last executing test programs: 52.771160389s ago: executing program 0 (id=1731): r0 = socket(0x10, 0x80002, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4770f000) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) read$FUSE(r2, &(0x7f0000004ac0)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x28, &(0x7f0000000140)=0x3ff, 0x4) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 48.700158389s ago: executing program 0 (id=1737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000006000000000000000703000095290a0000000000"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000011c0)=""/230) ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x380) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r3) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r7, r7) read$FUSE(r8, &(0x7f0000002780)={0x2020}, 0x2020) socket$kcm(0x10, 0x2, 0x0) 46.23191548s ago: executing program 0 (id=1742): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) 43.579416235s ago: executing program 0 (id=1747): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 43.383022039s ago: executing program 0 (id=1749): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008f}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@deltclass={0x44, 0x29, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x1, 0x4}, {0xc, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x8}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_RATE={0x6, 0x5, {0xff}}, @tclass_kind_options=@c_mq={0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000500)) sendto$inet6(r0, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 41.664341562s ago: executing program 0 (id=1753): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) openat$kvm(0x0, &(0x7f0000000140), 0x64480, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x206) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000000)=r1, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffcc6, 0x0, 0xffffffffffffffb5, 0x0, 0x53}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x850c0000, 0x0, 0xfffffffffffffd7c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_dev$dri(&(0x7f00000000c0), 0xffffffff, 0x44100) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r3, 0x0) 26.309283959s ago: executing program 32 (id=1753): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) openat$kvm(0x0, &(0x7f0000000140), 0x64480, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x206) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000000)=r1, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffcc6, 0x0, 0xffffffffffffffb5, 0x0, 0x53}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x850c0000, 0x0, 0xfffffffffffffd7c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_dev$dri(&(0x7f00000000c0), 0xffffffff, 0x44100) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r3, 0x0) 8.436767562s ago: executing program 1 (id=1833): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a6022", 0x7) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5.937997511s ago: executing program 1 (id=1837): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x30}}, 0x0) 5.789748204s ago: executing program 1 (id=1838): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 5.032287002s ago: executing program 3 (id=1840): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) 4.729979889s ago: executing program 1 (id=1841): socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x109002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYRES64=r5], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) 4.000157466s ago: executing program 3 (id=1842): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) 3.148294466s ago: executing program 1 (id=1844): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 3.132606357s ago: executing program 3 (id=1845): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001150300ef000000040000000000000010000500000000002000000000000000"], 0x24, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000380)={[0x4]}, 0x8) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.912284265s ago: executing program 1 (id=1846): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) 1.788202748s ago: executing program 3 (id=1847): unshare(0x68040000) 1.740646529s ago: executing program 2 (id=1848): ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.347173168s ago: executing program 2 (id=1849): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) 1.191326152s ago: executing program 2 (id=1850): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='befs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC=r3], 0x239) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) syz_io_uring_setup(0xf04, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0xb3) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 847.35854ms ago: executing program 3 (id=1851): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550d, 0x0) 317.058492ms ago: executing program 2 (id=1852): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be", 0x1}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) 164.190266ms ago: executing program 2 (id=1853): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 129.924427ms ago: executing program 3 (id=1854): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x5cec, 0x2, 0x3432564e, 0x7, 0x0, [{0x0, 0xfffffffd}, {0xf, 0xe}, {0x7, 0x6c4}, {0x1, 0x3}, {0x9, 0xd9c}, {0x6, 0x6}, {0x282}, {0x2, 0x8cb}], 0x8, 0x8, 0x1, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/29, 0x17}, 0x6}], 0x636, 0x40010003, 0x0) 83.004798ms ago: executing program 4 (id=1773): syz_open_dev$vim2m(&(0x7f0000000440), 0x7, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, 0x0) close(0x3) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xffbffffa, 0x3, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)={0x0, 0x722}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000600)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) setns(0xc9, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001000000"], 0x50}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"/32], 0x20}}, 0x0) 0s ago: executing program 2 (id=1855): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0xa}, [], [0x0, 0x0, 0xffffff00], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0xf7fe, 0x4, 'snmp\x00', 'syz1\x00', {0xe8ea}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) syz_emit_ethernet(0x66, &(0x7f0000001a40)={@random="0f539af21094", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) kernel console output (not intermixed with test programs): ][ T5814] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 231.945882][ T5814] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 231.974900][ T5814] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 231.991051][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.010325][ T7569] trusted_key: syz.3.525 sent an empty control message without MSG_MORE. [ 232.104904][ T5814] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 233.157342][ T7579] vivid-004: disconnect [ 233.376246][ T5814] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 233.948206][ T5813] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 234.230427][ T5813] usb 2-1: Using ep0 maxpacket: 8 [ 234.325821][ T5813] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 234.426899][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.600651][ T5813] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 236.161472][ T7557] vivid-004: reconnect [ 236.207706][ T5813] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 236.470308][ T173] usb 3-1: USB disconnect, device number 4 [ 236.765277][ T5813] usb 2-1: USB disconnect, device number 3 [ 237.061693][ T7600] syzkaller0: entered promiscuous mode [ 237.071007][ T7600] syzkaller0: entered allmulticast mode [ 237.423978][ T7607] binder: 7606:7607 ioctl 4018620d 0 returned -22 [ 240.427839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 240.471176][ T5813] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 240.742326][ T5813] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 240.764925][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.824859][ T7635] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7635] [ 241.417555][ T5813] usb 1-1: Product: syz [ 241.421785][ T5813] usb 1-1: Manufacturer: syz [ 241.426394][ T5813] usb 1-1: SerialNumber: syz [ 241.494003][ T5813] usb 1-1: config 0 descriptor?? [ 241.578030][ T5813] usb 1-1: can't set config #0, error -71 [ 241.602449][ T5813] usb 1-1: USB disconnect, device number 5 [ 242.384293][ T7655] syz.0.546: attempt to access beyond end of device [ 242.384293][ T7655] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 243.128643][ T7662] ======================================================= [ 243.128643][ T7662] WARNING: The mand mount option has been deprecated and [ 243.128643][ T7662] and is ignored by this kernel. Remove the mand [ 243.128643][ T7662] option from the mount to silence this warning. [ 243.128643][ T7662] ======================================================= [ 243.167855][ T7662] 9pnet_virtio: no channels available for device 127.0.0.1 [ 244.968344][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 245.268266][ T5836] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 245.471174][ T5836] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 245.489860][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.507433][ T5836] usb 2-1: Product: syz [ 245.518178][ T5836] usb 2-1: Manufacturer: syz [ 245.522888][ T5836] usb 2-1: SerialNumber: syz [ 245.539403][ T5836] usb 2-1: config 0 descriptor?? [ 245.972433][ T7706] 9pnet_virtio: no channels available for device 127.0.0.1 [ 247.191375][ T5836] usb 2-1: Firmware version (0.0) predates our first public release. [ 247.465394][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.848369][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.146594][ T7678] bond0 (unregistering): Released all slaves [ 249.026824][ T5836] usb 2-1: Please update to version 0.2 or newer [ 249.308704][ T173] usb 2-1: USB disconnect, device number 4 [ 250.053848][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 251.087089][ T7770] 9pnet_virtio: no channels available for device 127.0.0.1 [ 251.897457][ T789] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 252.250576][ T789] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 252.282872][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.333359][ T789] usb 3-1: Product: syz [ 252.350501][ T789] usb 3-1: Manufacturer: syz [ 252.355187][ T789] usb 3-1: SerialNumber: syz [ 252.413852][ T789] usb 3-1: config 0 descriptor?? [ 253.152454][ T7767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.153561][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 253.180889][ T7767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.198012][ T7767] bond0 (unregistering): Released all slaves [ 253.317038][ T789] usb 3-1: Firmware version (0.0) predates our first public release. [ 253.335899][ T789] usb 3-1: Please update to version 0.2 or newer [ 253.500408][ T789] usb 3-1: USB disconnect, device number 5 [ 254.482470][ T7806] ceph: No mds server is up or the cluster is laggy [ 254.534298][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 254.673913][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 255.274347][ T7812] 9pnet_virtio: no channels available for device 127.0.0.1 [ 256.005232][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.012375][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.802001][ T7834] syzkaller0: entered promiscuous mode [ 257.888912][ T5813] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 257.891209][ T7834] syzkaller0: entered allmulticast mode [ 257.916534][ T5813] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.049375][ T7840] fido_id[7840]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 258.332848][ T7852] 9pnet_virtio: no channels available for device 127.0.0.1 [ 258.388058][ T173] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 258.770308][ T173] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 258.814150][ T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.871568][ T173] usb 1-1: Product: syz [ 258.897077][ T173] usb 1-1: Manufacturer: syz [ 258.933033][ T173] usb 1-1: SerialNumber: syz [ 259.053726][ T173] usb 1-1: config 0 descriptor?? [ 260.450205][ T7843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.560310][ T173] usb 1-1: Firmware version (0.0) predates our first public release. [ 260.560502][ T7843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.602555][ T173] usb 1-1: Please update to version 0.2 or newer [ 260.744488][ T7843] bond0 (unregistering): Released all slaves [ 260.825334][ T8] usb 1-1: USB disconnect, device number 6 [ 260.959000][ T7881] syzkaller0: entered promiscuous mode [ 260.973103][ T7881] syzkaller0: entered allmulticast mode [ 261.248189][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 261.446600][ T7896] 9pnet_virtio: no channels available for device 127.0.0.1 [ 261.554373][ T5814] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 261.660905][ T5814] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 262.522782][ T7906] fido_id[7906]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.777630][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 262.949573][ T5814] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 262.966342][ T5814] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.054737][ T7933] 9pnet_virtio: no channels available for device 127.0.0.1 [ 263.072856][ T7931] fido_id[7931]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 263.181145][ T5840] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 263.479245][ T5840] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 263.553000][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.614349][ T5840] usb 3-1: Product: syz [ 263.646231][ T5840] usb 3-1: Manufacturer: syz [ 263.846235][ T5840] usb 3-1: SerialNumber: syz [ 263.948073][ T5840] usb 3-1: config 0 descriptor?? [ 265.085835][ T5840] usb 3-1: Firmware version (0.0) predates our first public release. [ 265.102589][ T5840] usb 3-1: Please update to version 0.2 or newer [ 265.209599][ T5840] usb 3-1: USB disconnect, device number 6 [ 266.188841][ T7967] 9pnet_virtio: no channels available for device 127.0.0.1 [ 267.960507][ T7977] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 268.020076][ T5083] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 268.048354][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 268.065179][ T7982] overlayfs: missing 'lowerdir' [ 268.787583][ T789] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 269.028669][ T5836] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 269.083219][ T789] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 269.153605][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.231999][ T789] usb 4-1: Product: syz [ 269.281226][ T789] usb 4-1: Manufacturer: syz [ 269.328019][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 269.348866][ T789] usb 4-1: SerialNumber: syz [ 269.370418][ T5836] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 269.420719][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.452689][ T789] usb 4-1: config 0 descriptor?? [ 269.475862][ T5836] usb 2-1: config 0 has no interface number 0 [ 269.502503][ T5836] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 269.573753][ T5836] usb 2-1: config 0 interface 239 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 269.617489][ T5836] usb 2-1: config 0 interface 239 has no altsetting 0 [ 269.645903][ T5836] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 269.663669][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.692521][ T5836] usb 2-1: Product: syz [ 269.696804][ T5836] usb 2-1: Manufacturer: syz [ 269.715819][ T5836] usb 2-1: SerialNumber: syz [ 269.834946][ T5836] usb 2-1: config 0 descriptor?? [ 270.413758][ T7999] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 270.638282][ T7993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.688712][ T8014] overlayfs: missing 'lowerdir' [ 270.756282][ T7993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.883867][ T789] usb 4-1: Firmware version (0.0) predates our first public release. [ 270.884049][ T789] usb 4-1: Please update to version 0.2 or newer [ 271.091324][ T7993] bond0 (unregistering): Released all slaves [ 271.438992][ T789] usb 4-1: USB disconnect, device number 5 [ 271.515548][ T5836] usb 2-1: USB disconnect, device number 5 [ 272.258608][ T8029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.271151][ T8029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.285062][ T8029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.297686][ T8029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.319182][ T8029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.331182][ T8029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.343139][ T8029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.360337][ T8029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.373342][ T8029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.386360][ T8029] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.451313][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 273.686680][ T8045] overlayfs: missing 'lowerdir' [ 273.903009][ T8042] cgroup: Unknown subsys name 'euid' [ 274.233467][ T8042] socket: no more sockets [ 274.256537][ T8042] socket: no more sockets [ 274.471766][ T5836] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 274.701928][ T5836] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 274.722344][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.735063][ T5836] usb 4-1: Product: syz [ 274.741734][ T5836] usb 4-1: Manufacturer: syz [ 274.767103][ T5836] usb 4-1: SerialNumber: syz [ 274.775307][ T5836] usb 4-1: config 0 descriptor?? [ 275.353093][ T5836] usb 4-1: Firmware version (0.0) predates our first public release. [ 275.371149][ T5836] usb 4-1: Please update to version 0.2 or newer [ 275.417681][ T789] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 275.436646][ T5836] usb 4-1: USB disconnect, device number 6 [ 275.637359][ T789] usb 3-1: Using ep0 maxpacket: 8 [ 275.644928][ T789] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 275.667740][ T789] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 275.692140][ T789] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.707388][ T789] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.727814][ T789] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.737868][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.963636][ T789] usb 3-1: GET_CAPABILITIES returned 0 [ 275.979056][ T789] usbtmc 3-1:16.0: can't read capabilities [ 276.677308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 277.376450][ T8067] usb 3-1: usbtmc_ioctl_clear_out_halt returned -32 [ 277.406450][ T5840] usb 3-1: USB disconnect, device number 7 [ 277.494338][ T8081] overlayfs: missing 'lowerdir' [ 278.437513][ T789] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 278.624913][ T789] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 278.664921][ T8108] overlayfs: missing 'lowerdir' [ 278.693873][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.716005][ T789] usb 2-1: Product: syz [ 278.721120][ T789] usb 2-1: Manufacturer: syz [ 278.726599][ T789] usb 2-1: SerialNumber: syz [ 278.738103][ T789] usb 2-1: config 0 descriptor?? [ 279.655862][ T789] usb 2-1: Firmware version (0.0) predates our first public release. [ 279.679834][ T789] usb 2-1: Please update to version 0.2 or newer [ 279.733977][ T789] usb 2-1: USB disconnect, device number 6 [ 281.177946][ T8132] syz.3.690: attempt to access beyond end of device [ 281.177946][ T8132] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 281.466594][ T8141] overlayfs: missing 'lowerdir' [ 283.307679][ T7270] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 283.612857][ T7270] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 283.720073][ T7270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.782561][ T7270] usb 2-1: Product: syz [ 283.792063][ T7270] usb 2-1: Manufacturer: syz [ 