last executing test programs: 9.462050877s ago: executing program 3 (id=2185): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x45, 0xfe}}}}}]}}]}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8002) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 9.060061871s ago: executing program 1 (id=2186): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) utime(&(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) 8.23055489s ago: executing program 2 (id=2189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="1408000000000000b89e08dc88a8", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000000050000001800"], 0x38}}, 0x0) 8.19386016s ago: executing program 1 (id=2190): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000001380), 0xfffffffffffffff, 0x2680) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 7.952750342s ago: executing program 1 (id=2191): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x7000000, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 7.353765458s ago: executing program 2 (id=2192): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000080)={[{@jqfmt_vfsv0}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@auto_da_alloc}, {@barrier}, {@nolazytime}]}, 0x3, 0x453, &(0x7f0000000200)="$eJzs28tvG8UfAPDv2knf/SW/qjz6AAIFUfFImrSUHriAQOIAEhIcyjEkblXqNlUSJFpFEBAqR1SJIxLiiIT4AzjBBQEnJK7ljipVKJcUTkZrexPbtZ0mseNG/nykTWZ2x5n5enfsmZ1sAH1rJP2RROyLiJsRMVTJ1hcYqfy6s7Qw9c/SwlQSpdLbfyflcstLC1NZ0ex1e7PMQETusySONKl37uq1i5P5KMxW82Pzl66MzV299vyFS5PnC+cLlyfOnDl1cvzF0xMvdCTONK7lwx/NHD30+rs33pw6e+O9X79Lsvgb4uiQkXYHnyqVOlxdb+2vSScDTQoMbmFjuGf5Sjctn56bMRT5WD15Q/Hapz1tHNBVpVKp9GDrw4ul5pKalwPbVqITQ5/KvujT+e/yUm4LRhz3l9svVyZAafx3qlvlyEBk78Zgw/y2k0Yi4uziv1+nW3TnPgQAQJ0f0/HPc9n4r7JVjuSi9r7Q/6prKMMR8f+IOBARpyPiYEQ8EFEu+1BEPNzw968stK+/cZHk7vFP7tbGo1tbOv57qbq2VT/+WxkLD+eruf3l+AeTcxeKhRPV9+R4DO5M8+Nt6vjp1T++aHWsdvyXbmn92Viw2o5bAzvrXzM9OT+5mZhr3f4k4vBAs/iTlZWAJCIORcThDdZx4Zlvj7Y6tnb8bTRbZ1qn0jcRT1fO/2I0xJ9J2q9Pju2KYuHEWHZVRMSu+jp++/36W63q31T8HZCe/z1Nr/+V+IeTbL22WCzMzq2/jut/ft5yTrPR639H8k7dvg8n5+dnxyN2JG9UGl27f6Kh3MRq+TT+48ea9/8DsfpOHImI9CJ+JCIejYjHqm1/PCKeiIhjbeL/5ZUn3994/N2Vxj+9rvO/mtgRjXsaE1+VE/mLP/9QV+nweuJPz/+pcup4dc+9fP61b9dmrmYAAADYfnIRsS+S3OhKOpcbHa38D//B2JMrzszNP3tu5oPL05VnBIZjMJfd6RqquR86Xp3WZ/mJhvzJ6n3jL/O7y/nRqZnidK+Dhz63t0X/T/2V73XrgK7rwDoasE3p/9C/9H/oX/o/9K8m/X93L9oBbL1m3/8f96AdwNZr6P9rLPt9361n4YEeMP+H/qX/Q//S/6Evze2OtR+Sl5C4KxG5+6IZEl1K9PqTCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CwAA//90pdxD") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='3', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) fallocate(r1, 0x8, 0x4000, 0x8000) 7.1631519s ago: executing program 3 (id=2193): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, 0x0, 0x408c0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = getpid() syz_clone3(&(0x7f0000000200)={0x101000000, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r4], 0x1}, 0x58) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_clone(0x20100, &(0x7f0000000680), 0x0, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="46b3e0218757f0b78ac136a5479c55a6a3dde4b6d5df1090e1b720c6e60e416a9a0fc3c8f208867a101616b342309acadd44c374f6480810f00cbb4fe2f2411aabfd9b542608877396d7fc61901e10d74aa913db22e689cf682a6968") sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004010) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000909010073"], 0xe4}, 0x1, 0x0, 0x0, 0x8801}, 0x20050840) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x1d0, 0x0, 0x100, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65b75f47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56ac8be6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ac0e0a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc1eb724}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15c619db}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfa2e9be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfb14aea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x457e42fd}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa0, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60a4da47}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23d18ad4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x764a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x83eb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc786}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc0e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6469}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a1fae5b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69d3799c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf5c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x470b648f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54e0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x565d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aefd8ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeae6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22308b31}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35569022}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33c3a614}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6edc25a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71b65901}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9bf3892}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27407d1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33bef9e9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f88430a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e9d86a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ec81835}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 6.830761163s ago: executing program 2 (id=2194): syz_emit_ethernet(0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000081c0), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000096be953eae0b93af4a676ba04f4671ec70b1ed94351f76064518afc7af9374bf312035c945cfc29a4ae22cdc6b1b6ecefcaee8e1e32e48f6e64b7abea456ff4d5df5f880ab30952dfec66cde1ccf6be682af828277bfd357b7ab96ab2d4a40aa5941048a96285681620cd80aec8dc7", @ANYRES16=r2, @ANYBLOB="0d022abd7000fedbdf250100000005000600020000000500050004000000080003000600000008000400260000"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) fchmod(r4, 0x20049549e2a2d659) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000008200)={0x200, 0x9}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0xfffffffffffffc77) r6 = socket(0x11, 0xa, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x29, 0x0, @void}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xffff, 0x4}, 0x8) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f0000001280)={0x0, @remote, 0x0, 0x0, 'rr\x00', 0x0, 0x0, 0x4}, 0x2c) 6.685844185s ago: executing program 3 (id=2195): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x141, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x108) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x8c, 0xc}, 0x18) r1 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 4.594540865s ago: executing program 2 (id=2197): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa081, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x20, "", [{{0x9, 0x4, 0x0, 0x10, 0x7, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfe}}}}}]}}]}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x2, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0xdb, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r1, 0x6411) 4.262176878s ago: executing program 1 (id=2198): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x38f9, 0x0) fcntl$setstatus(r2, 0x4, 0x6c00) fcntl$setstatus(r2, 0x4, 0x2400) write(0xffffffffffffffff, &(0x7f0000000040), 0xffffff4a) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) write$6lowpan_control(r2, &(0x7f0000000240)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) r4 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'team0\x00', &(0x7f0000000400)=@ethtool_dump={0x3e, 0x6, 0x6, 0x7c, "690186ca7aefb00f6c7b9d854c656316373363e63df53c0860056c36783409a8c0406dfbfb9759fcd52bbb3924adf5ae6f6bd16de782756e843352f53d25d21b1f9b38992557cbd865edece814b39b44beb339ce93c0486cad28b5c6b1f770f8e56f4f0d76663502411a9e05d2f393dd03ff075f2b029cd268aed84f"}}) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x14, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0xffff1000, 0x8000, 0x8}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500200"], 0x250}}, 0x2000c000) 4.16396363s ago: executing program 3 (id=2199): read$FUSE(0xffffffffffffffff, &(0x7f00000013c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000001, r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x0, [0xfbe, 0x8, 0x7]}, &(0x7f0000000300)=0x44) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000100)) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.558954135s ago: executing program 0 (id=2200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="1408000000000000b89e08dc88a8", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000000050000001800"], 0x38}}, 0x0) 3.510570256s ago: executing program 3 (id=2201): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x33, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 3.482799036s ago: executing program 1 (id=2202): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x45, 0xfe}}}}}]}}]}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8002) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 2.897017472s ago: executing program 0 (id=2203): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000)={[{@inlinecrypt}, {@resuid}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}]}, 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x4, '\x00', @a}) 2.647971074s ago: executing program 0 (id=2204): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x500677bfafcfaf52, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x50, 0xfffffffffffffffd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, 0x0, 0x0, 0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x9901) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x21, 0x0, &(0x7f0000000140)) 2.647409894s ago: executing program 3 (id=2205): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfffe82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80281, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r3, r4, 0x0, 0x20fffe82) 1.603954195s ago: executing program 2 (id=2206): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a589", 0x61}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf4) 1.513249715s ago: executing program 0 (id=2207): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) r0 = io_uring_setup(0x136a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000005) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10000) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000"], 0x70}}, 0x0) socket$kcm(0x29, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c000004004280140001800600060008060000"], 0x30}, 0x1, 0x0, 0x0, 0x4048030}, 0xc000) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}}) 1.423103336s ago: executing program 2 (id=2208): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x50110, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) mremap(&(0x7f0000fc4000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000fc5000/0x1000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 709.215773ms ago: executing program 0 (id=2209): read$FUSE(0xffffffffffffffff, &(0x7f00000013c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000001, r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x0, [0xfbe, 0x8, 0x7]}, &(0x7f0000000300)=0x44) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000100)) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 43.431459ms ago: executing program 1 (id=2210): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x38f9, 0x0) fcntl$setstatus(r2, 0x4, 0x6c00) fcntl$setstatus(r2, 0x4, 0x2400) write(0xffffffffffffffff, &(0x7f0000000040), 0xffffff4a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) write$6lowpan_control(r2, &(0x7f0000000240)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) r4 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'team0\x00', &(0x7f0000000400)=@ethtool_dump={0x3e, 0x6, 0x6, 0x7c, "690186ca7aefb00f6c7b9d854c656316373363e63df53c0860056c36783409a8c0406dfbfb9759fcd52bbb3924adf5ae6f6bd16de782756e843352f53d25d21b1f9b38992557cbd865edece814b39b44beb339ce93c0486cad28b5c6b1f770f8e56f4f0d76663502411a9e05d2f393dd03ff075f2b029cd268aed84f"}}) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x14, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0xffff1000, 0x8000, 0x8}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500200"], 0x250}}, 0x2000c000) 0s ago: executing program 0 (id=2211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="1408000000000000b89e08dc88a8", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000000050000001800"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): EBs reserved for bad PEB handling: 0 [ 414.161453][ T8871] ubi16: background thread "ubi_bgt16d" started, PID 8871 [ 418.488033][ T8902] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.929'. [ 418.852865][ T8912] netlink: 'syz.0.934': attribute type 21 has an invalid length. [ 418.860642][ T8912] netlink: 128 bytes leftover after parsing attributes in process `syz.0.934'. [ 418.869719][ T8912] netlink: 'syz.0.934': attribute type 4 has an invalid length. [ 418.877420][ T8912] netlink: 3 bytes leftover after parsing attributes in process `syz.0.934'. [ 420.455979][ T8918] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 426.136294][ T8976] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 426.228317][ T970] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 426.448047][ T970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.464108][ T970] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 426.605940][ T970] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 426.618171][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.632164][ T970] usb 4-1: Product: syz [ 426.640265][ T970] usb 4-1: Manufacturer: syz [ 426.645596][ T970] usb 4-1: SerialNumber: syz [ 426.668987][ T970] usb 4-1: config 0 descriptor?? [ 426.962615][ T8971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.975214][ T8971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.322917][ T8993] siw: device registration error -23 [ 428.350543][ T8992] comedi: valid board names for 8255 driver are: [ 428.357050][ T8992] 8255 [ 428.359829][ T8992] comedi: valid board names for vmk80xx driver are: [ 428.366452][ T8992] vmk80xx [ 428.369487][ T8992] comedi: valid board names for usbduxsigma driver are: [ 428.377141][ T8992] usbduxsigma [ 428.380529][ T8992] comedi: valid board names for usbduxfast driver are: [ 428.388268][ T8992] usbduxfast [ 428.391584][ T8992] comedi: valid board names for usbdux driver are: [ 428.398120][ T8992] usbdux [ 428.401063][ T8992] comedi: valid board names for ni6501 driver are: [ 428.407597][ T8992] ni6501 [ 428.410546][ T8992] comedi: valid board names for dt9812 driver are: [ 428.417102][ T8992] dt9812 [ 428.420046][ T8992] comedi: valid board names for ni_labpc_cs driver are: [ 428.427033][ T8992] ni_labpc_cs [ 428.430413][ T8992] comedi: valid board names for ni_daq_700 driver are: [ 428.437276][ T8992] ni_daq_700 [ 428.440603][ T8992] comedi: valid board names for labpc_pci driver are: [ 428.447372][ T8992] labpc_pci [ 428.450678][ T8992] comedi: valid board names for adl_pci9118 driver are: [ 428.458015][ T8992] pci9118dg [ 428.461366][ T8992] pci9118hg [ 428.464573][ T8992] pci9118hr [ 428.467775][ T8992] comedi: valid board names for 8255_pci driver are: [ 428.474532][ T8992] 8255_pci [ 428.477648][ T8992] comedi: valid board names for s526 driver are: [ 428.484703][ T8992] s526 [ 428.487481][ T8992] comedi: valid board names for multiq3 driver are: [ 428.494126][ T8992] multiq3 [ 428.497156][ T8992] comedi: valid board names for pcmuio driver are: [ 428.503710][ T8992] pcmuio48 [ 428.506828][ T8992] pcmuio96 [ 428.509938][ T8992] comedi: valid board names for pcmmio driver are: [ 428.516487][ T8992] pcmmio [ 428.519429][ T8992] comedi: valid board names for pcmda12 driver are: [ 428.526109][ T8992] pcmda12 [ 428.529161][ T8992] comedi: valid board names for pcmad driver are: [ 428.535804][ T8992] pcmad12 [ 428.538878][ T8992] pcmad16 [ 428.541951][ T8992] comedi: valid board names for ni_labpc driver are: [ 428.548707][ T8992] lab-pc-1200 [ 428.552128][ T8992] lab-pc-1200ai [ 428.555722][ T8992] lab-pc+ [ 428.558871][ T8992] comedi: valid board names for atmio16 driver are: [ 428.565529][ T8992] atmio16 [ 428.568681][ T8992] atmio16d [ 428.571826][ T8992] comedi: valid board names for ni_at_ao driver are: [ 428.578557][ T8992] at-ao-6 [ 428.581675][ T8992] at-ao-10 [ 428.584833][ T8992] comedi: valid board names for