23a2a8 [ 489.935560][ T8425] [ 489.939332][ T8425] Kernel Offset: disabled [ 489.943750][ T8425] Rebooting in 86400 seconds..