283.797134][ T7270] usb 2-1: SerialNumber: syz [ 283.804331][ T7270] usb 2-1: config 0 descriptor?? [ 284.076927][ T8168] overlayfs: missing 'workdir' [ 284.121568][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 284.182115][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 284.429464][ T7270] usb 2-1: Firmware version (0.0) predates our first public release. [ 284.458042][ T7270] usb 2-1: Please update to version 0.2 or newer [ 284.584270][ T7270] usb 2-1: USB disconnect, device number 7 [ 285.951873][ T8201] overlayfs: missing 'workdir' [ 286.043509][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 286.052243][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 286.060800][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 286.067121][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 286.342009][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 286.348393][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 286.407315][ T7270] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 286.647802][ T7270] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 286.665139][ T7270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.674145][ T7270] usb 3-1: Product: syz [ 286.681325][ T7270] usb 3-1: Manufacturer: syz [ 286.686232][ T7270] usb 3-1: SerialNumber: syz [ 286.699755][ T7270] usb 3-1: config 0 descriptor?? [ 286.859378][ T8204] ceph: No mds server is up or the cluster is laggy [ 286.866548][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 286.875101][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 287.748907][ T7270] usb 3-1: Firmware version (0.0) predates our first public release. [ 287.773729][ T7270] usb 3-1: Please update to version 0.2 or newer [ 287.860121][ T7270] usb 3-1: USB disconnect, device number 8 [ 287.981146][ T8232] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 288.028535][ T8234] overlayfs: missing 'workdir' [ 288.081957][ T8232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.184949][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 288.205948][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 288.666618][ T7270] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 288.947306][ T7270] usb 4-1: Using ep0 maxpacket: 8 [ 288.964141][ T7270] usb 4-1: unable to get BOS descriptor or descriptor too short [ 288.998746][ T7270] usb 4-1: config 4 interface 0 has no altsetting 0 [ 289.020910][ T7270] usb 4-1: string descriptor 0 read error: -22 [ 289.049856][ T7270] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 289.229390][ T7270] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 289.298222][ T7270] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 289.371972][ T7270] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 289.396750][ T7270] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 289.405842][ T7270] usb 4-1: media controller created [ 289.652570][ T7270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.653744][ T8244] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 289.945722][ T7270] zl10353_read_register: readreg error (reg=127, ret==0) [ 290.906336][ T7270] usb 4-1: USB disconnect, device number 7 [ 291.025984][ T8265] overlayfs: missing 'lowerdir' [ 291.567465][ T5813] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 292.501718][ T5813] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 292.521641][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.541859][ T5813] usb 3-1: Product: syz [ 292.546089][ T5813] usb 3-1: Manufacturer: syz [ 292.557798][ T5813] usb 3-1: SerialNumber: syz [ 292.566245][ T5813] usb 3-1: config 0 descriptor?? [ 292.595200][ T8288] overlayfs: missing 'lowerdir' [ 293.167254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 293.855333][ T5813] usb 3-1: Firmware version (0.0) predates our first public release. [ 293.863718][ T5813] usb 3-1: Please update to version 0.2 or newer [ 293.951225][ T5813] usb 3-1: USB disconnect, device number 9 [ 294.448283][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 294.500876][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 294.574676][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 296.638695][ T5813] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 296.899554][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 296.945058][ T5813] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 297.043234][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.207552][ T5813] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 297.325340][ T5813] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 298.913289][ T7270] usb 4-1: USB disconnect, device number 8 [ 302.205973][ T5836] nvmet: connect request for invalid subsystem t! [ 302.219255][ T8351] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 302.511128][ T8360] bond0: option xmit_hash_policy: invalid value (6) [ 302.520413][ T8360] bond0 (unregistering): Released all slaves [ 316.410599][ T8379] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8379] [ 316.651038][ T8386] binder: 8385:8386 ioctl c0306201 0 returned -14 [ 316.954439][ T8391] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8391] [ 317.445693][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.452243][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.582270][ T7270] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 317.644195][ T7270] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 319.589259][ T8423] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8423] [ 320.489029][ T8438] jffs2: notice: (8438) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 323.744889][ T8486] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8486] [ 327.587462][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 327.665274][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 328.578267][ T8529] binder: BINDER_SET_CONTEXT_MGR already set [ 328.607821][ T8529] binder: 8528:8529 ioctl 4018620d 200000004a80 returned -16 [ 332.587723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 335.211720][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 335.293114][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 335.705971][ T8590] jffs2: notice: (8590) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 341.697897][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.823'. [ 341.762115][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.823'. [ 344.192167][ T8669] jffs2: notice: (8669) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 348.357431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 349.621564][ T8717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.586438][ T8756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.857441][ T5836] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 