ni_at_a2150 driver are: [ 428.591854][ T8992] ni_at_a2150 [ 428.595907][ T8992] comedi: valid board names for adq12b driver are: [ 428.602647][ T8992] adq12b [ 428.605639][ T8992] comedi: valid board names for mpc624 driver are: [ 428.612228][ T8992] mpc624 [ 428.615215][ T8992] comedi: valid board names for c6xdigio driver are: [ 428.622000][ T8992] c6xdigio [ 428.625163][ T8992] comedi: valid board names for aio_iiro_16 driver are: [ 428.632158][ T8992] aio_iiro_16 [ 428.635611][ T8992] comedi: valid board names for aio_aio12_8 driver are: [ 428.642596][ T8992] aio_aio12_8 [ 428.646070][ T8992] aio_ai12_8 [ 428.649406][ T8992] aio_ao12_4 [ 428.652738][ T8992] comedi: valid board names for fl512 driver are: [ 428.659245][ T8992] fl512 [ 428.662126][ T8992] comedi: valid board names for dmm32at driver are: [ 428.668842][ T8992] dmm32at [ 428.671910][ T8992] comedi: valid board names for dt282x driver are: [ 428.678495][ T8992] dt2821 [ 428.681464][ T8992] dt2821-f [ 428.684604][ T8992] dt2821-g [ 428.687824][ T8992] dt2823 [ 428.690797][ T8992] dt2824-pgh [ 428.694137][ T8992] dt2824-pgl [ 428.697457][ T8992] dt2825 [ 428.700453][ T8992] dt2827 [ 428.703444][ T8992] dt2828 [ 428.707067][ T8992] dt2829 [ 428.710210][ T8992] dt21-ez [ 428.713288][ T8992] dt23-ez [ 428.716367][ T8992] dt24-ez [ 428.719482][ T8992] dt24-ez-pgl [ 428.722915][ T8992] comedi: valid board names for dt2817 driver are: [ 428.729478][ T8992] dt2817 [ 428.732563][ T8992] comedi: valid board names for dt2815 driver are: [ 428.739118][ T8992] dt2815 [ 428.742137][ T8992] comedi: valid board names for dt2814 driver are: [ 428.748694][ T8992] dt2814 [ 428.751649][ T8992] comedi: valid board names for dt2811 driver are: [ 428.758436][ T8992] dt2811-pgh [ 428.761737][ T8992] dt2811-pgl [ 428.765053][ T8992] comedi: valid board names for dt2801 driver are: [ 428.771532][ T8992] dt2801 [ 428.774486][ T8992] comedi: valid board names for das6402 driver are: [ 428.781051][ T8992] das6402-12 [ 428.784321][ T8992] das6402-16 [ 428.787614][ T8992] comedi: valid board names for das1800 driver are: [ 428.794182][ T8992] das-1701st [ 428.797489][ T8992] das-1701st-da [ 428.801015][ T8992] das-1702st [ 428.804279][ T8992] das-1702st-da [ 428.807824][ T8992] das-1702hr [ 428.811087][ T8992] das-1702hr-da [ 428.814611][ T8992] das-1701ao [ 428.818291][ T8992] das-1702ao [ 428.821561][ T8992] das-1801st [ 428.824823][ T8992] das-1801st-da [ 428.828372][ T8992] das-1802st [ 428.831637][ T8992] das-1802st-da [ 428.835158][ T8992] das-1802hr [ 428.838429][ T8992] das-1802hr-da [ 428.842011][ T8992] das-1801hc [ 428.845282][ T8992] das-1802hc [ 428.848543][ T8992] das-1801ao [ 428.851831][ T8992] das-1802ao [ 428.855096][ T8992] comedi: valid board names for das800 driver are: [ 428.861614][ T8992] das-800 [ 428.864627][ T8992] cio-das800 [ 428.867892][ T8992] das-801 [ 428.870902][ T8992] cio-das801 [ 428.874191][ T8992] das-802 [ 428.877194][ T8992] cio-das802 [ 428.880456][ T8992] cio-das802/16 [ 428.884029][ T8992] comedi: valid board names for isa-das08 driver are: [ 428.890771][ T8992] isa-das08 [ 428.893969][ T8992] das08-pgm [ 428.897148][ T8992] das08-pgh [ 428.900323][ T8992] das08-pgl [ 428.903517][ T8992] das08-aoh [ 428.906739][ T8992] das08-aol [ 428.909918][ T8992] das08-aom [ 428.913093][ T8992] das08/jr-ao [ 428.916478][ T8992] das08jr-16-ao [ 428.920004][ T8992] pc104-das08 [ 428.923351][ T8992] das08jr/16 [ 428.926657][ T8992] comedi: valid board names for das16m1 driver are: [ 428.933581][ T8992] das16m1 [ 428.936614][ T8992] comedi: valid board names for dac02 driver are: [ 428.943007][ T8992] dac02 [ 428.945861][ T8992] comedi: valid board names for rti802 driver are: [ 428.952377][ T8992] rti802 [ 428.955292][ T8992] comedi: valid board names for rti800 driver are: [ 428.961794][ T8992] rti800 [ 428.964710][ T8992] rti815 [ 428.967626][ T8992] comedi: valid board names for pcm3724 driver are: [ 428.974223][ T8992] pcm3724 [ 428.977235][ T8992] comedi: valid board names for pcl818 driver are: [ 428.983778][ T8992] pcl818l [ 428.986784][ T8992] pcl818h [ 428.989794][ T8992] pcl818hd [ 428.992942][ T8992] pcl818hg [ 428.996032][ T8992] pcl818 [ 428.998948][ T8992] pcl718 [ 429.001886][ T8992] pcm3718 [ 429.004890][ T8992] comedi: valid board names for pcl816 driver are: [ 429.011378][ T8992] pcl816 [ 429.014327][ T8992] pcl814b [ 429.017330][ T8992] comedi: valid board names for pcl812 driver are: [ 429.023830][ T8992] pcl812 [ 429.026746][ T8992] pcl812pg [ 429.029836][ T8992] acl8112pg [ 429.033019][ T8992] acl8112dg [ 429.036226][ T8992] acl8112hg [ 429.039776][ T8992] a821pgl [ 429.042874][ T8992] a821pglnda [ 429.046185][ T8992] a821pgh [ 429.049195][ T8992] a822pgl [ 429.052214][ T8992] a822pgh [ 429.055292][ T8992] a823pgl [ 429.058296][ T8992] a823pgh [ 429.061297][ T8992] pcl813 [ 429.064212][ T8992] pcl813b [ 429.067240][ T8992] acl8113 [ 429.070248][ T8992] iso813 [ 429.073166][ T8992] acl8216 [ 429.076179][ T8992] a826pg [ 429.095433][ T8992] comedi: valid board names for pcl730 driver are: [ 429.103267][ T8992] pcl730 [ 429.106224][ T8992] iso730 [ 429.109175][ T8992] acl7130 [ 429.112243][ T8992] pcm3730 [ 429.115274][ T8992] pcl725 [ 429.118217][ T8992] p8r8dio [ 429.121326][ T8992] acl7225b [ 429.124457][ T8992] p16r16dio [ 429.127675][ T8992] pcl733 [ 429.128620][ T56] usb 4-1: USB disconnect, device number 9 [ 429.130642][ T8992] pcl734 [ 429.139443][ T8992] opmm-1616-xt [ 429.142975][ T8992] pearl-mm-p [ 429.146275][ T8992] ir104-pbf [ 429.150190][ T8992] comedi: valid board names for pcl726 driver are: [ 429.156756][ T8992] pcl726 [ 429.159708][ T8992] pcl727 [ 429.162656][ T8992] pcl728 [ 429.165657][ T8992] acl6126 [ 429.168680][ T8992] acl6128 [ 429.171690][ T8992] comedi: valid board names for pcl724 driver are: [ 429.178197][ T8992] pcl724 [ 429.181119][ T8992] pcl722 [ 429.184038][ T8992] pcl731 [ 429.186996][ T8992] acl7122 [ 429.190007][ T8992] acl7124 [ 429.193012][ T8992] pet48dio [ 429.196180][ T8992] pcmio48 [ 429.199189][ T8992] onyx-mm-dio [ 429.202544][ T8992] comedi: valid board names for pcl711 driver are: [ 429.209059][ T8992] pcl711 [ 429.211979][ T8992] pcl711b [ 429.214984][ T8992] acl8112hg [ 429.218212][ T8992] acl8112dg [ 429.221391][ T8992] comedi: valid board names for amplc_pc263 driver are: [ 429.228315][ T8992] pc263 [ 429.231184][ T8992] comedi: valid board names for amplc_pc236 driver are: [ 429.238131][ T8992] pc36at [ 429.241088][ T8992] comedi: valid board names for amplc_dio200 driver are: [ 429.248095][ T8992] pc212e [ 429.251214][ T8992] pc214e [ 429.254139][ T8992] pc215e [ 429.257059][ T8992] pc218e [ 429.260749][ T8992] pc272e [ 429.263737][ T8992] comedi: valid board names for comedi_parport driver are: [ 429.270917][ T8992] comedi_parport [ 429.274568][ T8992] comedi: valid board names for comedi_test driver are: [ 429.281488][ T8992] comedi_test [ 429.284864][ T8992] comedi: valid board names for comedi_bond driver are: [ 429.291788][ T8992] comedi_bond [ 431.311847][ T9016] xt_hashlimit: size too large, truncated to 1048576 [ 432.962222][ T9024] binder: 9023:9024 unknown command 0 [ 432.976533][ T9024] binder: 9023:9024 ioctl c0306201 200000000080 returned -22 [ 433.145120][ T9025] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.961'. [ 433.479540][ T9028] netlink: 'syz.2.964': attribute type 1 has an invalid length. [ 433.535856][ T9028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.596279][ T9033] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 433.610030][ T9033] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 433.622135][ T9033] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 433.634662][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 433.673623][ T9030] bond1: (slave geneve2): making interface the new active one [ 433.684898][ T9030] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 433.745754][ T9030] syz.2.964 (9030) used greatest stack depth: 19560 bytes left [ 434.282279][ T9044] siw: device registration error -23 [ 435.276664][ T28] audit: type=1326 audit(1781958559.341:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.0.970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbdad9ce59 code=0x0 [ 436.366934][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 439.317036][ T9071] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.975'. [ 444.017001][ T9118] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.989'. [ 449.559850][ T9164] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.1006'. [ 451.663240][ T9185] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 454.282484][ T9196] block device autoloading is deprecated and will be removed. [ 454.922203][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'. [ 454.931773][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'. [ 454.943308][ T9211] kernel profiling enabled (shift: 5) [ 455.939770][ T9220] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 457.071143][ T9228] binder: 9226:9228 unknown command 0 [ 457.076579][ T9228] binder: 9226:9228 ioctl c0306201 200000000080 returned -22 [ 457.573065][ T9244] autofs4:pid:9244:autofs_fill_super: called with bogus options [ 457.792499][ T5807] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 458.269285][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.280545][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.290664][ T5807] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 458.299802][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.377625][ T5807] usb 4-1: config 0 descriptor?? [ 458.803357][ T9259] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.859823][ T9259] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.963133][ T9267] input: syz1 as /devices/virtual/input/input8 [ 459.992941][ T9259] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.061322][ T9259] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.163028][ T9259] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.188317][ T9259] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.210106][ T9259] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.245022][ T9259] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.287103][ T5807] usbhid 4-1:0.0: can't add hid device: -32 [ 460.293155][ T5807] usbhid: probe of 4-1:0.0 failed with error -32 [ 460.316418][ T5830] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 460.327911][ T56] usb 4-1: USB disconnect, device number 10 [ 460.544109][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 460.562268][ T5830] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 460.576194][ T5830] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.597873][ T5830] usb 1-1: config 0 has no interface number 0 [ 460.606785][ T5830] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 460.616751][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.638082][ T5830] usb 1-1: Product: syz [ 460.643031][ T5830] usb 1-1: Manufacturer: syz [ 460.647655][ T5830] usb 1-1: SerialNumber: syz [ 460.661749][ T5830] usb 1-1: config 0 descriptor?? [ 461.036760][ T5830] usb 1-1: Found UVC 0.00 device syz (046c:14e8) [ 461.058953][ T5830] usb 1-1: No valid video chain found. [ 461.290247][ T5873] usb 1-1: USB disconnect, device number 6 [ 461.640017][ T5830] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 461.973386][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 461.984936][ T5830] usb 3-1: config index 0 descriptor too short (expected 14385, got 34) [ 461.993315][ T5830] usb 3-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 462.006427][ T5830] usb 3-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 462.743601][ T5830] usb 3-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 462.766482][ T5830] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 462.775875][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.783888][ T5830] usb 3-1: Product: syz [ 462.788393][ T5830] usb 3-1: Manufacturer: syz [ 462.793006][ T5830] usb 3-1: SerialNumber: syz [ 463.182388][ T9289] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 463.189222][ T9289] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 463.235559][ T9289] vhci_hcd vhci_hcd.0: Device attached [ 463.355958][ T9316] vhci_hcd: connection closed [ 463.361029][ T5830] usb 3-1: USB disconnect, device number 7 [ 463.400711][ T3494] vhci_hcd: stop threads [ 463.419002][ T3494] vhci_hcd: release socket [ 463.436958][ T3494] vhci_hcd: disconnect device [ 463.457909][ T56] vhci_hcd: vhci_device speed not set [ 464.233901][ T28] audit: type=1800 audit(1781958586.077:173): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1050" name="bus" dev="ramfs" ino=24146 res=0 errno=0 [ 468.324020][ T9366] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.440599][ T9366] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.652404][ T9366] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.439425][ T9366] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.668272][ T9366] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.687863][ T9366] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.705255][ T9366] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.722847][ T9366] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.982550][ T9417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.252711][ T9417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.884483][ T9417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.090386][ T9417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.664371][ T9417] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.685546][ T9417] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.702277][ T9417] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.732309][ T9417] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.302019][ T9471] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.1088'. [ 481.863002][ T9539] tmpfs: Bad value for 'mpol' [ 482.137046][ T9548] netlink: 'syz.3.1116': attribute type 6 has an invalid length. [ 482.145251][ T9548] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1116'. [ 484.392195][ T9573] binder: 9571:9573 unknown command 0 [ 484.418080][ T9573] binder: 9571:9573 ioctl c0306201 200000000080 returned -22 [ 484.469173][ T9573] binder_alloc: 9571: binder_alloc_buf, no vma [ 486.556185][ T9617] binder: 9615:9617 unknown command 0 [ 486.574301][ T9617] binder: 9615:9617 ioctl c0306201 200000000080 returned -22 [ 486.587944][ T9617] binder_alloc: 9615: binder_alloc_buf, no vma [ 487.309990][ T9627] syz_tun: entered allmulticast mode [ 490.169134][ T9635] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 491.294003][ T9666] syz.0.1150 (9666): drop_caches: 2 [ 492.273307][ T5086] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 492.513632][ T9691] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 494.059729][ T9712] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1166'. [ 494.071031][ T9712] gretap0: entered promiscuous mode [ 494.106630][ T9712] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1166'. [ 494.115666][ T9712] 0ªî{X¹¦: renamed from gretap0 [ 494.134348][ T9712] 0ªî{X¹¦: left promiscuous mode [ 494.139407][ T9712] 0ªî{X¹¦: entered allmulticast mode [ 494.146341][ T9712] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 496.287686][ T9759] process 'syz.3.1181' launched './file0' with NULL argv: empty string added [ 496.635606][ T5873] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 496.841412][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 496.848326][ T5873] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 496.915351][ T5873] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 496.943110][ T5873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 496.956573][ T5873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 496.967192][ T5873] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.980734][ T5873] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 496.991610][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.439115][ T5873] usb 4-1: GET_CAPABILITIES returned 0 [ 497.444688][ T5873] usbtmc 4-1:16.0: can't read capabilities [ 497.682848][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.696255][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.705413][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.714536][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.731432][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.740590][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.749712][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.760670][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.769809][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.778926][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.788038][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.800457][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.809586][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.820658][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.829803][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.838926][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 497.868880][ T5809] usb 4-1: USB disconnect, device number 11 [ 501.602561][ T9858] comedi: valid board names for 8255 driver are: [ 501.609325][ T9858] 8255 [ 501.612126][ T9858] comedi: valid board names for vmk80xx driver are: [ 501.618802][ T9858] vmk80xx [ 501.621865][ T9858] comedi: valid board names for usbduxsigma driver are: [ 501.629089][ T9858] usbduxsigma [ 501.632487][ T9858] comedi: valid board names for usbduxfast driver are: [ 501.639362][ T9858] usbduxfast [ 501.642738][ T9858] comedi: valid board names for usbdux driver are: [ 501.649270][ T9858] usbdux [ 501.652295][ T9858] comedi: valid board names for ni6501 driver are: [ 501.658807][ T9858] ni6501 [ 501.661833][ T9858] comedi: valid board names for dt9812 driver are: [ 501.668351][ T9858] dt9812 [ 501.671309][ T9858] comedi: valid board names for ni_labpc_cs driver are: [ 501.678269][ T9858] ni_labpc_cs [ 501.681635][ T9858] comedi: valid board names for ni_daq_700 driver are: [ 501.688488][ T9858] ni_daq_700 [ 501.692154][ T9858] comedi: valid board names for labpc_pci driver are: [ 501.698949][ T9858] labpc_pci [ 501.702135][ T9858] comedi: valid board names for adl_pci9118 driver are: [ 501.709092][ T9858] pci9118dg [ 501.712277][ T9858] pci9118hg [ 501.715598][ T9858] pci9118hr [ 501.718798][ T9858] comedi: valid board names for 8255_pci driver are: [ 501.725456][ T9858] 8255_pci [ 501.728590][ T9858] comedi: valid board names for s526 driver are: [ 501.734908][ T9858] s526 [ 501.737717][ T9858] comedi: valid board names for multiq3 driver are: [ 501.744310][ T9858] multiq3 [ 501.747326][ T9858] comedi: valid board names for pcmuio driver are: [ 501.753860][ T9858] pcmuio48 [ 501.756970][ T9858] pcmuio96 [ 501.760102][ T9858] comedi: valid board names for pcmmio driver are: [ 501.766588][ T9858] pcmmio [ 501.769524][ T9858] comedi: valid board names for pcmda12 driver are: [ 501.776133][ T9858] pcmda12 [ 501.779153][ T9858] comedi: valid board names for pcmad driver are: [ 501.785584][ T9858] pcmad12 [ 501.788592][ T9858] pcmad16 [ 501.791647][ T9858] comedi: valid board names for ni_labpc driver are: [ 501.798328][ T9858] lab-pc-1200 [ 501.802334][ T9858] lab-pc-1200ai [ 501.805872][ T9858] lab-pc+ [ 501.808880][ T9858] comedi: valid board names for atmio16 driver are: [ 501.815568][ T9858] atmio16 [ 501.818586][ T9858] atmio16d [ 501.821695][ T9858] comedi: valid board names for ni_at_ao driver are: [ 501.828403][ T9858] at-ao-6 [ 501.831412][ T9858] at-ao-10 [ 501.834514][ T9858] comedi: valid board names for ni_at_a2150 driver are: [ 501.841455][ T9858] ni_at_a2150 [ 501.844810][ T9858] comedi: valid board names for adq12b driver are: [ 501.851315][ T9858] adq12b [ 501.854236][ T9858] comedi: valid board names for mpc624 driver are: [ 501.860753][ T9858] mpc624 [ 501.863672][ T9858] comedi: valid board names for c6xdigio driver are: [ 501.870377][ T9858] c6xdigio [ 501.873495][ T9858] comedi: valid board names for aio_iiro_16 driver are: [ 501.880477][ T9858] aio_iiro_16 [ 501.883865][ T9858] comedi: valid board names for aio_aio12_8 driver are: [ 501.890875][ T9858] aio_aio12_8 [ 501.894241][ T9858] aio_ai12_8 [ 501.897508][ T9858] aio_ao12_4 [ 501.900827][ T9858] comedi: valid board names for fl512 driver are: [ 501.907239][ T9858] fl512 [ 501.910083][ T9858] comedi: valid board names for dmm32at driver are: [ 501.917125][ T9858] dmm32at [ 501.920158][ T9858] comedi: valid board names for dt282x driver are: [ 501.926718][ T9858] dt2821 [ 501.929651][ T9858] dt2821-f [ 501.932778][ T9858] dt2821-g [ 501.935873][ T9858] dt2823 [ 501.938794][ T9858] dt2824-pgh [ 501.942062][ T9858] dt2824-pgl [ 501.945354][ T9858] dt2825 [ 501.948274][ T9858] dt2827 [ 501.951192][ T9858] dt2828 [ 501.954145][ T9858] dt2829 [ 501.957075][ T9858] dt21-ez [ 501.960081][ T9858] dt23-ez [ 501.963086][ T9858] dt24-ez [ 501.966117][ T9858] dt24-ez-pgl [ 501.969474][ T9858] comedi: valid board names for dt2817 driver are: [ 501.975979][ T9858] dt2817 [ 501.978902][ T9858] comedi: valid board names for dt2815 driver are: [ 501.985380][ T9858] dt2815 [ 501.988321][ T9858] comedi: valid board names for dt2814 driver are: [ 501.994811][ T9858] dt2814 [ 501.997757][ T9858] comedi: valid board names for dt2811 driver are: [ 502.004241][ T9858] dt2811-pgh [ 502.007522][ T9858] dt2811-pgl [ 502.010855][ T9858] comedi: valid board names for dt2801 driver are: [ 502.017342][ T9858] dt2801 [ 502.020293][ T9858] comedi: valid board names for das6402 driver are: [ 502.027320][ T9858] das6402-12 [ 502.030644][ T9858] das6402-16 [ 502.033911][ T9858] comedi: valid board names for das1800 driver are: [ 502.040536][ T9858] das-1701st [ 502.043816][ T9858] das-1701st-da [ 502.047341][ T9858] das-1702st [ 502.050615][ T9858] das-1702st-da [ 502.054172][ T9858] das-1702hr [ 502.057438][ T9858] das-1702hr-da [ 502.060990][ T9858] das-1701ao [ 502.064279][ T9858] das-1702ao [ 502.067545][ T9858] das-1801st [ 502.070808][ T9858] das-1801st-da [ 502.074395][ T9858] das-1802st [ 502.077664][ T9858] das-1802st-da [ 502.081201][ T9858] das-1802hr [ 502.084537][ T9858] das-1802hr-da [ 502.088096][ T9858] das-1801hc [ 502.091385][ T9858] das-1802hc [ 502.095001][ T9858] das-1801ao [ 502.098574][ T9858] das-1802ao [ 502.101860][ T9858] comedi: valid board names for das800 driver are: [ 502.108367][ T9858] das-800 [ 502.111374][ T9858] cio-das800 [ 502.114638][ T9858] das-801 [ 502.117669][ T9858] cio-das801 [ 502.120938][ T9858] das-802 [ 502.123944][ T9858] cio-das802 [ 502.127433][ T9858] cio-das802/16 [ 502.130966][ T9858] comedi: valid board names for isa-das08 driver are: [ 502.138191][ T9858] isa-das08 [ 502.141377][ T9858] das08-pgm [ 502.144556][ T9858] das08-pgh [ 502.147731][ T9858] das08-pgl [ 502.151100][ T9858] das08-aoh [ 502.154298][ T9858] das08-aol [ 502.157473][ T9858] das08-aom [ 502.160710][ T9858] das08/jr-ao [ 502.164074][ T9858] das08jr-16-ao [ 502.167605][ T9858] pc104-das08 [ 502.170990][ T9858] das08jr/16 [ 502.174259][ T9858] comedi: valid board names for das16m1 driver are: [ 502.180848][ T9858] das16m1 [ 502.183904][ T9858] comedi: valid board names for dac02 driver are: [ 502.190307][ T9858] dac02 [ 502.193181][ T9858] comedi: valid board names for rti802 driver are: [ 502.199680][ T9858] rti802 [ 502.202618][ T9858] comedi: valid board names for rti800 driver are: [ 502.209144][ T9858] rti800 [ 502.212067][ T9858] rti815 [ 502.215064][ T9858] comedi: valid board names for pcm3724 driver are: [ 502.221643][ T9858] pcm3724 [ 502.225640][ T9858] comedi: valid board names for pcl818 driver are: [ 502.232125][ T9858] pcl818l [ 502.235140][ T9858] pcl818h [ 502.238177][ T9858] pcl818hd [ 502.241273][ T9858] pcl818hg [ 502.245091][ T9858] pcl818 [ 502.248107][ T9858] pcl718 [ 502.251049][ T9858] pcm3718 [ 502.254057][ T9858] comedi: valid board names for pcl816 driver are: [ 502.260604][ T9858] pcl816 [ 502.263533][ T9858] pcl814b [ 502.266542][ T9858] comedi: valid board names for pcl812 driver are: [ 502.273075][ T9858] pcl812 [ 502.275999][ T9858] pcl812pg [ 502.279137][ T9858] acl8112pg [ 502.282319][ T9858] acl8112dg [ 502.285499][ T9858] acl8112hg [ 502.288679][ T9858] a821pgl [ 502.291718][ T9858] a821pglnda [ 502.295012][ T9858] a821pgh [ 502.298025][ T9858] a822pgl [ 502.301068][ T9858] a822pgh [ 502.304107][ T9858] a823pgl [ 502.307125][ T9858] a823pgh [ 502.310131][ T9858] pcl813 [ 502.313100][ T9858] pcl813b [ 502.316109][ T9858] acl8113 [ 502.319120][ T9858] iso813 [ 502.322109][ T9858] acl8216 [ 502.325135][ T9858] a826pg [ 502.328058][ T9858] comedi: valid board names for pcl730 driver are: [ 502.334564][ T9858] pcl730 [ 502.337484][ T9858] iso730 [ 502.340407][ T9858] acl7130 [ 502.343425][ T9858] pcm3730 [ 502.346469][ T9858] pcl725 [ 502.349396][ T9858] p8r8dio [ 502.352405][ T9858] acl7225b [ 502.356204][ T9858] p16r16dio [ 502.359415][ T9858] pcl733 [ 502.362340][ T9858] pcl734 [ 502.365268][ T9858] opmm-1616-xt [ 502.368752][ T9858] pearl-mm-p [ 502.372024][ T9858] ir104-pbf [ 502.375207][ T9858] comedi: valid board names for pcl726 driver are: [ 502.381714][ T9858] pcl726 [ 502.384703][ T9858] pcl727 [ 502.387667][ T9858] pcl728 [ 502.390591][ T9858] acl6126 [ 502.393598][ T9858] acl6128 [ 502.396607][ T9858] comedi: valid board names for pcl724 driver are: [ 502.403121][ T9858] pcl724 [ 502.406047][ T9858] pcl722 [ 502.409005][ T9858] pcl731 [ 502.411927][ T9858] acl7122 [ 502.414934][ T9858] acl7124 [ 502.417945][ T9858] pet48dio [ 502.421063][ T9858] pcmio48 [ 502.424070][ T9858] onyx-mm-dio [ 502.427429][ T9858] comedi: valid board names for pcl711 driver are: [ 502.433954][ T9858] pcl711 [ 502.436884][ T9858] pcl711b [ 502.439903][ T9858] acl8112hg [ 502.443113][ T9858] acl8112dg [ 502.446300][ T9858] comedi: valid board names for amplc_pc263 driver are: [ 502.453252][ T9858] pc263 [ 502.456174][ T9858] comedi: valid board names for amplc_pc236 driver are: [ 502.463116][ T9858] pc36at [ 502.466048][ T9858] comedi: valid board names for amplc_dio200 driver are: [ 502.473549][ T9858] pc212e [ 502.476567][ T9858] pc214e [ 502.479492][ T9858] pc215e [ 502.482414][ T9858] pc218e [ 502.485377][ T9858] pc272e [ 502.488304][ T9858] comedi: valid board names for comedi_parport driver are: [ 502.495506][ T9858] comedi_parport [ 502.499122][ T9858] comedi: valid board names for comedi_test driver are: [ 502.506051][ T9858] comedi_test [ 502.509433][ T9858] comedi: valid board names for comedi_bond driver are: [ 502.516354][ T9858] comedi_bond [ 502.972237][ T9867] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.1206'. [ 504.365981][ T9882] binder: 9881:9882 unknown command 0 [ 504.376133][ T9882] binder: 9881:9882 ioctl c0306201 200000000080 returned -22 [ 504.393412][ T9882] binder: BINDER_SET_CONTEXT_MGR already set [ 504.416469][ T9882] binder: 9881:9882 ioctl 4018620d 200000000040 returned -16 [ 504.501459][ T9889] syz_tun: entered allmulticast mode [ 506.369235][ T9910] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.1221'. [ 507.761750][ T5873] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 508.128113][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 508.260003][ T5873] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 508.272468][ T5873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.301581][ T5873] usb 4-1: config 0 has no interface number 0 [ 508.307708][ T5873] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.331432][ T5873] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 508.349377][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.357637][ T5873] usb 4-1: Product: syz [ 508.361884][ T5873] usb 4-1: Manufacturer: syz [ 508.367535][ T5873] usb 4-1: SerialNumber: syz [ 508.374633][ T5873] usb 4-1: config 0 descriptor?? [ 508.384242][ T5873] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 508.521943][ T5873] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 508.605338][ T9918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.628243][ T9918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.221870][ T5873] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 510.232708][ T5873] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 510.738810][ T5835] usb 4-1: USB disconnect, device number 12 [ 511.215232][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 511.373490][ T9949] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.1234'. [ 511.456555][ T5830] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 511.498324][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.525117][ T5830] usb 2-1: config 0 descriptor?? [ 511.555395][ T5830] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 511.768978][ T5830] gp8psk: usb in 128 operation failed. [ 511.779687][ T5830] gp8psk: usb in 137 operation failed. [ 511.786320][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 511.799874][ T5830] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 511.837640][ T5830] usb 2-1: media controller created [ 511.906746][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 511.978093][ T5830] gp8psk_fe: Frontend attached [ 511.995886][ T5830] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 512.027125][ T5830] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 512.175376][ T5830] gp8psk: usb in 138 operation failed. [ 512.195614][ T5830] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 512.222939][ T5830] gp8psk: found Genpix USB device pID = 203 (hex) [ 512.254219][ T5830] usb 2-1: USB disconnect, device number 8 [ 512.525116][ T5830] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 516.801068][ T9992] comedi comedi3: pcl816: a I/O base address must be specified [ 516.811276][ T8895] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 517.061151][ T8895] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.214337][ T8895] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 517.230009][ T8895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 517.261071][ T8895] usb 4-1: Product: syz [ 517.274997][ T8895] usb 4-1: Manufacturer: syz [ 517.296767][ T8895] usb 4-1: SerialNumber: syz [ 517.784119][ T8895] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 518.047897][ C1] usblp0: nonzero write bulk status received: -71 [ 518.173662][ T5806] usb 4-1: USB disconnect, device number 13 [ 518.182354][ T5806] usblp0: removed [ 527.628387][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 529.070800][T10137] lo speed is unknown, defaulting to 1000 [ 529.138586][T10138] hfs: can't find a HFS filesystem on dev nullb0 [ 534.701694][T10183] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 536.832699][ T5873] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 537.354800][ T5873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 537.364236][ T5873] usb 3-1: config 8 has no interfaces? [ 537.372407][ T5873] usb 3-1: language id specifier not provided by device, defaulting to English [ 537.383451][ T5873] usb 3-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=dd.b4 [ 537.392828][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.414423][ T5873] usb 3-1: Product: syz [ 537.439148][ T5873] usb 3-1: Manufacturer: syz [ 537.443785][ T5873] usb 3-1: SerialNumber: syz [ 537.732013][ T5830] usb 3-1: USB disconnect, device number 8 [ 537.827181][T10220] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 539.601304][T10219] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 540.396494][ T8895] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 540.825431][ T8895] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 540.877939][ T8895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.997963][ T8895] usb 4-1: config 0 has no interface number 0 [ 541.017578][ T8895] usb 4-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 541.030478][ T8895] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.071814][ T8895] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 541.089526][ T8895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.108516][ T8895] usb 4-1: Product: syz [ 541.112925][ T8895] usb 4-1: Manufacturer: syz [ 541.117544][ T8895] usb 4-1: SerialNumber: syz [ 541.149054][ T8895] usb 4-1: config 0 descriptor?? [ 541.492202][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.515444][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.929045][T10259] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 543.638415][ T8895] usb 4-1: USB disconnect, device number 14 [ 544.951640][T10277] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.143590][T10267] raw_sendmsg: syz.3.1324 forgot to set AF_INET. Fix it! [ 545.204222][ T5873] libceph: connect (1)[c::]:6789 error -22 [ 545.228730][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 545.248118][T10267] ceph: No mds server is up or the cluster is laggy [ 545.248552][ T5873] libceph: connect (1)[c::]:6789 error -22 [ 545.294187][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 545.355936][T10277] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.464632][T10277] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.630604][T10277] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.865997][T10277] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.888358][T10277] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.929209][T10277] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.956938][T10277] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.513326][T10305] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 548.114614][ T5086] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 548.125163][ T5086] CPU: 0 PID: 5086 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 548.132729][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.142774][ T5086] Workqueue: hci3 hci_rx_work [ 548.147541][ T5086] Call Trace: [ 548.150808][ T5086] [ 548.153725][ T5086] dump_stack_lvl+0x18c/0x250 [ 548.158443][ T5086] ? show_regs_print_info+0x20/0x20 [ 548.163631][ T5086] ? load_image+0x420/0x420 [ 548.168153][ T5086] sysfs_create_dir_ns+0x26e/0x2a0 [ 548.173295][ T5086] ? __lock_acquire+0x7d80/0x7d80 [ 548.178309][ T5086] ? sysfs_warn_dup+0xa0/0xa0 [ 548.182975][ T5086] ? do_raw_spin_unlock+0x121/0x230 [ 548.188172][ T5086] kobject_add_internal+0x617/0xc90 [ 548.193428][ T5086] kobject_add+0x164/0x240 [ 548.197841][ T5086] ? kobject_init+0x1d0/0x1d0 [ 548.202539][ T5086] ? get_device_parent+0x366/0x390 [ 548.207673][ T5086] device_add+0x3fa/0xc40 [ 548.212008][ T5086] hci_conn_add_sysfs+0xd5/0x1e0 [ 548.217032][ T5086] le_conn_complete_evt+0xe9f/0x1480 [ 548.222321][ T5086] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 548.228561][ T5086] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 548.234258][ T5086] ? mutex_unlock+0x10/0x10 [ 548.238770][ T5086] ? skb_pull_data+0xf0/0x1f0 [ 548.243536][ T5086] hci_le_conn_complete_evt+0x187/0x440 [ 548.249108][ T5086] ? hci_remote_host_features_evt+0x150/0x150 [ 548.255170][ T5086] hci_event_packet+0x7b4/0x1280 [ 548.260114][ T5086] ? __lock_acquire+0x7d80/0x7d80 [ 548.265148][ T5086] ? lock_chain_count+0x20/0x20 [ 548.270009][ T5086] ? bis_list+0x290/0x290 [ 548.274332][ T5086] ? lockdep_hardirqs_on+0x98/0x150 [ 548.279528][ T5086] ? hci_send_to_monitor+0xd7/0x4f0 [ 548.284723][ T5086] hci_rx_work+0x43a/0xd60 [ 548.289135][ T5086] ? process_scheduled_works+0x975/0x1600 [ 548.294847][ T5086] process_scheduled_works+0xa60/0x1600 [ 548.300402][ T5086] ? worker_attach_to_pool+0x370/0x370 [ 548.305856][ T5086] ? assign_work+0x3cc/0x5d0 [ 548.310441][ T5086] worker_thread+0xa5e/0xfe0 [ 548.315034][ T5086] ? _raw_spin_unlock+0x40/0x40 [ 548.319874][ T5086] ? __kthread_parkme+0x71/0x1c0 [ 548.324805][ T5086] kthread+0x2fa/0x390 [ 548.328860][ T5086] ? pr_cont_work+0x550/0x550 [ 548.333526][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 548.338114][ T5086] ret_from_fork+0x48/0x80 [ 548.342532][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 548.347122][ T5086] ret_from_fork_asm+0x11/0x20 [ 548.351942][ T5086] [ 548.356594][ T5086] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 548.370600][ T5086] Bluetooth: hci3: failed to register connection device [ 550.567445][T10314] Bluetooth: hci3: command 0x0406 tx timeout [ 551.117797][T10343] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 552.918686][ T7007] Bluetooth: hci3: command 0x0406 tx timeout [ 554.925474][T10386] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 555.164913][T10390] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.173892][T10390] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.182125][T10390] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.190297][T10390] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.222746][T10390] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.231156][T10390] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.239564][T10390] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.248218][T10390] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.734767][T10392] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.742991][T10392] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.751305][T10392] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.759507][T10392] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.807248][T10392] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.815795][T10392] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.824731][T10392] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.833247][T10392] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.229212][ T8895] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 557.435020][ T8895] usb 4-1: Using ep0 maxpacket: 32 [ 557.452701][ T8895] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 557.464832][ T8895] usb 4-1: config 0 has no interface number 0 [ 557.477199][ T8895] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 557.532995][ T8895] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 557.564195][ T8895] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 557.585715][ T8895] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 557.596184][ T8895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.617534][ T8895] usb 4-1: Product: syz [ 557.866743][ T8895] usb 4-1: Manufacturer: syz [ 558.896047][ T8895] usb 4-1: SerialNumber: syz [ 559.068938][ T8895] usb 4-1: config 0 descriptor?? [ 559.111753][T10404] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 559.197575][ T8895] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input9 [ 559.536789][ T5806] usb 4-1: USB disconnect, device number 15 [ 564.066206][ T28] audit: type=1326 audit(1781958678.240:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.1.1393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54099ce59 code=0x7ffc0000 [ 564.122161][ T28] audit: type=1326 audit(1781958678.240:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.1.1393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54099ce59 code=0x7ffc0000 [ 564.124794][T10501] fuse: Unknown parameter '‘Y”3}(NĽbšYSG‰íè[ÂéΛ'©}”yU' [ 564.172981][ T28] audit: type=1326 audit(1781958678.249:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.1.1393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54099ce59 code=0x7ffc0000 [ 564.230834][ T28] audit: type=1326 audit(1781958678.249:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.1.1393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff54099ce59 code=0x7ffc0000 [ 564.284283][T10506] fuse: Bad value for 'group_id' [ 564.296105][ T28] audit: type=1326 audit(1781958678.249:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.1.1393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54099ce59 code=0x7ffc0000 [ 564.335941][ T28] audit: type=1326 audit(1781958678.249:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.1.1393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54099ce59 code=0x7ffc0000 [ 564.371528][ T28] audit: type=1326 audit(1781958678.249:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.1.1393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54099ce59 code=0x7ffc0000 [ 564.398817][ T28] audit: type=1326 audit(1781958678.249:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.1.1393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7ff54099ce59 code=0x7ffc0000 [ 564.423578][ T28] audit: type=1326 audit(1781958678.249:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.1.1393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54099ce59 code=0x7ffc0000 [ 564.490197][ T28] audit: type=1326 audit(1781958678.249:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.1.1393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54099ce59 code=0x7ffc0000 [ 566.725134][T10545] fuse: Bad value for 'group_id' [ 567.638934][T10549] lo speed is unknown, defaulting to 1000 [ 568.020432][T10558] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 570.620493][T10576] fuse: Bad value for 'group_id' [ 576.507304][T10638] syzkaller0: entered promiscuous mode [ 576.530949][T10638] syzkaller0: entered allmulticast mode [ 576.921623][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 577.170519][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 577.186379][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 49212, setting to 1024 [ 577.199098][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 577.344040][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 577.370753][ T23] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 577.380767][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.392237][ T23] usb 2-1: Product: syz [ 577.396546][ T23] usb 2-1: Manufacturer: syz [ 577.404450][ T23] usb 2-1: SerialNumber: syz [ 577.441998][T10644] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 577.734916][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 577.741969][ T23] usb 2-1: MIDIStreaming interface descriptor not found [ 577.881638][ T23] usb 2-1: USB disconnect, device number 9 [ 578.017799][T10684] udevd[10684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.932405][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1455'. [ 579.983071][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1455'. [ 580.022887][T10708] netlink: 'syz.1.1455': attribute type 2 has an invalid length. [ 580.062598][T10708] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 581.277924][T10751] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 593.284080][T10981] netlink: 'syz.1.1527': attribute type 64 has an invalid length. [ 593.841086][ T5873] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 594.037877][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.057441][ T5873] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 594.082517][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.116533][ T5873] usb 1-1: config 0 descriptor?? [ 594.383151][ T5873] usbhid 1-1:0.0: can't add hid device: -71 [ 594.389222][ T5873] usbhid: probe of 1-1:0.0 failed with error -71 [ 594.404492][T11006] binder: 11005:11006 unknown command 0 [ 594.410111][T11006] binder: 11005:11006 ioctl c0306201 200000000080 returned -22 [ 594.429870][ T5873] usb 1-1: USB disconnect, device number 7 [ 594.508079][T11007] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.1528'. [ 595.303297][ T5873] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 595.333626][T11026] comedi comedi3: pcl816: a I/O base address must be specified [ 595.662387][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.675865][ T5873] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 595.700881][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.966846][ T5873] usb 1-1: config 0 descriptor?? [ 596.349515][T11035] binder: 11033:11035 unknown command 0 [ 596.359015][T11035] binder: 11033:11035 ioctl c0306201 200000000080 returned -22 [ 596.603218][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 596.830500][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 596.843728][ T23] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 596.851813][ T23] usb 3-1: can't read configurations, error -61 [ 596.878781][T11034] tipc: Enabling of bearer rejected, failed to enable media [ 597.016573][ T5873] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 597.025395][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 597.026470][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.052410][ T5873] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 597.078682][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.253988][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 597.265835][ T23] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 597.275625][ T23] usb 3-1: can't read configurations, error -61 [ 597.284018][ T23] usb usb3-port1: attempt power cycle [ 597.508480][ T5809] usb 1-1: USB disconnect, device number 8 [ 597.508489][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 597.530648][T11057] netlink: 'syz.1.1546': attribute type 6 has an invalid length. [ 597.538571][T11057] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1546'. [ 597.760954][T11058] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.1544'. [ 597.762359][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 597.807474][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 597.819339][ T23] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 597.859515][ T23] usb 3-1: can't read configurations, error -61 [ 598.054406][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 598.120572][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 598.132849][ T23] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 598.141463][ T23] usb 3-1: can't read configurations, error -61 [ 598.150276][ T23] usb usb3-port1: unable to enumerate USB device [ 599.453596][ T970] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 599.700854][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 599.745687][ T970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.756786][ T970] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.768005][ T970] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.781067][ T970] usb 3-1: config 0 interface 0 has no altsetting 0 [ 599.788677][ T970] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 599.797794][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.842392][ T970] usb 3-1: config 0 descriptor?? [ 600.390374][ T970] usbhid 3-1:0.0: can't add hid device: -71 [ 600.397286][ T970] usbhid: probe of 3-1:0.0 failed with error -71 [ 600.420903][ T970] usb 3-1: USB disconnect, device number 13 [ 600.501656][T11099] netlink: 'syz.3.1557': attribute type 6 has an invalid length. [ 600.509689][T11099] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1557'. [ 601.092999][T11107] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1560'. [ 601.119136][T11109] input: syz1 as /devices/virtual/input/input11 [ 602.182817][T11118] comedi: valid board names for 8255 driver are: [ 602.189202][T11118] 8255 [ 602.191964][T11118] comedi: valid board names for vmk80xx driver are: [ 602.198607][T11118] vmk80xx [ 602.201641][T11118] comedi: valid board names for usbduxsigma driver are: [ 602.208683][T11118] usbduxsigma [ 602.212085][T11118] comedi: valid board names for usbduxfast driver are: [ 602.219016][T11118] usbduxfast [ 602.222323][T11118] comedi: valid board names for usbdux driver are: [ 602.228985][T11118] usbdux [ 602.231957][T11118] comedi: valid board names for ni6501 driver are: [ 602.238565][T11118] ni6501 [ 602.241527][T11118] comedi: valid board names for dt9812 driver are: [ 602.248182][T11118] dt9812 [ 602.251132][T11118] comedi: valid board names for ni_labpc_cs driver are: [ 602.258108][T11118] ni_labpc_cs [ 602.261479][T11118] comedi: valid board names for ni_daq_700 driver are: [ 602.268405][T11118] ni_daq_700 [ 602.271904][T11118] comedi: valid board names for labpc_pci driver are: [ 602.279090][T11118] labpc_pci [ 602.282300][T11118] comedi: valid board names for adl_pci9118 driver are: [ 602.289244][T11118] pci9118dg [ 602.292466][T11118] pci9118hg [ 602.296034][T11118] pci9118hr [ 602.299216][T11118] comedi: valid board names for 8255_pci driver are: [ 602.305939][T11118] 8255_pci [ 602.309032][T11118] comedi: valid board names for s526 driver are: [ 602.315379][T11118] s526 [ 602.318126][T11118] comedi: valid board names for multiq3 driver are: [ 602.324724][T11118] multiq3 [ 602.327734][T11118] comedi: valid board names for pcmuio driver are: [ 602.334253][T11118] pcmuio48 [ 602.337342][T11118] pcmuio96 [ 602.340429][T11118] comedi: valid board names for pcmmio driver are: [ 602.346946][T11118] pcmmio [ 602.349864][T11118] comedi: valid board names for pcmda12 driver are: [ 602.356468][T11118] pcmda12 [ 602.359475][T11118] comedi: valid board names for pcmad driver are: [ 602.365894][T11118] pcmad12 [ 602.368900][T11118] pcmad16 [ 602.371902][T11118] comedi: valid board names for ni_labpc driver are: [ 602.378595][T11118] lab-pc-1200 [ 602.381948][T11118] lab-pc-1200ai [ 602.385470][T11118] lab-pc+ [ 602.391195][T11118] comedi: valid board names for atmio16 driver are: [ 602.397798][T11118] atmio16 [ 602.400863][T11118] atmio16d [ 602.404605][T11118] comedi: valid board names for ni_at_ao driver are: [ 602.411306][T11118] at-ao-6 [ 602.414314][T11118] at-ao-10 [ 602.417409][T11118] comedi: valid board names for ni_at_a2150 driver are: [ 602.424359][T11118] ni_at_a2150 [ 602.427712][T11118] comedi: valid board names for adq12b driver are: [ 602.434221][T11118] adq12b [ 602.437138][T11118] comedi: valid board names for mpc624 driver are: [ 602.443653][T11118] mpc624 [ 602.446574][T11118] comedi: valid board names for c6xdigio driver are: [ 602.453248][T11118] c6xdigio [ 602.456341][T11118] comedi: valid board names for aio_iiro_16 driver are: [ 602.463289][T11118] aio_iiro_16 [ 602.466642][T11118] comedi: valid board names for aio_aio12_8 driver are: [ 602.473561][T11118] aio_aio12_8 [ 602.476964][T11118] aio_ai12_8 [ 602.480232][T11118] aio_ao12_4 [ 602.483494][T11118] comedi: valid board names for fl512 driver are: [ 602.489927][T11118] fl512 [ 602.492760][T11118] comedi: valid board names for dmm32at driver are: [ 602.499351][T11118] dmm32at [ 602.502357][T11118] comedi: valid board names for dt282x driver are: [ 602.508872][T11118] dt2821 [ 602.511796][T11118] dt2821-f [ 602.515538][T11118] dt2821-g [ 602.518662][T11118] dt2823 [ 602.521581][T11118] dt2824-pgh [ 602.524843][T11118] dt2824-pgl [ 602.528139][T11118] dt2825 [ 602.531055][T11118] dt2827 [ 602.533969][T11118] dt2828 [ 602.536884][T11118] dt2829 [ 602.539836][T11118] dt21-ez [ 602.542839][T11118] dt23-ez [ 602.545838][T11118] dt24-ez [ 602.548847][T11118] dt24-ez-pgl [ 602.552237][T11118] comedi: valid board names for dt2817 driver are: [ 602.558715][T11118] dt2817 [ 602.561654][T11118] comedi: valid board names for dt2815 driver are: [ 602.568131][T11118] dt2815 [ 602.571053][T11118] comedi: valid board names for dt2814 driver are: [ 602.577568][T11118] dt2814 [ 602.580483][T11118] comedi: valid board names for dt2811 driver are: [ 602.586983][T11118] dt2811-pgh [ 602.590249][T11118] dt2811-pgl [ 602.593583][T11118] comedi: valid board names for dt2801 driver are: [ 602.600074][T11118] dt2801 [ 602.603000][T11118] comedi: valid board names for das6402 driver are: [ 602.609601][T11118] das6402-12 [ 602.612866][T11118] das6402-16 [ 602.616159][T11118] comedi: valid board names for das1800 driver are: [ 602.622725][T11118] das-1701st [ 602.626503][T11118] das-1701st-da [ 602.630039][T11118] das-1702st [ 602.633304][T11118] das-1702st-da [ 602.636864][T11118] das-1702hr [ 602.640153][T11118] das-1702hr-da [ 602.643958][T11118] das-1701ao [ 602.647318][T11118] das-1702ao [ 602.650592][T11118] das-1801st [ 602.653855][T11118] das-1801st-da [ 602.657386][T11118] das-1802st [ 602.660688][T11118] das-1802st-da [ 602.664212][T11118] das-1802hr [ 602.667473][T11118] das-1802hr-da [ 602.671035][T11118] das-1801hc [ 602.674301][T11118] das-1802hc [ 602.677562][T11118] das-1801ao [ 602.680858][T11118] das-1802ao [ 602.684124][T11118] comedi: valid board names for das800 driver are: [ 602.690626][T11118] das-800 [ 602.693631][T11118] cio-das800 [ 602.696893][T11118] das-801 [ 602.699896][T11118] cio-das801 [ 602.703194][T11118] das-802 [ 602.706196][T11118] cio-das802 [ 602.709456][T11118] cio-das802/16 [ 602.713039][T11118] comedi: valid board names for isa-das08 driver are: [ 602.719780][T11118] isa-das08 [ 602.722992][T11118] das08-pgm [ 602.726170][T11118] das08-pgh [ 602.729347][T11118] das08-pgl [ 602.732544][T11118] das08-aoh [ 602.735917][T11118] das08-aol [ 602.739470][T11118] das08-aom [ 602.742651][T11118] das08/jr-ao [ 602.746040][T11118] das08jr-16-ao [ 602.749564][T11118] pc104-das08 [ 602.752912][T11118] das08jr/16 [ 602.756204][T11118] comedi: valid board names for das16m1 driver are: [ 602.762769][T11118] das16m1 [ 602.765779][T11118] comedi: valid board names for dac02 driver are: [ 602.772206][T11118] dac02 [ 602.775040][T11118] comedi: valid board names for rti802 driver are: [ 602.781549][T11118] rti802 [ 602.784469][T11118] comedi: valid board names for rti800 driver are: [ 602.790983][T11118] rti800 [ 602.793900][T11118] rti815 [ 602.796814][T11118] comedi: valid board names for pcm3724 driver are: [ 602.803421][T11118] pcm3724 [ 602.806425][T11118] comedi: valid board names for pcl818 driver are: [ 602.812933][T11118] pcl818l [ 602.815937][T11118] pcl818h [ 602.818937][T11118] pcl818hd [ 602.822051][T11118] pcl818hg [ 602.825142][T11118] pcl818 [ 602.828055][T11118] pcl718 [ 602.830975][T11118] pcm3718 [ 602.834019][T11118] comedi: valid board names for pcl816 driver are: [ 602.840498][T11118] pcl816 [ 602.843446][T11118] pcl814b [ 602.846449][T11118] comedi: valid board names for pcl812 driver are: [ 602.853320][T11118] pcl812 [ 602.856240][T11118] pcl812pg [ 602.859329][T11118] acl8112pg [ 602.862508][T11118] acl8112dg [ 602.898332][T11118] acl8112hg [ 602.901616][T11118] a821pgl [ 602.904674][T11118] a821pglnda [ 602.908034][T11118] a821pgh [ 602.911068][T11118] a822pgl [ 602.914098][T11118] a822pgh [ 602.917135][T11118] a823pgl [ 602.920229][T11118] a823pgh [ 602.923267][T11118] pcl813 [ 602.926212][T11118] pcl813b [ 602.929287][T11118] acl8113 [ 602.932326][T11118] iso813 [ 602.935277][T11118] acl8216 [ 602.938314][T11118] a826pg [ 602.941329][T11118] comedi: valid board names for pcl730 driver are: [ 602.947826][T11118] pcl730 [ 602.950798][T11118] iso730 [ 602.953730][T11118] acl7130 [ 602.956733][T11118] pcm3730 [ 602.960123][T11118] pcl725 [ 602.963085][T11118] p8r8dio [ 602.966088][T11118] acl7225b [ 602.969179][T11118] p16r16dio [ 602.972395][T11118] pcl733 [ 602.975315][T11118] pcl734 [ 602.978232][T11118] opmm-1616-xt [ 602.981669][T11118] pearl-mm-p [ 602.985024][T11118] ir104-pbf [ 602.988209][T11118] comedi: valid board names for pcl726 driver are: [ 602.994792][T11118] pcl726 [ 602.997710][T11118] pcl727 [ 603.000629][T11118] pcl728 [ 603.003545][T11118] acl6126 [ 603.006626][T11118] acl6128 [ 603.009630][T11118] comedi: valid board names for pcl724 driver are: [ 603.016139][T11118] pcl724 [ 603.019058][T11118] pcl722 [ 603.021975][T11118] pcl731 [ 603.024892][T11118] acl7122 [ 603.027934][T11118] acl7124 [ 603.030940][T11118] pet48dio [ 603.034032][T11118] pcmio48 [ 603.037079][T11118] onyx-mm-dio [ 603.040433][T11118] comedi: valid board names for pcl711 driver are: [ 603.046915][T11118] pcl711 [ 603.049881][T11118] pcl711b [ 603.052885][T11118] acl8112hg [ 603.056065][T11118] acl8112dg [ 603.059272][T11118] comedi: valid board names for amplc_pc263 driver are: [ 603.066187][T11118] pc263 [ 603.069026][T11118] comedi: valid board names for amplc_pc236 driver are: [ 603.076358][T11118] pc36at [ 603.079308][T11118] comedi: valid board names for amplc_dio200 driver are: [ 603.086386][T11118] pc212e [ 603.089345][T11118] pc214e [ 603.092309][T11118] pc215e [ 603.095226][T11118] pc218e [ 603.098145][T11118] pc272e [ 603.101061][T11118] comedi: valid board names for comedi_parport driver are: [ 603.108273][T11118] comedi_parport [ 603.111890][T11118] comedi: valid board names for comedi_test driver are: [ 603.118857][T11118] comedi_test [ 603.122222][T11118] comedi: valid board names for comedi_bond driver are: [ 603.129165][T11118] comedi_bond [ 608.409779][ T5809] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 608.680652][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 608.726055][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 608.727331][ T5809] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 608.743865][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.752281][ T5809] usb 3-1: Product: syz [ 608.756660][ T5809] usb 3-1: Manufacturer: syz [ 608.761394][ T5809] usb 3-1: SerialNumber: syz [ 608.783661][ T5809] usb 3-1: config 0 descriptor?? [ 608.857936][ T5809] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 608.981712][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 609.003076][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 609.079947][ T5809] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 609.080983][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 609.089434][ T5809] visor: probe of 3-1:0.0 failed with error -5 [ 609.102142][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.273285][T11147] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 609.284224][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 610.084358][ T5809] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 610.127555][ T23] usb 3-1: USB disconnect, device number 14 [ 610.294578][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 610.314486][ T5809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.325529][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.340103][ T5809] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 610.454740][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.536174][ T5809] usb 4-1: config 0 descriptor?? [ 610.562989][ T5809] hub 4-1:0.0: bad descriptor, ignoring hub [ 610.569519][ T5809] hub: probe of 4-1:0.0 failed with error -5 [ 610.589049][ T5809] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 610.813274][ T5809] usb 2-1: USB disconnect, device number 10 [ 613.874190][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 613.874298][ T28] audit: type=1326 audit(1781958723.901:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.0.1583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbdad9ce59 code=0x0 [ 614.198551][ T9] usb 4-1: USB disconnect, device number 16 [ 615.541523][ T23] kernel read not supported for file /dsp (pid: 23 comm: kworker/1:0) [ 615.971185][T11220] syzkaller0: entered promiscuous mode [ 615.983870][T11220] syzkaller0: entered allmulticast mode [ 619.660438][T11256] xt_l2tp: v2 sid > 0xffff: 117440512 [ 630.484408][T11356] lo speed is unknown, defaulting to 1000 [ 630.788363][ T5156] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 630.986356][ T5156] usb 2-1: unable to get BOS descriptor or descriptor too short [ 630.996879][ T5156] usb 2-1: not running at top speed; connect to a high speed hub [ 631.006051][ T5156] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 631.014300][ T5156] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 631.039512][ T5156] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 631.055998][ T5156] usb 2-1: config 14 has no interface number 0 [ 631.065945][ T5156] usb 2-1: config 14 has no interface number 1 [ 631.072503][ T5156] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 631.094474][ T5156] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 631.105744][ T5156] usb 2-1: config 14 interface 57 has no altsetting 0 [ 631.112575][ T5156] usb 2-1: config 14 interface 228 has no altsetting 0 [ 631.149759][ T5156] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 631.171381][ T5156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.182127][ T5156] usb 2-1: Product: syz [ 631.186498][ T5156] usb 2-1: Manufacturer: syz [ 631.191765][ T5156] usb 2-1: SerialNumber: syz [ 631.409341][T11380] netlink: 'syz.2.1639': attribute type 6 has an invalid length. [ 631.417349][T11380] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1639'. [ 631.687222][ T5156] legousbtower 2-1:14.57: interrupt endpoints not found [ 631.916829][ T5156] legousbtower 2-1:14.228: interrupt endpoints not found [ 633.571324][T11414] netlink: 'syz.0.1649': attribute type 6 has an invalid length. [ 633.580117][T11414] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1649'. [ 634.272626][ T9] usb 2-1: USB disconnect, device number 11 [ 635.804311][T11446] netlink: 'syz.2.1658': attribute type 6 has an invalid length. [ 635.812103][T11446] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1658'. [ 636.540118][T11453] netlink: 'syz.2.1661': attribute type 1 has an invalid length. [ 636.562184][T11453] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1661'. [ 636.583493][T11453] NCSI netlink: No device for ifindex 0 [ 637.872007][T11474] netlink: 'syz.1.1669': attribute type 6 has an invalid length. [ 637.880030][T11474] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1669'. [ 639.341079][T11493] syzkaller0: entered promiscuous mode [ 639.356485][T11493] syzkaller0: entered allmulticast mode [ 640.954994][T11514] netlink: 'syz.3.1684': attribute type 6 has an invalid length. [ 640.962878][T11514] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1684'. [ 641.661115][T11525] syzkaller0: entered promiscuous mode [ 641.717430][T11525] syzkaller0: entered allmulticast mode [ 644.881136][T11559] netlink: 'syz.2.1699': attribute type 6 has an invalid length. [ 644.890013][T11559] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1699'. [ 650.629295][T11623] xt_l2tp: v2 sid > 0xffff: 117440512 [ 654.304480][ T5156] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 655.099487][ T5156] usb 2-1: Using ep0 maxpacket: 32 [ 655.107460][ T5156] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.142972][ T5156] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 655.157233][ T5156] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 655.168963][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.188087][ T5156] usb 2-1: config 0 descriptor?? [ 655.219938][ T5156] hub 2-1:0.0: bad descriptor, ignoring hub [ 655.234696][ T5156] hub: probe of 2-1:0.0 failed with error -5 [ 655.253734][ T5156] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 656.355703][T11710] overlayfs: failed to clone upperpath [ 656.395819][T11710] overlayfs: failed to clone upperpath [ 657.944332][ T9] usb 2-1: USB disconnect, device number 12 [ 660.765105][T11761] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 662.702466][T11764] netlink: 'syz.0.1751': attribute type 64 has an invalid length. [ 663.665218][T11773] binder: 11772:11773 unknown command 0 [ 663.671860][T11774] fuse: Bad value for 'rootmode' [ 663.679717][T11775] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 663.681984][T11773] binder: 11772:11773 ioctl c0306201 200000000080 returned -22 [ 665.210214][T11810] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 665.299279][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 665.407684][ T5873] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 665.533039][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 665.577618][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 665.624617][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 665.675417][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.695128][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 665.760959][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.779719][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 665.833585][ T9] usb 2-1: Product: syz [ 665.873481][ T9] usb 2-1: Manufacturer: syz [ 665.888933][ T5873] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 665.914161][ T9] usb 2-1: SerialNumber: syz [ 665.941290][T11812] fuse: Bad value for 'rootmode' [ 665.957786][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.005243][ T9] usb 2-1: config 0 descriptor?? [ 666.048138][T11799] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 666.087309][ T5873] usb 1-1: config 0 descriptor?? [ 666.100625][T11799] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 666.110519][ T9] usb 2-1: ucan: probing device on interface #0 [ 666.129881][ T5873] hub 1-1:0.0: bad descriptor, ignoring hub [ 666.161882][ T9] usb 2-1: ucan: invalid EP count (1) [ 666.173068][ T5873] hub: probe of 1-1:0.0 failed with error -5 [ 666.218785][ T9] usb 2-1: ucan: probe failed; try to update the device firmware [ 666.241941][ T5873] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 666.367188][T11815] netlink: 'syz.2.1766': attribute type 64 has an invalid length. [ 666.673606][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'. [ 667.462802][T11840] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 668.315696][ T23] usb 2-1: USB disconnect, device number 13 [ 668.741559][ T9] usb 1-1: USB disconnect, device number 9 [ 668.968484][T11858] fuse: Unknown parameter 'use00000000000000000000' [ 668.975719][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 670.369497][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 670.445869][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 670.649662][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 670.664966][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.675524][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 670.689056][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 670.701680][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.737518][ T23] usb 2-1: config 0 descriptor?? [ 670.766165][ T23] hub 2-1:0.0: bad descriptor, ignoring hub [ 670.774597][ T23] hub: probe of 2-1:0.0 failed with error -5 [ 670.797480][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 671.290963][T11913] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 671.299744][T11913] netlink: 'syz.2.1796': attribute type 4 has an invalid length. [ 671.308201][T11913] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1796'. [ 672.046402][T11931] "syz.0.1799" (11931) uses obsolete ecb(arc4) skcipher [ 673.015434][T11944] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1802' sets config #1 [ 674.052194][ T970] usb 2-1: USB disconnect, device number 14 [ 674.095377][T11959] binder: 11957:11959 unknown command 0 [ 674.172577][T11959] binder: 11957:11959 ioctl c0306201 200000000080 returned -22 [ 676.911024][T11994] netlink: 'syz.1.1817': attribute type 64 has an invalid length. [ 678.424859][T12012] comedi comedi3: pcl816: a I/O base address must be specified [ 682.202919][T12056] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 682.462523][T12062] fuse: Unknown parameter 'user_i00000000000000000000' [ 684.526323][T12089] comedi comedi3: pcl816: a I/O base address must be specified [ 684.946151][T12091] xt_l2tp: v2 sid > 0xffff: 117440512 [ 685.264488][T12092] fuse: Unknown parameter 'user_i00000000000000000000' [ 686.467389][T12104] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 688.041118][T12120] fuse: Unknown parameter 'user_id00000000000000000000' [ 688.238453][ T5156] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 688.251513][T12123] comedi comedi3: pcl816: a I/O base address must be specified [ 688.687626][T12129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1865'. [ 688.706419][ T5156] usb 4-1: Using ep0 maxpacket: 32 [ 688.729006][ T5156] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.760682][ T5156] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.773976][ T5156] usb 4-1: config 0 interface 0 has no altsetting 0 [ 688.787150][ T5156] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 688.807277][ T5156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.835282][ T5156] usb 4-1: config 0 descriptor?? [ 689.039245][T12139] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 689.290584][ T5156] usbhid 4-1:0.0: can't add hid device: -71 [ 689.296833][ T5156] usbhid: probe of 4-1:0.0 failed with error -71 [ 689.308391][ T5156] usb 4-1: USB disconnect, device number 17 [ 690.284135][T12152] fuse: Unknown parameter 'user_id00000000000000000000' [ 690.869801][T12150] syzkaller1: entered promiscuous mode [ 690.878178][T12150] syzkaller1: entered allmulticast mode [ 691.298690][T12182] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 692.750109][T12194] comedi comedi3: pcl816: a I/O base address must be specified [ 693.741998][T12208] fuse: Bad value for 'fd' [ 693.811734][T12211] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 694.475567][T12223] "syz.1.1898" (12223) uses obsolete ecb(arc4) skcipher [ 695.504349][T12238] fuse: Bad value for 'fd' [ 695.963768][ T5156] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 696.334628][ T5156] usb 2-1: Using ep0 maxpacket: 32 [ 696.353818][ T5156] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.611898][ T5156] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.635952][ T5156] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 696.646548][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.678699][ T5156] usb 2-1: config 0 descriptor?? [ 696.720235][ T5156] hub 2-1:0.0: bad descriptor, ignoring hub [ 696.735548][ T5156] hub: probe of 2-1:0.0 failed with error -5 [ 696.745653][ T5156] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 696.833541][T12259] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 697.069062][ T5156] usb 2-1: USB disconnect, device number 15 [ 697.221742][T12267] NILFS (nullb0): couldn't find nilfs on the device [ 697.810186][T12269] fuse: Bad value for 'fd' [ 698.039794][T12272] "syz.3.1914" (12272) uses obsolete ecb(arc4) skcipher [ 699.598030][T12294] syzkaller0: entered promiscuous mode [ 699.616929][T12294] syzkaller0: entered allmulticast mode [ 699.841133][T12303] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 699.951081][T12305] fuse: Unknown parameter '0x0000000000000003' [ 700.154651][T12310] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 702.171205][T12317] comedi comedi3: pcl816: a I/O base address must be specified [ 703.867198][T12333] syzkaller0: entered promiscuous mode [ 703.874905][T12333] syzkaller0: entered allmulticast mode [ 704.093954][T12338] fuse: Unknown parameter '0x0000000000000003' [ 704.306654][T12345] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 706.463287][T12364] syzkaller0: entered promiscuous mode [ 706.468783][T12364] syzkaller0: entered allmulticast mode [ 706.515323][T12369] fuse: Unknown parameter '0x0000000000000003' [ 707.055758][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 707.547399][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 707.582806][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 707.633363][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.653481][ T9] usb 4-1: config 0 descriptor?? [ 707.669522][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 708.731488][ T9] gspca_nw80x: reg_r err -110 [ 708.739252][ T9] nw80x: probe of 4-1:0.0 failed with error -110 [ 708.959364][T12400] fuse: Unknown parameter '0x0000000000000003' [ 709.523748][T12380] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.531337][T12380] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.493172][T12380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.813769][T12380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.220947][T12380] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.229755][T12380] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.238279][T12380] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.246648][T12380] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.375363][T12434] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 711.449184][ T56] usb 4-1: USB disconnect, device number 18 [ 711.595691][T12440] fuse: Unknown parameter '0x0000000000000003' [ 711.969831][T12451] capability: warning: `syz.0.1967' uses 32-bit capabilities (legacy support in use) [ 711.981453][T12451] overlayfs: failed to resolve './file0': -2 [ 714.776805][T12463] syzkaller0: entered promiscuous mode [ 714.782592][T12463] syzkaller0: entered allmulticast mode [ 714.961215][T12471] fuse: Unknown parameter '0x0000000000000003' [ 715.111171][T12473] xt_l2tp: v2 sid > 0xffff: 117440512 [ 715.959472][ T5156] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 716.770415][ T56] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 716.805357][ T5156] usb 1-1: Using ep0 maxpacket: 32 [ 716.817172][ T5156] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.924594][ T5156] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 717.024306][ T5156] usb 1-1: config 0 interface 0 has no altsetting 0 [ 717.032038][ T5156] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 717.299519][ T56] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 717.310294][ T5156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.321502][ T56] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.332991][ T56] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.345945][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 717.353684][ T5156] usb 1-1: config 0 descriptor?? [ 717.363177][ T56] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.398758][ T56] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.414382][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 717.433634][ T56] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.442539][ T56] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.454597][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 717.465135][ T56] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.488964][ T56] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.500867][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 717.511998][ T56] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.527291][ T56] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.539021][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 717.559324][ T56] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.571014][ T56] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.582214][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 717.593144][ T56] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.606877][ T56] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.877067][ T5156] usbhid 1-1:0.0: can't add hid device: -71 [ 717.883121][ T5156] usbhid: probe of 1-1:0.0 failed with error -71 [ 717.912624][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 717.921187][ T5156] usb 1-1: USB disconnect, device number 10 [ 717.939566][T12500] syzkaller0: entered promiscuous mode [ 717.950180][ T56] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.960345][T12500] syzkaller0: entered allmulticast mode [ 717.972860][ T56] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.985028][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 717.994765][ T56] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 718.007413][ T56] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 718.015904][ T56] usb 3-1: Product: syz [ 718.020561][ T56] usb 3-1: Manufacturer: syz [ 718.025245][ T56] usb 3-1: SerialNumber: syz [ 718.043198][ T56] usb 3-1: config 0 descriptor?? [ 718.054591][ T56] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 718.174654][T12504] fuse: Unknown parameter 'fd0x0000000000000003' [ 718.287382][ T5156] usb 3-1: USB disconnect, device number 15 [ 718.334328][ T5156] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 718.848214][T12514] xt_l2tp: v2 sid > 0xffff: 117440512 [ 719.250195][T12517] "syz.3.1989" (12517) uses obsolete ecb(arc4) skcipher [ 719.871631][T12533] fuse: Unknown parameter 'fd0x0000000000000003' [ 720.303057][T12546] bridge0: port 3(syz_tun) entered blocking state [ 720.309623][T12546] bridge0: port 3(syz_tun) entered disabled state [ 720.318506][T12546] syz_tun: entered promiscuous mode [ 720.324380][T12546] bridge0: port 3(syz_tun) entered blocking state [ 720.330941][T12546] bridge0: port 3(syz_tun) entered forwarding state [ 721.953816][T12548] "syz.1.1999" (12548) uses obsolete ecb(arc4) skcipher [ 722.274462][T12559] xt_l2tp: v2 sid > 0xffff: 117440512 [ 723.026562][T12537] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.034008][T12537] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.209556][T12572] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 724.916407][T12537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.939268][T12537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.143539][T12537] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.152339][T12537] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.160779][T12537] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.169170][T12537] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.217682][T12562] netlink: 'syz.2.2002': attribute type 64 has an invalid length. [ 725.379441][T12587] "syz.3.2009" (12587) uses obsolete ecb(arc4) skcipher [ 726.083383][T12603] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 729.196699][T12634] netlink: 'syz.3.2023': attribute type 64 has an invalid length. [ 729.495855][T12643] loop3: detected capacity change from 0 to 1024 [ 730.034895][T12665] "syz.3.2033" (12665) uses obsolete ecb(arc4) skcipher [ 730.918237][T12674] comedi: valid board names for 8255 driver are: [ 730.924645][T12674] 8255 [ 730.927433][T12674] comedi: valid board names for vmk80xx driver are: [ 730.934109][T12674] vmk80xx [ 730.937141][T12674] comedi: valid board names for usbduxsigma driver are: [ 730.944133][T12674] usbduxsigma [ 730.947510][T12674] comedi: valid board names for usbduxfast driver are: [ 730.954401][T12674] usbduxfast [ 730.957700][T12674] comedi: valid board names for usbdux driver are: [ 730.964819][T12674] usbdux [ 730.967768][T12674] comedi: valid board names for ni6501 driver are: [ 730.974310][T12674] ni6501 [ 730.977254][T12674] comedi: valid board names for dt9812 driver are: [ 730.983811][T12674] dt9812 [ 730.986758][T12674] comedi: valid board names for ni_labpc_cs driver are: [ 730.993707][T12674] ni_labpc_cs [ 730.997158][T12674] comedi: valid board names for ni_daq_700 driver are: [ 731.004012][T12674] ni_daq_700 [ 731.007355][T12674] comedi: valid board names for labpc_pci driver are: [ 731.014118][T12674] labpc_pci [ 731.017349][T12674] comedi: valid board names for adl_pci9118 driver are: [ 731.024288][T12674] pci9118dg [ 731.027542][T12674] pci9118hg [ 731.030744][T12674] pci9118hr [ 731.033942][T12674] comedi: valid board names for 8255_pci driver are: [ 731.040653][T12674] 8255_pci [ 731.043770][T12674] comedi: valid board names for s526 driver are: [ 731.050174][T12674] s526 [ 731.052949][T12674] comedi: valid board names for multiq3 driver are: [ 731.059608][T12674] multiq3 [ 731.062644][T12674] comedi: valid board names for pcmuio driver are: [ 731.069160][T12674] pcmuio48 [ 731.072957][T12674] pcmuio96 [ 731.076084][T12674] comedi: valid board names for pcmmio driver are: [ 731.082694][T12674] pcmmio [ 731.085642][T12674] comedi: valid board names for pcmda12 driver are: [ 731.092272][T12674] pcmda12 [ 731.095306][T12674] comedi: valid board names for pcmad driver are: [ 731.101731][T12674] pcmad12 [ 731.104818][T12674] pcmad16 [ 731.107847][T12674] comedi: valid board names for ni_labpc driver are: [ 731.114559][T12674] lab-pc-1200 [ 731.117937][T12674] lab-pc-1200ai [ 731.121483][T12674] lab-pc+ [ 731.124575][T12674] comedi: valid board names for atmio16 driver are: [ 731.131172][T12674] atmio16 [ 731.134216][T12674] atmio16d [ 731.137366][T12674] comedi: valid board names for ni_at_ao driver are: [ 731.144050][T12674] at-ao-6 [ 731.147132][T12674] at-ao-10 [ 731.150251][T12674] comedi: valid board names for ni_at_a2150 driver are: [ 731.157492][T12674] ni_at_a2150 [ 731.160871][T12674] comedi: valid board names for adq12b driver are: [ 731.167430][T12674] adq12b [ 731.170386][T12674] comedi: valid board names for mpc624 driver are: [ 731.176894][T12674] mpc624 [ 731.179884][T12674] comedi: valid board names for c6xdigio driver are: [ 731.187122][T12674] c6xdigio [ 731.190317][T12674] comedi: valid board names for aio_iiro_16 driver are: [ 731.197261][T12674] aio_iiro_16 [ 731.200672][T12674] comedi: valid board names for aio_aio12_8 driver are: [ 731.207607][T12674] aio_aio12_8 [ 731.211001][T12674] aio_ai12_8 [ 731.214266][T12674] aio_ao12_4 [ 731.217530][T12674] comedi: valid board names for fl512 driver are: [ 731.223951][T12674] fl512 [ 731.226782][T12674] comedi: valid board names for dmm32at driver are: [ 731.233386][T12674] dmm32at [ 731.236394][T12674] comedi: valid board names for dt282x driver are: [ 731.242880][T12674] dt2821 [ 731.245860][T12674] dt2821-f [ 731.248950][T12674] dt2821-g [ 731.252036][T12674] dt2823 [ 731.255032][T12674] dt2824-pgh [ 731.258326][T12674] dt2824-pgl [ 731.261614][T12674] dt2825 [ 731.264550][T12674] dt2827 [ 731.267493][T12674] dt2828 [ 731.270409][T12674] dt2829 [ 731.273322][T12674] dt21-ez [ 731.276358][T12674] dt23-ez [ 731.279366][T12674] dt24-ez [ 731.282371][T12674] dt24-ez-pgl [ 731.285733][T12674] comedi: valid board names for dt2817 driver are: [ 731.292767][T12674] dt2817 [ 731.295700][T12674] comedi: valid board names for dt2815 driver are: [ 731.302221][T12674] dt2815 [ 731.305155][T12674] comedi: valid board names for dt2814 driver are: [ 731.311676][T12674] dt2814 [ 731.314593][T12674] comedi: valid board names for dt2811 driver are: [ 731.321136][T12674] dt2811-pgh [ 731.324404][T12674] dt2811-pgl [ 731.327667][T12674] comedi: valid board names for dt2801 driver are: [ 731.334171][T12674] dt2801 [ 731.337090][T12674] comedi: valid board names for das6402 driver are: [ 731.343697][T12674] das6402-12 [ 731.346964][T12674] das6402-16 [ 731.350227][T12674] comedi: valid board names for das1800 driver are: [ 731.356824][T12674] das-1701st [ 731.360089][T12674] das-1701st-da [ 731.363645][T12674] das-1702st [ 731.366913][T12674] das-1702st-da [ 731.370435][T12674] das-1702hr [ 731.373722][T12674] das-1702hr-da [ 731.377249][T12674] das-1701ao [ 731.380512][T12674] das-1702ao [ 731.383783][T12674] das-1801st [ 731.387092][T12674] das-1801st-da [ 731.390616][T12674] das-1802st [ 731.393879][T12674] das-1802st-da [ 731.397428][T12674] das-1802hr [ 731.400691][T12674] das-1802hr-da [ 731.404496][T12674] das-1801hc [ 731.407799][T12674] das-1802hc [ 731.411065][T12674] das-1801ao [ 731.414325][T12674] das-1802ao [ 731.417610][T12674] comedi: valid board names for das800 driver are: [ 731.424089][T12674] das-800 [ 731.427099][T12674] cio-das800 [ 731.430398][T12674] das-801 [ 731.433403][T12674] cio-das801 [ 731.436667][T12674] das-802 [ 731.439692][T12674] cio-das802 [ 731.442959][T12674] cio-das802/16 [ 731.446482][T12674] comedi: valid board names for isa-das08 driver are: [ 731.453263][T12674] isa-das08 [ 731.456442][T12674] das08-pgm [ 731.459625][T12674] das08-pgh [ 731.462823][T12674] das08-pgl [ 731.465998][T12674] das08-aoh [ 731.469170][T12674] das08-aol [ 731.472376][T12674] das08-aom [ 731.475553][T12674] das08/jr-ao [ 731.478907][T12674] das08jr-16-ao [ 731.482457][T12674] pc104-das08 [ 731.485809][T12674] das08jr/16 [ 731.489068][T12674] comedi: valid board names for das16m1 driver are: [ 731.495662][T12674] das16m1 [ 731.498664][T12674] comedi: valid board names for dac02 driver are: [ 731.505136][T12674] dac02 [ 731.507964][T12674] comedi: valid board names for rti802 driver are: [ 731.514771][T12674] rti802 [ 731.517695][T12674] comedi: valid board names for rti800 driver are: [ 731.524179][T12674] rti800 [ 731.527125][T12674] rti815 [ 731.530039][T12674] comedi: valid board names for pcm3724 driver are: [ 731.536633][T12674] pcm3724 [ 731.539639][T12674] comedi: valid board names for pcl818 driver are: [ 731.546127][T12674] pcl818l [ 731.549155][T12674] pcl818h [ 731.552159][T12674] pcl818hd [ 731.555248][T12674] pcl818hg [ 731.558370][T12674] pcl818 [ 731.561288][T12674] pcl718 [ 731.564202][T12674] pcm3718 [ 731.567202][T12674] comedi: valid board names for pcl816 driver are: [ 731.573707][T12674] pcl816 [ 731.576622][T12674] pcl814b [ 731.579662][T12674] comedi: valid board names for pcl812 driver are: [ 731.586141][T12674] pcl812 [ 731.589066][T12674] pcl812pg [ 731.592212][T12674] acl8112pg [ 731.595392][T12674] acl8112dg [ 731.598565][T12674] acl8112hg [ 731.601774][T12674] a821pgl [ 731.604777][T12674] a821pglnda [ 731.608038][T12674] a821pgh [ 731.611045][T12674] a822pgl [ 731.614070][T12674] a822pgh [ 731.617071][T12674] a823pgl [ 731.620070][T12674] a823pgh [ 731.623104][T12674] pcl813 [ 731.626320][T12674] pcl813b [ 731.629339][T12674] acl8113 [ 731.632351][T12674] iso813 [ 731.635319][T12674] acl8216 [ 731.638330][T12674] a826pg [ 731.641249][T12674] comedi: valid board names for pcl730 driver are: [ 731.647790][T12674] pcl730 [ 731.650713][T12674] iso730 [ 731.653631][T12674] acl7130 [ 731.656661][T12674] pcm3730 [ 731.659666][T12674] pcl725 [ 731.662583][T12674] p8r8dio [ 731.665646][T12674] acl7225b [ 731.668738][T12674] p16r16dio [ 731.671913][T12674] pcl733 [ 731.674831][T12674] pcl734 [ 731.677816][T12674] opmm-1616-xt [ 731.681259][T12674] pearl-mm-p [ 731.684523][T12674] ir104-pbf [ 731.797756][T12674] comedi: valid board names for pcl726 driver are: [ 731.804311][T12674] pcl726 [ 731.807546][T12674] pcl727 [ 731.810488][T12674] pcl728 [ 731.813403][T12674] acl6126 [ 731.816409][T12674] acl6128 [ 731.819487][T12674] comedi: valid board names for pcl724 driver are: [ 731.825970][T12674] pcl724 [ 731.828939][T12674] pcl722 [ 731.831857][T12674] pcl731 [ 731.834775][T12674] acl7122 [ 731.837779][T12674] acl7124 [ 731.840833][T12674] pet48dio [ 731.843927][T12674] pcmio48 [ 731.847231][T12674] onyx-mm-dio [ 731.850642][T12674] comedi: valid board names for pcl711 driver are: [ 731.857121][T12674] pcl711 [ 731.860046][T12674] pcl711b [ 731.863095][T12674] acl8112hg [ 731.866273][T12674] acl8112dg [ 731.869448][T12674] comedi: valid board names for amplc_pc263 driver are: [ 731.876405][T12674] pc263 [ 731.879238][T12674] comedi: valid board names for amplc_pc236 driver are: [ 731.886190][T12674] pc36at [ 731.889111][T12674] comedi: valid board names for amplc_dio200 driver are: [ 731.896445][T12674] pc212e [ 731.899410][T12674] pc214e [ 731.902358][T12674] pc215e [ 731.905373][T12674] pc218e [ 731.908321][T12674] pc272e [ 731.911275][T12674] comedi: valid board names for comedi_parport driver are: [ 731.918555][T12674] comedi_parport [ 731.922204][T12674] comedi: valid board names for comedi_test driver are: [ 731.929204][T12674] comedi_test [ 731.932564][T12674] comedi: valid board names for comedi_bond driver are: [ 731.939519][T12674] comedi_bond [ 732.069839][T12672] syz.0.2036: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 732.096662][T12672] CPU: 1 PID: 12672 Comm: syz.0.2036 Not tainted syzkaller #0 [ 732.104172][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 732.114238][T12672] Call Trace: [ 732.117506][T12672] [ 732.120425][T12672] dump_stack_lvl+0x18c/0x250 [ 732.125114][T12672] ? show_regs_print_info+0x20/0x20 [ 732.130295][T12672] ? load_image+0x420/0x420 [ 732.134782][T12672] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 732.141182][T12672] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 732.147669][T12672] warn_alloc+0x246/0x340 [ 732.152019][T12672] ? zone_watermark_ok_safe+0x230/0x230 [ 732.157561][T12672] ? _raw_spin_unlock+0x28/0x40 [ 732.162404][T12672] ? __vb2_queue_alloc+0x78f/0x1410 [ 732.167684][T12672] __vmalloc_node_range+0x661/0x1320 [ 732.172971][T12672] ? free_vm_area+0x50/0x50 [ 732.177467][T12672] vmalloc_user+0x74/0x80 [ 732.181786][T12672] ? vb2_vmalloc_alloc+0xef/0x330 [ 732.186799][T12672] vb2_vmalloc_alloc+0xef/0x330 [ 732.191635][T12672] ? __copy_timestamp+0x1f0/0x1f0 [ 732.196646][T12672] __vb2_queue_alloc+0x78f/0x1410 [ 732.201675][T12672] vb2_core_reqbufs+0x9e8/0x10d0 [ 732.206609][T12672] ? vb2_verify_memory_type+0x570/0x570 [ 732.212145][T12672] ? do_vfs_ioctl+0x156c/0x1cc0 [ 732.217023][T12672] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 732.222388][T12672] __video_do_ioctl+0xa34/0xde0 [ 732.227232][T12672] ? video_ioctl2+0x30/0x30 [ 732.231723][T12672] ? __might_fault+0xc6/0x120 [ 732.236382][T12672] ? __might_fault+0xaa/0x120 [ 732.241047][T12672] video_usercopy+0x889/0x1360 [ 732.245798][T12672] ? video_ioctl2+0x30/0x30 [ 732.250289][T12672] ? v4l_printk_ioctl+0x160/0x160 [ 732.255310][T12672] ? tomoyo_file_ioctl+0x11/0x30 [ 732.260270][T12672] v4l2_ioctl+0x18a/0x1e0 [ 732.264590][T12672] ? v4l2_poll+0x2b0/0x2b0 [ 732.268990][T12672] __se_sys_ioctl+0xfd/0x170 [ 732.273571][T12672] do_syscall_64+0x55/0xb0 [ 732.277972][T12672] ? clear_bhb_loop+0x40/0x90 [ 732.282698][T12672] ? clear_bhb_loop+0x40/0x90 [ 732.287363][T12672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.293286][T12672] RIP: 0033:0x7fbbdad9ce59 [ 732.297693][T12672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.317285][T12672] RSP: 002b:00007fbbdbca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.325681][T12672] RAX: ffffffffffffffda RBX: 00007fbbdb015fa0 RCX: 00007fbbdad9ce59 [ 732.333640][T12672] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 732.341595][T12672] RBP: 00007fbbdae32e6f R08: 0000000000000000 R09: 0000000000000000 [ 732.349551][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.357504][T12672] R13: 00007fbbdb016038 R14: 00007fbbdb015fa0 R15: 00007ffde43e1ed8 [ 732.365469][T12672] [ 732.376077][T12672] Mem-Info: [ 732.401647][T12672] active_anon:10206 inactive_anon:0 isolated_anon:0 [ 732.401647][T12672] active_file:12757 inactive_file:40201 isolated_file:0 [ 732.401647][T12672] unevictable:768 dirty:82 writeback:0 [ 732.401647][T12672] slab_reclaimable:10983 slab_unreclaimable:91911 [ 732.401647][T12672] mapped:24314 shmem:5477 pagetables:899 [ 732.401647][T12672] sec_pagetables:0 bounce:0 [ 732.401647][T12672] kernel_misc_reclaimable:0 [ 732.401647][T12672] free:1335199 free_pcp:12635 free_cma:0 [ 732.454135][T12672] Node 0 active_anon:40824kB inactive_anon:0kB active_file:50964kB inactive_file:160600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97216kB dirty:328kB writeback:0kB shmem:20372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11192kB pagetables:3596kB sec_pagetables:0kB all_unreclaimable? no [ 732.530085][T12672] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 732.569073][T12672] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 732.621463][T12672] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 732.638615][T12672] Node 0 DMA32 free:1431508kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:40784kB inactive_anon:0kB active_file:50964kB inactive_file:159780kB unevictable:1536kB writepending:328kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:31616kB local_pcp:17952kB free_cma:0kB [ 732.711155][T12672] lowmem_reserve[]: 0 0 0 0 0 [ 732.716189][T12672] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 732.752783][T12672] lowmem_reserve[]: 0 0 0 0 0 [ 732.757654][T12672] Node 1 Normal free:3893496kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18884kB local_pcp:8068kB free_cma:0kB [ 732.812346][T12672] lowmem_reserve[]: 0 0 0 0 0 [ 732.831831][T12672] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 732.885828][T12672] Node 0 DMA32: 1760*4kB (UE) 321*8kB (UE) 691*16kB (UME) 371*32kB (UME) 286*64kB (UME) 89*128kB (UME) 44*256kB (UME) 13*512kB (UM) 9*1024kB (UME) 3*2048kB (UM) 326*4096kB (M) = 1430808kB [ 732.943838][T12672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 732.997072][T12672] Node 1 Normal: 254*4kB (UME) 66*8kB (UME) 39*16kB (UME) 116*32kB (UME) 36*64kB (UME) 6*128kB (UE) 0*256kB 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3893496kB [ 733.055002][T12672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 733.083121][T12672] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 733.119957][T12672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 733.130553][T12672] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 733.140322][T12672] 58435 total pagecache pages [ 733.145990][T12672] 0 pages in swap cache [ 733.165941][T12672] Free swap = 124424kB [ 733.179127][T12672] Total swap = 124996kB [ 733.191162][T12672] 2097051 pages RAM [ 733.204431][T12672] 0 pages HighMem/MovableOnly [ 733.216958][T12672] 416931 pages reserved [ 733.228943][T12672] 0 pages cma reserved [ 735.121211][ T5809] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 735.140368][ T56] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 735.365308][ T5809] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 735.374951][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.385942][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.396855][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 735.410079][ T5809] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 735.467678][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.510107][ T5809] usb 2-1: config 0 descriptor?? [ 735.605143][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 735.696614][ T56] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.808164][ T56] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.835869][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 735.850306][ T56] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 735.891706][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.937251][ T56] usb 3-1: config 0 descriptor?? [ 736.031642][ T5809] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 736.046945][ T5809] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 736.122674][ T5809] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 736.556862][ T56] usbhid 3-1:0.0: can't add hid device: -71 [ 736.563218][ T56] usbhid: probe of 3-1:0.0 failed with error -71 [ 736.572144][ T56] usb 3-1: USB disconnect, device number 16 [ 736.659227][ T5156] usb 2-1: USB disconnect, device number 16 [ 737.192015][T12766] netlink: 'syz.0.2063': attribute type 64 has an invalid length. [ 737.534615][T12769] syz_tun: entered allmulticast mode [ 737.552770][T12768] syz_tun: left allmulticast mode [ 739.043775][T12801] NILFS (nullb0): couldn't find nilfs on the device [ 739.540560][ T970] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 739.549759][T12814] netlink: 'syz.1.2075': attribute type 64 has an invalid length. [ 739.674068][T12815] ufs: You didn't specify the type of your ufs filesystem [ 739.674068][T12815] [ 739.674068][T12815] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 739.674068][T12815] [ 739.674068][T12815] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 739.705605][T12815] ufs: ufstype=old is supported read-only [ 739.715551][T12815] ufs: ufs_fill_super(): bad magic number [ 739.995995][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 741.203875][ T970] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.223034][ T970] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 741.236600][ T970] usb 3-1: config 0 interface 0 has no altsetting 0 [ 741.243803][ T970] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 741.255312][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.285904][ T970] usb 3-1: config 0 descriptor?? [ 741.490149][ T5809] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 741.780120][ T970] usbhid 3-1:0.0: can't add hid device: -71 [ 741.786743][ T970] usbhid: probe of 3-1:0.0 failed with error -71 [ 741.806073][ T970] usb 3-1: USB disconnect, device number 17 [ 741.894099][ T5809] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 741.903342][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.932853][ T5809] pegasus 4-1:254.0: Missing or invalid endpoints [ 742.831359][ T5809] usb 4-1: USB disconnect, device number 19 [ 743.033511][T12835] lo speed is unknown, defaulting to 1000 [ 743.438460][T12843] NILFS (nullb0): couldn't find nilfs on the device [ 744.205970][T12847] loop3: detected capacity change from 0 to 2048 [ 744.332957][T12847] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 744.541564][T12854] netlink: 'syz.2.2090': attribute type 64 has an invalid length. [ 744.829377][ T5807] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 745.032184][ T5807] usb 1-1: Using ep0 maxpacket: 32 [ 745.047711][ T5807] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.078823][ T5807] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 745.114414][ T5807] usb 1-1: config 0 interface 0 has no altsetting 0 [ 745.140346][ T5807] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 745.169131][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.222471][ T5807] usb 1-1: config 0 descriptor?? [ 745.858980][T12873] NILFS (nullb0): couldn't find nilfs on the device [ 746.549993][ T5807] usbhid 1-1:0.0: can't add hid device: -71 [ 746.556047][ T5807] usbhid: probe of 1-1:0.0 failed with error -71 [ 746.575124][ T5807] usb 1-1: USB disconnect, device number 11 [ 747.261127][T12886] mmap: syz.0.2102 (12886) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 749.719258][T12892] syz_tun: entered allmulticast mode [ 749.737663][T12891] syz_tun: left allmulticast mode [ 750.361019][T12898] tipc: Enabling of bearer rejected, failed to enable media [ 751.293206][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 751.411325][T12914] "syz.3.2111" (12914) uses obsolete ecb(arc4) skcipher [ 751.499142][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 751.515933][ T9] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.533821][ T9] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 751.551496][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 751.565102][ T9] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 751.577351][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.623085][ T9] usb 1-1: config 0 descriptor?? [ 751.912634][T12922] tipc: Enabling of bearer rejected, failed to enable media [ 752.443634][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 752.449629][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 752.510653][ T9] usb 1-1: USB disconnect, device number 12 [ 753.697492][ T7007] Bluetooth: hci3: command 0x0406 tx timeout [ 753.736960][T12942] "syz.0.2120" (12942) uses obsolete ecb(arc4) skcipher [ 754.398122][T12948] ufs: You didn't specify the type of your ufs filesystem [ 754.398122][T12948] [ 754.398122][T12948] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 754.398122][T12948] [ 754.398122][T12948] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 754.429704][T12948] ufs: ufstype=old is supported read-only [ 754.437466][T12948] ufs: ufs_fill_super(): bad magic number [ 755.305038][T12951] tipc: Enabling of bearer rejected, failed to enable media [ 756.015355][T12965] xt_l2tp: v2 sid > 0xffff: 117440512 [ 756.145774][ T56] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 756.655244][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 756.662907][ T56] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.674023][ T56] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 756.709020][ T56] usb 4-1: config 0 interface 0 has no altsetting 0 [ 756.716357][ T56] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 756.731116][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.749665][ T56] usb 4-1: config 0 descriptor?? [ 756.880081][T12975] "syz.1.2131" (12975) uses obsolete ecb(arc4) skcipher [ 757.198116][ T56] usbhid 4-1:0.0: can't add hid device: -71 [ 757.204283][ T56] usbhid: probe of 4-1:0.0 failed with error -71 [ 757.215712][ T56] usb 4-1: USB disconnect, device number 20 [ 758.365377][T12991] NILFS (nullb0): couldn't find nilfs on the device [ 759.547649][T13005] "syz.1.2140" (13005) uses obsolete ecb(arc4) skcipher [ 760.929859][T13030] NILFS (nullb0): couldn't find nilfs on the device [ 761.966717][T13041] "syz.2.2150" (13041) uses obsolete ecb(arc4) skcipher [ 763.122304][T13050] netlink: 'syz.2.2152': attribute type 64 has an invalid length. [ 765.084342][T13077] xt_l2tp: v2 sid > 0xffff: 117440512 [ 765.531858][T13087] "syz.0.2161" (13087) uses obsolete ecb(arc4) skcipher [ 767.224952][T13097] loop1: detected capacity change from 0 to 1024 [ 767.245897][T13097] EXT4-fs: Ignoring removed orlov option [ 768.158648][T13097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.185325][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.681014][T13127] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 770.497786][T13131] loop2: detected capacity change from 0 to 256 [ 770.529011][T13131] ======================================================= [ 770.529011][T13131] WARNING: The mand mount option has been deprecated and [ 770.529011][T13131] and is ignored by this kernel. Remove the mand [ 770.529011][T13131] option from the mount to silence this warning. [ 770.529011][T13131] ======================================================= [ 771.050597][T13131] FAT-fs (loop2): Directory bread(block 64) failed [ 771.122212][T13131] FAT-fs (loop2): Directory bread(block 65) failed [ 771.129684][T13131] FAT-fs (loop2): Directory bread(block 66) failed [ 771.136420][T13131] FAT-fs (loop2): Directory bread(block 67) failed [ 771.143741][T13131] FAT-fs (loop2): Directory bread(block 68) failed [ 771.150771][T13131] FAT-fs (loop2): Directory bread(block 69) failed [ 771.157642][T13131] FAT-fs (loop2): Directory bread(block 70) failed [ 771.164948][T13131] FAT-fs (loop2): Directory bread(block 71) failed [ 771.172059][T13131] FAT-fs (loop2): Directory bread(block 72) failed [ 771.178818][T13131] FAT-fs (loop2): Directory bread(block 73) failed [ 772.382770][T13153] "syz.2.2179" (13153) uses obsolete ecb(arc4) skcipher [ 772.496314][T13150] kvm: pic: level sensitive irq not supported [ 772.585922][T13142] loop1: detected capacity change from 0 to 32768 [ 772.615099][T13142] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2175 (13142) [ 772.707961][T13142] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 772.718722][T13142] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 772.727624][T13142] BTRFS info (device loop1): using free space tree [ 774.001338][T13180] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 775.064473][T13142] BTRFS error (device loop1): open_ctree failed: -4 [ 775.141747][ T56] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 775.274170][T13083] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (13083) [ 775.357767][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 775.372047][ T56] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.386057][T13199] netlink: 'syz.2.2187': attribute type 64 has an invalid length. [ 775.619974][ T56] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.680528][ T28] audit: type=1400 audit(1781958873.800:188): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 4-1: config 0 interface 0 has no altsetting 0 [ 776.085443][ T56] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 776.105352][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.133014][ T56] usb 4-1: config 0 descriptor?? [ 776.305380][ T5156] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 776.593281][ T56] usbhid 4-1:0.0: can't add hid device: -71 [ 776.610661][ T56] usbhid: probe of 4-1:0.0 failed with error -71 [ 776.634399][ T5156] usb 1-1: device descriptor read/64, error -71 [ 776.646876][ T56] usb 4-1: USB disconnect, device number 21 [ 776.802966][T13215] xt_l2tp: v2 sid > 0xffff: 117440512 [ 776.916527][ T5156] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 777.022024][T13218] loop2: detected capacity change from 0 to 512 [ 777.049607][T13218] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 777.064689][T13218] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 777.080473][ T5156] usb 1-1: device descriptor read/64, error -71 [ 777.123633][T13218] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2192: bg 0: block 441: padding at end of block bitmap is not set [ 777.177648][T13218] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 777.215007][ T5156] usb usb1-port1: attempt power cycle [ 777.220225][T13218] EXT4-fs (loop2): 1 truncate cleaned up [ 777.241654][T13218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.454188][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.664536][ T5156] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 777.729615][T13231] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 779.068721][ T5156] usb 1-1: device descriptor read/8, error -71 [ 780.545022][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 780.908722][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 780.976011][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.213511][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 781.223323][T13249] netlink: 'syz.3.2201': attribute type 11 has an invalid length. [ 781.272222][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2201'. [ 781.285055][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 781.295491][ T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 781.309497][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.350791][ T9] usb 3-1: config 0 descriptor?? [ 781.385112][T13249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.394149][T13249] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.409877][T13249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 781.413438][T13254] loop0: detected capacity change from 0 to 128 [ 781.434403][T13254] EXT4-fs: inline encryption not supported [ 781.440922][T13250] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 781.447905][T13250] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 781.497692][T13254] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 781.514482][T13254] ext4 filesystem being mounted at /566/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 781.538010][T13254] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes [ 781.586470][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 781.599129][ T970] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 781.928851][ T970] usb 2-1: Using ep0 maxpacket: 32 [ 781.943009][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 781.949085][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 781.950866][ T970] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.970311][ T9] usb 3-1: USB disconnect, device number 18 [ 781.971373][ T970] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 782.742765][ T970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 782.754715][ T970] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 782.763928][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.776606][ T970] usb 2-1: config 0 descriptor?? [ 782.845242][T13258] loop3: detected capacity change from 0 to 32768 [ 782.869093][T13258] (syz.3.2205,13258,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 782.934472][T13258] (syz.3.2205,13258,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 783.478219][ T970] usbhid 2-1:0.0: can't add hid device: -71 [ 783.484431][ T970] usbhid: probe of 2-1:0.0 failed with error -71 [ 783.513281][ T970] usb 2-1: USB disconnect, device number 17 [ 783.528239][T13258] JBD2: Ignoring recovery information on journal [ 783.719842][T13258] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 784.332713][ T28] audit: type=1800 audit(1781958882.067:189): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2205" name="file1" dev="loop3" ino=16979 res=0 errno=0 [ 784.957566][T13258] syz.3.2205 (13258) used greatest stack depth: 18200 bytes left [ 784.969601][ T28] audit: type=1800 audit(1781958882.662:190): pid=13285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2205" name="file1" dev="loop3" ino=16979 res=0 errno=0 [ 784.975770][T13278] [ 784.992694][T13278] ====================================================== [ 784.999687][T13278] WARNING: possible circular locking dependency detected [ 785.006687][T13278] syzkaller #0 Not tainted [ 785.011079][T13278] ------------------------------------------------------ [ 785.018075][T13278] syz.3.2205/13278 is trying to acquire lock: [ 785.024120][T13278] ffff88805e346a20 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 785.034756][T13278] [ 785.034756][T13278] but task is already holding lock: [ 785.042101][T13278] ffff88805e346ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360 [ 785.052697][T13278] [ 785.052697][T13278] which lock already depends on the new lock. [ 785.052697][T13278] [ 785.063075][T13278] [ 785.063075][T13278] the existing dependency chain (in reverse order) is: [ 785.072066][T13278] [ 785.072066][T13278] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 785.079861][T13278] down_read+0x46/0x2e0 [ 785.084526][T13278] ocfs2_init_acl+0x30a/0x770 [ 785.089706][T13278] ocfs2_mknod+0x1427/0x2310 [ 785.094797][T13278] ocfs2_create+0x196/0x430 [ 785.099807][T13278] path_openat+0x1705/0x3270 [ 785.104907][T13278] do_filp_open+0x1f2/0x430 [ 785.109908][T13278] do_sys_openat2+0x134/0x1d0 [ 785.115112][T13278] __x64_sys_creat+0x90/0xb0 [ 785.120206][T13278] do_syscall_64+0x55/0xb0 [ 785.125130][T13278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.131533][T13278] [ 785.131533][T13278] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 785.140021][T13278] down_read+0x46/0x2e0 [ 785.144684][T13278] ocfs2_start_trans+0x3a8/0x6f0 [ 785.150123][T13278] ocfs2_modify_bh+0xe4/0x4c0 [ 785.155305][T13278] ocfs2_local_read_info+0x1433/0x17d0 [ 785.161265][T13278] dquot_load_quota_sb+0x734/0xb30 [ 785.166882][T13278] dquot_load_quota_inode+0x2d7/0x5c0 [ 785.172756][T13278] ocfs2_enable_quotas+0x1c4/0x4a0 [ 785.178368][T13278] ocfs2_fill_super+0x4187/0x5030 [ 785.183897][T13278] mount_bdev+0x21c/0x2c0 [ 785.188726][T13278] legacy_get_tree+0xea/0x180 [ 785.193928][T13278] vfs_get_tree+0x8c/0x280 [ 785.198857][T13278] do_new_mount+0x24a/0xa40 [ 785.203873][T13278] __se_sys_mount+0x2e7/0x3d0 [ 785.209064][T13278] do_syscall_64+0x55/0xb0 [ 785.214004][T13278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.220427][T13278] [ 785.220427][T13278] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 785.227880][T13278] lock_release+0x332/0x8c0 [ 785.232896][T13278] up_write+0x2d/0x410 [ 785.237467][T13278] ocfs2_free_alloc_context+0x97/0x1a0 [ 785.243429][T13278] ocfs2_write_begin_nolock+0x43f6/0x4480 [ 785.249675][T13278] ocfs2_dio_wr_get_block+0xba8/0x1820 [ 785.255636][T13278] __blockdev_direct_IO+0x1628/0x32e0 [ 785.261518][T13278] ocfs2_direct_IO+0x235/0x2a0 [ 785.266781][T13278] generic_file_direct_write+0x1c9/0x3e0 [ 785.272913][T13278] __generic_file_write_iter+0x11b/0x230 [ 785.279046][T13278] ocfs2_file_write_iter+0x1724/0x1ef0 [ 785.285010][T13278] do_iter_write+0x747/0xc50 [ 785.290103][T13278] iter_file_splice_write+0x6b6/0xcf0 [ 785.296003][T13278] direct_splice_actor+0xe8/0x130 [ 785.301537][T13278] splice_direct_to_actor+0x30b/0x8e0 [ 785.307414][T13278] do_splice_direct+0x1d5/0x2f0 [ 785.312769][T13278] do_sendfile+0x52b/0xe80 [ 785.317703][T13278] __se_sys_sendfile64+0x145/0x1a0 [ 785.323334][T13278] do_syscall_64+0x55/0xb0 [ 785.328268][T13278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.334678][T13278] [ 785.334678][T13278] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}: [ 785.342481][T13278] __lock_acquire+0x37ef/0x7d80 [ 785.347841][T13278] lock_acquire+0x19e/0x420 [ 785.352847][T13278] down_write+0x97/0x200 [ 785.357611][T13278] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 785.364100][T13278] ocfs2_truncate_file+0xe87/0x1530 [ 785.369807][T13278] ocfs2_setattr+0x15b8/0x1bf0 [ 785.375077][T13278] notify_change+0xb05/0xde0 [ 785.380170][T13278] do_truncate+0x1b0/0x240 [ 785.385103][T13278] path_openat+0x2a7e/0x3270 [ 785.390213][T13278] do_filp_open+0x1f2/0x430 [ 785.395228][T13278] do_sys_openat2+0x134/0x1d0 [ 785.400411][T13278] __x64_sys_openat+0x139/0x160 [ 785.405769][T13278] do_syscall_64+0x55/0xb0 [ 785.410689][T13278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.417094][T13278] [ 785.417094][T13278] other info that might help us debug this: [ 785.417094][T13278] [ 785.427303][T13278] Chain exists of: [ 785.427303][T13278] &oi->ip_alloc_sem --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 785.427303][T13278] [ 785.441553][T13278] Possible unsafe locking scenario: [ 785.441553][T13278] [ 785.448981][T13278] CPU0 CPU1 [ 785.454326][T13278] ---- ---- [ 785.459671][T13278] lock(&oi->ip_xattr_sem); [ 785.464239][T13278] lock(&journal->j_trans_barrier); [ 785.472021][T13278] lock(&oi->ip_xattr_sem); [ 785.479116][T13278] lock(&oi->ip_alloc_sem); [ 785.483685][T13278] [ 785.483685][T13278] *** DEADLOCK *** [ 785.483685][T13278] [ 785.491807][T13278] 3 locks held by syz.3.2205/13278: [ 785.496982][T13278] #0: ffff88807e874418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 785.506194][T13278] #1: ffff88805e346d98 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: do_truncate+0x19c/0x240 [ 785.516523][T13278] #2: ffff88805e346ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360 [ 785.527552][T13278] [ 785.527552][T13278] stack backtrace: [ 785.533419][T13278] CPU: 0 PID: 13278 Comm: syz.3.2205 Not tainted syzkaller #0 [ 785.540856][T13278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.550892][T13278] Call Trace: [ 785.554153][T13278] [ 785.557066][T13278] dump_stack_lvl+0x18c/0x250 [ 785.561728][T13278] ? load_image+0x420/0x420 [ 785.566216][T13278] ? show_regs_print_info+0x20/0x20 [ 785.571399][T13278] ? print_circular_bug+0x12b/0x1a0 [ 785.576587][T13278] check_noncircular+0x2fc/0x400 [ 785.581514][T13278] ? print_deadlock_bug+0x5d0/0x5d0 [ 785.586693][T13278] ? lockdep_lock+0xf5/0x230 [ 785.591262][T13278] ? lockdep_unlock+0x146/0x2e0 [ 785.596092][T13278] ? _find_first_zero_bit+0xd6/0x100 [ 785.601396][T13278] __lock_acquire+0x37ef/0x7d80 [ 785.606236][T13278] ? verify_lock_unused+0x140/0x140 [ 785.611419][T13278] lock_acquire+0x19e/0x420 [ 785.615901][T13278] ? ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 785.622043][T13278] ? __might_sleep+0xe0/0xe0 [ 785.626619][T13278] ? read_lock_is_recursive+0x20/0x20 [ 785.631977][T13278] ? mapping_evict_folio+0x530/0x530 [ 785.637245][T13278] down_write+0x97/0x200 [ 785.641474][T13278] ? ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 785.647614][T13278] ? down_read_killable+0x340/0x340 [ 785.652800][T13278] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 785.658766][T13278] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 785.664642][T13278] ? up_write+0x1be/0x410 [ 785.668947][T13278] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 785.674649][T13278] ocfs2_truncate_file+0xe87/0x1530 [ 785.679837][T13278] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 785.685545][T13278] ? do_raw_spin_unlock+0x121/0x230 [ 785.690726][T13278] ? _raw_spin_unlock+0x28/0x40 [ 785.695560][T13278] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 785.701262][T13278] ? ocfs2_inode_lock_atime+0x530/0x530 [ 785.706788][T13278] ? ocfs2_rw_lock+0x138/0x250 [ 785.711532][T13278] ? dquot_initialize+0x20/0x20 [ 785.716366][T13278] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 785.722413][T13278] ? setattr_prepare+0x1e5/0xac0 [ 785.727335][T13278] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 785.733927][T13278] ocfs2_setattr+0x15b8/0x1bf0 [ 785.738683][T13278] ? ocfs2_extend_allocation+0x1830/0x1830 [ 785.744472][T13278] ? ktime_get_coarse_real_ts64+0x2f/0x120 [ 785.750261][T13278] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 785.756485][T13278] ? ktime_get_coarse_real_ts64+0x10a/0x120 [ 785.762361][T13278] ? current_time+0x196/0x290 [ 785.767021][T13278] ? inode_set_ctime_current+0x2e0/0x2e0 [ 785.772652][T13278] ? evm_inode_setattr+0x10a/0x6c0 [ 785.777763][T13278] ? security_inode_setattr+0xdc/0x140 [ 785.783216][T13278] ? try_break_deleg+0x79/0x120 [ 785.788070][T13278] ? ocfs2_extend_allocation+0x1830/0x1830 [ 785.793868][T13278] notify_change+0xb05/0xde0 [ 785.798445][T13278] do_truncate+0x1b0/0x240 [ 785.802846][T13278] ? put_page_bootmem+0x2b0/0x2b0 [ 785.807848][T13278] ? apparmor_file_truncate+0x24a/0x2e0 [ 785.813380][T13278] ? ima_bprm_check+0x200/0x200 [ 785.818221][T13278] path_openat+0x2a7e/0x3270 [ 785.822795][T13278] ? do_sys_openat2+0xda/0x1d0 [ 785.827540][T13278] ? __x64_sys_openat+0x139/0x160 [ 785.832547][T13278] ? verify_lock_unused+0x140/0x140 [ 785.837726][T13278] ? do_filp_open+0x430/0x430 [ 785.842384][T13278] do_filp_open+0x1f2/0x430 [ 785.846875][T13278] ? vfs_tmpfile+0x480/0x480 [ 785.851452][T13278] ? _raw_spin_unlock+0x28/0x40 [ 785.856289][T13278] ? alloc_fd+0x590/0x640 [ 785.860604][T13278] do_sys_openat2+0x134/0x1d0 [ 785.865265][T13278] ? do_sys_open+0xe0/0xe0 [ 785.869667][T13278] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 785.875628][T13278] ? lock_chain_count+0x20/0x20 [ 785.880463][T13278] __x64_sys_openat+0x139/0x160 [ 785.885298][T13278] do_syscall_64+0x55/0xb0 [ 785.889699][T13278] ? clear_bhb_loop+0x40/0x90 [ 785.894369][T13278] ? clear_bhb_loop+0x40/0x90 [ 785.899045][T13278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.904929][T13278] RIP: 0033:0x7f7c2a79ce59 [ 785.909333][T13278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.928951][T13278] RSP: 002b:00007f7c2b68a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 785.937349][T13278] RAX: ffffffffffffffda RBX: 00007f7c2aa16090 RCX: 00007f7c2a79ce59 [ 785.945323][T13278] RDX: 0000000000080281 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 785.953292][T13278] RBP: 00007f7c2a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 785.961247][T13278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.969198][T13278] R13: 00007f7c2aa16128 R14: 00007f7c2aa16090 R15: 00007ffd436d4158 [ 785.977160][T13278] [ 786.056805][ T5777] ocfs2: Unmounting device (7,3) on (node local)