355.068846][ T5836] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 355.087852][ T5836] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 355.096095][ T5836] usb 3-1: Product: syz [ 355.137322][ T5836] usb 3-1: Manufacturer: syz [ 355.141995][ T5836] usb 3-1: SerialNumber: syz [ 355.161546][ T5836] usb 3-1: config 0 descriptor?? [ 355.478857][ T5836] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 355.885743][ T5836] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 355.913814][ T5836] peak_usb 3-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 356.008259][ T5836] peak_usb: probe of 3-1:0.0 failed with error -71 [ 356.044391][ T5836] usb 3-1: USB disconnect, device number 10 [ 357.697806][ T8794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.115998][ T8801] Mass Storage Function, version: 2009/09/11 [ 358.131485][ T8801] LUN: removable file: (no medium) [ 358.147832][ T28] audit: type=1800 audit(1786080492.284:2): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.873" name="file" dev="configfs" ino=17617 res=0 errno=0 [ 358.691268][ T173] libceph: connect (1)[c::]:6789 error -101 [ 358.793326][ T173] libceph: mon0 (1)[c::]:6789 connect error [ 359.364615][ T8809] ceph: No mds server is up or the cluster is laggy [ 359.372195][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 359.422099][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 360.629278][ T173] libceph: connect (1)[c::]:6789 error -101 [ 360.635401][ T173] libceph: mon0 (1)[c::]:6789 connect error [ 361.318368][ T173] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 361.541874][ T173] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 361.838185][ T173] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.997822][ T173] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 362.007034][ T173] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.033318][ T173] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.069060][ T8831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.086092][ T173] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 362.105259][ T173] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 362.126116][ T173] usb 2-1: Product: syz [ 362.149325][ T173] usb 2-1: Manufacturer: syz [ 362.168644][ T173] cdc_wdm 2-1:1.0: skipping garbage [ 362.179278][ T173] cdc_wdm 2-1:1.0: skipping garbage [ 362.199918][ T173] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 362.222460][ T173] cdc_wdm 2-1:1.0: Unknown control protocol [ 362.370782][ T8824] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 362.387602][ T173] usb 2-1: USB disconnect, device number 8 [ 362.708948][ T8841] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8841] [ 364.887510][ T173] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 365.185710][ T173] usb 3-1: config 0 has no interfaces? [ 365.238785][ T173] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 365.396510][ T173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.518096][ T173] usb 3-1: config 0 descriptor?? [ 365.538899][ T8860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.740657][ T5836] usb 3-1: USB disconnect, device number 11 [ 368.978622][ T8893] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8893] [ 374.947109][ T8938] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8938] [ 377.054982][ T8960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.886318][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.026207][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.667542][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 381.508184][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 381.531706][ T8] usb 3-1: config 2 has an invalid interface number: 111 but max is 0 [ 381.546097][ T8] usb 3-1: config 2 has no interface number 0 [ 381.567458][ T8] usb 3-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 381.587100][ T8] usb 3-1: config 2 interface 111 has no altsetting 0 [ 381.594938][ T8] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 381.622335][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.647730][ T8987] syzkaller0: entered promiscuous mode [ 381.653538][ T8987] syzkaller0: entered allmulticast mode [ 381.909312][ T8] usb 3-1: string descriptor 0 read error: -71 [ 381.939797][ T8] usb 3-1: USB disconnect, device number 12 [ 382.040776][ T8996] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8996] [ 384.774614][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 384.933679][ T9020] syzkaller0: entered promiscuous mode [ 384.947106][ T9020] syzkaller0: entered allmulticast mode [ 386.457769][ T7270] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 386.708732][ T7270] usb 3-1: Using ep0 maxpacket: 8 [ 386.780303][ T7270] usb 3-1: config 2 has an invalid interface number: 111 but max is 0 [ 386.892770][ T7270] usb 3-1: config 2 has no interface number 0 [ 386.979317][ T7270] usb 3-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 387.131496][ T7270] usb 3-1: config 2 interface 111 has no altsetting 0 [ 387.212826][ T7270] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 387.331666][ T7270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.761092][ T8] IPVS: starting estimator thread 0... [ 388.867876][ T9046] IPVS: using max 20 ests per chain, 48000 per kthread [ 389.073376][ T7270] usb 3-1: string descriptor 0 read error: -71 [ 389.107343][ T7270] usb 3-1: USB disconnect, device number 13 [ 390.385615][ T9062] syzkaller0: entered promiscuous mode [ 390.413485][ T9062] syzkaller0: entered allmulticast mode [ 391.126412][ T9078] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9078] [ 393.238601][ T9095] 9pnet_virtio: no channels available for device 127.0.0.1 [ 393.270434][ T5836] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 393.316328][ T5836] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.303127][ T9104] syzkaller0: entered promiscuous mode [ 394.316591][ T9104] syzkaller0: entered allmulticast mode [ 396.558808][ T9133] random: crng reseeded on system resumption [ 398.759596][ T5840] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 398.817400][ T5840] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 400.429176][ T9176] sched: RT throttling activated [ 401.922404][ T9198] overlayfs: failed to resolve './bus': -2 [ 401.991771][ T9207] syzkaller0: entered promiscuous mode [ 402.007988][ T9207] syzkaller0: entered allmulticast mode [ 403.813105][ T9245] syzkaller0: entered promiscuous mode [ 403.820875][ T9245] syzkaller0: entered allmulticast mode [ 403.923666][ T7270] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 404.028409][ T9251] ceph: No mds server is up or the cluster is laggy [ 404.125623][ T8] libceph: connect (1)[c::]:6789 error -101 [ 404.240111][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 404.734817][ T7270] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 405.138898][ T9266] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9266] [ 408.439730][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 408.501153][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 410.109574][ T9313] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9313] [ 411.341758][ T9321] sctp_transport_update_pmtu: 48 callbacks suppressed [ 411.341785][ T9321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 411.360304][ T9321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 411.372286][ T9321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 411.384577][ T9321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 411.403797][ T9321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 411.415851][ T9321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 411.427745][ T9321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 411.440535][ T9321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 411.452419][ T9321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 411.464359][ T9321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 412.145101][ T7270] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 412.201155][ T7270] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 412.656735][ T9332] 9pnet_virtio: no channels available for device 127.0.0.1 [ 416.513583][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 416.627904][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 416.744343][ T9347] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9347] [ 419.158182][ T5812] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 419.204834][ T5812] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 419.693503][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 419.957296][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 419.964348][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC6, skipping [ 420.014196][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 420.085368][ T9389] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9389] [ 420.677437][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 420.708220][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 420.717891][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.725913][ T9] usb 4-1: Product: syz [ 420.730252][ T9] usb 4-1: Manufacturer: syz [ 420.736117][ T9] usb 4-1: SerialNumber: syz [ 420.765415][ T9] usb 4-1: config 0 descriptor?? [ 420.781191][ T9] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 420.909227][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 420.969951][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 421.046264][ T8] usb 4-1: USB disconnect, device number 9 [ 423.192588][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 423.281964][ T9] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 423.382384][ T9435] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9435] [ 426.743904][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 426.804953][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 428.572518][ T9] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 428.592721][ T9] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 428.853115][ T9484] 9pnet_virtio: no channels available for device 127.0.0.1 [ 432.187757][ T9521] 9pnet_virtio: no channels available for device 127.0.0.1 [ 438.007531][ T7270] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 438.257607][ T7270] usb 3-1: Using ep0 maxpacket: 32 [ 438.269522][ T7270] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 438.282392][ T7270] usb 3-1: config 0 has no interface number 0 [ 438.288908][ T7270] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.302711][ T7270] usb 3-1: config 0 interface 85 has no altsetting 0 [ 438.315125][ T7270] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 438.335654][ T7270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.344100][ T7270] usb 3-1: Product: syz [ 438.348356][ T7270] usb 3-1: Manufacturer: syz [ 438.352976][ T7270] usb 3-1: SerialNumber: syz [ 438.368882][ T7270] usb 3-1: config 0 descriptor?? [ 439.009641][ T7270] appletouch 3-1:0.85: Geyser mode initialized. [ 439.025410][ T7270] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input41 [ 439.271550][ T7270] usb 3-1: USB disconnect, device number 14 [ 439.320043][ T7270] appletouch 3-1:0.85: input: appletouch disconnected [ 439.527428][ T173] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 439.727388][ T173] usb 4-1: Using ep0 maxpacket: 16 [ 440.266135][ T173] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.287356][ T173] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 440.300504][ T173] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 440.310224][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.329973][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.331377][ T173] usb 4-1: Product: syz [ 440.340576][ T173] usb 4-1: Manufacturer: syz [ 440.341667][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.345168][ T173] usb 4-1: SerialNumber: syz [ 440.376126][ T173] usb 4-1: config 0 descriptor?? [ 442.333247][ T9630] 9pnet_virtio: no channels available for device 127.0.0.1 [ 443.220795][ T5836] usb 4-1: USB disconnect, device number 10 [ 444.076506][ T9661] 9pnet_virtio: no channels available for device 127.0.0.1 [ 447.780282][ T9688] 9pnet_virtio: no channels available for device 127.0.0.1 [ 448.562091][ T9696] tipc: Started in network mode [ 448.567364][ T9696] tipc: Node identity a611af1c4295, cluster identity 4711 [ 448.578518][ T9696] tipc: Enabled bearer , priority 0 [ 448.588826][ T9696] syzkaller0: MTU too low for tipc bearer [ 448.595149][ T9696] tipc: Disabling bearer [ 448.715205][ T9702] nvmet: adding nsid 1 to subsystem test_subsys [ 449.198368][ T9719] 9pnet_virtio: no channels available for device 127.0.0.1 [ 451.502160][ T9729] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9729] [ 452.944560][ T9754] 9pnet_virtio: no channels available for device 127.0.0.1 [ 453.085391][ T9756] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9756] [ 453.691237][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 453.877568][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 453.909765][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.964989][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 454.074660][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 454.222889][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 454.252214][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.279477][ T9] usb 2-1: config 0 descriptor?? [ 457.730099][ T5840] usb 2-1: USB disconnect, device number 9 [ 457.759666][ T5781] block nbd0: Receive control failed (result -32) [ 458.463360][ T9792] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9792] [ 460.137076][ T9803] jffs2: notice: (9803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 460.318762][ T7270] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 460.683998][ T7270] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 460.695827][ T7270] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 460.706197][ T7270] usb 2-1: config 8 has no interface number 0 [ 460.713529][ T7270] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 460.727123][ T7270] usb 2-1: config 8 interface 177 has no altsetting 0 [ 460.733957][ T7270] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 460.743133][ T7270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.756211][ T7270] ir_toy 2-1:8.177: required endpoints not found [ 460.817516][ T9822] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9822] [ 461.376746][ T5774] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 461.634737][ T5774] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 461.645847][ T5774] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 461.667779][ T7270] usb 2-1: USB disconnect, device number 10 [ 461.822165][ T5774] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 461.840023][ T5774] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 461.868552][ T5774] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 461.915438][ T9833] comedi: valid board names for 8255 driver are: [ 461.924937][ T9833] 8255 [ 461.928017][ T9833] comedi: valid board names for vmk80xx driver are: [ 461.934692][ T9833] vmk80xx [ 461.939099][ T9833] comedi: valid board names for usbduxsigma driver are: [ 461.946896][ T9833] usbduxsigma [ 461.956605][ T9833] comedi: valid board names for usbduxfast driver are: [ 461.963681][ T9833] usbduxfast [ 461.967053][ T9833] comedi: valid board names for usbdux driver are: [ 461.974602][ T9833] usbdux [ 461.977811][ T9833] comedi: valid board names for ni6501 driver are: [ 461.984416][ T9833] ni6501 [ 461.987843][ T9833] comedi: valid board names for dt9812 driver are: [ 461.994426][ T9833] dt9812 [ 461.998131][ T9833] comedi: valid board names for ni_labpc_cs driver are: [ 462.005194][ T9833] ni_labpc_cs [ 462.008893][ T9833] comedi: valid board names for ni_daq_700 driver are: [ 462.015831][ T9833] ni_daq_700 [ 462.019368][ T9833] comedi: valid board names for labpc_pci driver are: [ 462.027851][ T9833] labpc_pci [ 462.031172][ T9833] comedi: valid board names for adl_pci9118 driver are: [ 462.038875][ T9833] pci9118dg [ 462.042178][ T9833] pci9118hg [ 462.045429][ T9833] pci9118hr [ 462.056455][ T9833] comedi: valid board names for 8255_pci driver are: [ 462.068933][ T9833] 8255_pci [ 462.072452][ T9833] comedi: valid board names for s526 driver are: [ 462.081186][ T9833] s526 [ 462.087310][ T9833] comedi: valid board names for multiq3 driver are: [ 462.094057][ T9833] multiq3 [ 462.099142][ T9833] comedi: valid board names for pcmuio driver are: [ 462.106114][ T9833] pcmuio48 [ 462.109722][ T9833] pcmuio96 [ 462.113455][ T9833] comedi: valid board names for pcmmio driver are: [ 462.122892][ T9833] pcmmio [ 462.129617][ T9833] comedi: valid board names for pcmda12 driver are: [ 462.136353][ T9833] pcmda12 [ 462.139658][ T9833] comedi: valid board names for pcmad driver are: [ 462.146639][ T9833] pcmad12 [ 462.149991][ T9833] pcmad16 [ 462.153224][ T9833] comedi: valid board names for ni_labpc driver are: [ 462.160316][ T9833] lab-pc-1200 [ 462.163781][ T9833] lab-pc-1200ai [ 462.167664][ T9833] lab-pc+ [ 462.173953][ T9833] comedi: valid board names for atmio16 driver are: [ 462.181907][ T9833] atmio16 [ 462.184995][ T9833] atmio16d [ 462.188358][ T9833] comedi: valid board names for ni_at_ao driver are: [ 462.195121][ T9833] at-ao-6 [ 462.198405][ T9833] at-ao-10 [ 462.201605][ T9833] comedi: valid board names for ni_at_a2150 driver are: [ 462.208756][ T9833] ni_at_a2150 [ 462.212207][ T9833] comedi: valid board names for adq12b driver are: [ 462.218959][ T9833] adq12b [ 462.222411][ T9833] comedi: valid board names for mpc624 driver are: [ 462.230615][ T9833] mpc624 [ 462.233638][ T9833] comedi: valid board names for c6xdigio driver are: [ 462.240593][ T9833] c6xdigio [ 462.243804][ T9833] comedi: valid board names for aio_iiro_16 driver are: [ 462.250904][ T9833] aio_iiro_16 [ 462.254392][ T9833] comedi: valid board names for aio_aio12_8 driver are: [ 462.261609][ T9833] aio_aio12_8 [ 462.265108][ T9833] aio_ai12_8 [ 462.268667][ T9833] aio_ao12_4 [ 462.272099][ T9833] comedi: valid board names for fl512 driver are: [ 462.278790][ T9833] fl512 [ 462.281760][ T9833] comedi: valid board names for dmm32at driver are: [ 462.288628][ T9833] dmm32at [ 462.291743][ T9833] comedi: valid board names for dt282x driver are: [ 462.298437][ T9833] dt2821 [ 462.301462][ T9833] dt2821-f [ 462.304620][ T9833] dt2821-g [ 462.307960][ T9833] dt2823 [ 462.310944][ T9833] dt2824-pgh [ 462.314276][ T9833] dt2824-pgl [ 462.317763][ T9833] dt2825 [ 462.320753][ T9833] dt2827 [ 462.323738][ T9833] dt2828 [ 462.326734][ T9833] dt2829 [ 462.331347][ T9833] dt21-ez [ 462.334495][ T9833] dt23-ez [ 462.337673][ T9833] dt24-ez [ 462.340744][ T9833] dt24-ez-pgl [ 462.344171][ T9833] comedi: valid board names for dt2817 driver are: [ 462.350990][ T9833] dt2817 [ 462.354008][ T9833] comedi: valid board names for dt2815 driver are: [ 462.360643][ T9833] dt2815 [ 462.363626][ T9833] comedi: valid board names for dt2814 driver are: [ 462.370407][ T9833] dt2814 [ 462.373428][ T9833] comedi: valid board names for dt2811 driver are: [ 462.380135][ T9833] dt2811-pgh [ 462.383534][ T9833] dt2811-pgl [ 462.387449][ T9833] comedi: valid board names for dt2801 driver are: [ 462.394032][ T9833] dt2801 [ 462.397019][ T9833] comedi: valid board names for das6402 driver are: [ 462.403869][ T9833] das6402-12 [ 462.407343][ T9833] das6402-16 [ 462.410668][ T9833] comedi: valid board names for das1800 driver are: [ 462.418968][ T9833] das-1701st [ 462.422351][ T9833] das-1701st-da [ 462.425923][ T9833] das-1702st [ 462.429404][ T9833] das-1702st-da [ 462.434321][ T9833] das-1702hr [ 462.437956][ T9833] das-1702hr-da [ 462.450412][ T9833] das-1701ao [ 462.454973][ T9833] das-1702ao [ 462.458607][ T9833] das-1801st [ 462.465408][ T9833] das-1801st-da [ 462.471027][ T5774] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 462.482789][ T9833] das-1802st [ 462.487284][ T9833] das-1802st-da [ 462.490925][ T9833] das-1802hr [ 462.494303][ T9833] das-1802hr-da [ 462.498269][ T9833] das-1801hc [ 462.511355][ T9833] das-1802hc [ 462.518866][ T9833] das-1801ao [ 462.525406][ T9833] das-1802ao [ 462.531407][ T9833] comedi: valid board names for das800 driver are: [ 462.555064][ T9833] das-800 [ 462.560828][ T9833] cio-das800 [ 462.566444][ T9833] das-801 [ 462.570402][ T9833] cio-das801 [ 462.576700][ T9833] das-802 [ 462.586229][ T9833] cio-das802 [ 462.591120][ T9833] cio-das802/16 [ 462.596832][ T9833] comedi: valid board names for isa-das08 driver are: [ 462.605924][ T9833] isa-das08 [ 462.614926][ T9833] das08-pgm [ 462.618439][ T9833] das08-pgh [ 462.621772][ T9833] das08-pgl [ 462.625066][ T9833] das08-aoh [ 462.628568][ T9833] das08-aol [ 462.631859][ T9833] das08-aom [ 462.635689][ T9833] das08/jr-ao [ 462.642724][ T9833] das08jr-16-ao [ 462.647965][ T9833] pc104-das08 [ 462.651482][ T9833] das08jr/16 [ 462.654884][ T9833] comedi: valid board names for das16m1 driver are: [ 462.662355][ T9833] das16m1 [ 462.665488][ T9833] comedi: valid board names for dac02 driver are: [ 462.672343][ T9833] dac02 [ 462.675230][ T9833] comedi: valid board names for rti802 driver are: [ 462.682357][ T9833] rti802 [ 462.685750][ T9833] comedi: valid board names for rti800 driver are: [ 462.692647][ T9833] rti800 [ 462.695672][ T9833] rti815 [ 462.699107][ T9833] comedi: valid board names for pcm3724 driver are: [ 462.705771][ T9833] pcm3724 [ 462.709233][ T9833] comedi: valid board names for pcl818 driver are: [ 462.715826][ T9833] pcl818l [ 462.719243][ T9833] pcl818h [ 462.722445][ T9833] pcl818hd [ 462.725610][ T9833] pcl818hg [ 462.728988][ T9833] pcl818 [ 462.732059][ T9833] pcl718 [ 462.735077][ T9833] pcm3718 [ 462.739385][ T9833] comedi: valid board names for pcl816 driver are: [ 462.746069][ T9833] pcl816 [ 462.749265][ T9833] pcl814b [ 462.752417][ T9833] comedi: valid board names for pcl812 driver are: [ 462.759157][ T9833] pcl812 [ 462.762171][ T9833] pcl812pg [ 462.765330][ T9833] acl8112pg [ 462.768782][ T9833] acl8112dg [ 462.772062][ T9833] acl8112hg [ 462.775315][ T9833] a821pgl [ 462.778473][ T9833] a821pglnda [ 462.781882][ T9833] a821pgh [ 462.785069][ T9833] a822pgl [ 462.788330][ T9833] a822pgh [ 462.791460][ T9833] a823pgl [ 462.794565][ T9833] a823pgh [ 462.797838][ T9833] pcl813 [ 462.800856][ T9833] pcl813b [ 462.803926][ T9833] acl8113 [ 462.807112][ T9833] iso813 [ 462.810217][ T9833] acl8216 [ 462.813294][ T9833] a826pg [ 462.816280][ T9833] comedi: valid board names for pcl730 driver are: [ 462.822952][ T9833] pcl730 [ 462.825977][ T9833] iso730 [ 462.829161][ T9833] acl7130 [ 462.832287][ T9833] pcm3730 [ 462.835419][ T9833] pcl725 [ 462.838546][ T9833] p8r8dio [ 462.843138][ T9833] acl7225b [ 462.846338][ T9833] p16r16dio [ 462.849754][ T9833] pcl733 [ 462.852768][ T9833] pcl734 [ 462.855750][ T9833] opmm-1616-xt [ 462.859553][ T9833] pearl-mm-p [ 462.862911][ T9833] ir104-pbf [ 462.866180][ T9833] comedi: valid board names for pcl726 driver are: [ 462.872952][ T9833] pcl726 [ 462.875989][ T9833] pcl727 [ 462.879140][ T9833] pcl728 [ 462.882150][ T9833] acl6126 [ 462.885279][ T9833] acl6128 [ 462.888542][ T9833] comedi: valid board names for pcl724 driver are: [ 462.895123][ T9833] pcl724 [ 462.898211][ T9833] pcl722 [ 462.901236][ T9833] pcl731 [ 462.904221][ T9833] acl7122 [ 462.907475][ T9833] acl7124 [ 462.910558][ T9833] pet48dio [ 462.913718][ T9833] pcmio48 [ 462.916796][ T9833] onyx-mm-dio [ 462.921506][ T9833] comedi: valid board names for pcl711 driver are: [ 462.928251][ T9833] pcl711 [ 462.931404][ T9833] pcl711b [ 462.934491][ T9833] acl8112hg [ 462.937820][ T9833] acl8112dg [ 462.941102][ T9833] comedi: valid board names for amplc_pc263 driver are: [ 462.950460][ T9833] pc263 [ 462.954627][ T9833] comedi: valid board names for amplc_pc236 driver are: [ 462.961786][ T9833] pc36at [ 462.964799][ T9833] comedi: valid board names for amplc_dio200 driver are: [ 462.972234][ T9833] pc212e [ 462.975460][ T9833] pc214e [ 462.978912][ T9833] pc215e [ 462.981940][ T9833] pc218e [ 462.985582][ T9833] pc272e [ 462.992279][ T9833] comedi: valid board names for comedi_parport driver are: [ 463.000485][ T9833] comedi_parport [ 463.005257][ T9833] comedi: valid board names for comedi_test driver are: [ 463.013345][ T9833] comedi_test [ 463.017009][ T9833] comedi: valid board names for comedi_bond driver are: [ 463.024810][ T9833] comedi_bond [ 463.064030][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.089643][ T9820] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 463.107638][ T9820] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 463.124193][ T9820] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 463.151632][ T5774] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 463.392757][ T5774] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 463.444740][ T5774] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 463.649544][ T7270] usb 3-1: USB disconnect, device number 15 [ 463.649552][ C0] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 463.788496][ T7270] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 465.484752][ T7270] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 465.495389][ T7270] mos7720 3-1:1.0: device disconnected [ 465.730824][ T9852] syz.1.1194 (9852): drop_caches: 2 [ 466.002745][ T9872] ceph: No mds server is up or the cluster is laggy [ 466.060185][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 466.165391][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 469.139424][ T9919] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 469.270417][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 470.118165][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 470.650853][ T9946] jffs2: notice: (9946) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 471.055281][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 471.753503][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 472.308082][ T9974] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.936225][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'. [ 474.104674][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 474.316292][T10014] capability: warning: `syz.1.1255' uses 32-bit capabilities (legacy support in use) [ 474.622433][T10021] jffs2: notice: (10021) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 474.708806][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 476.197809][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 476.582930][ T5774] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 476.827500][ T5774] usb 4-1: Using ep0 maxpacket: 8 [ 476.844352][ T5774] usb 4-1: config 2 has an invalid interface number: 111 but max is 0 [ 476.866265][ T5774] usb 4-1: config 2 has no interface number 0 [ 476.899914][ T5774] usb 4-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 476.931674][ T5774] usb 4-1: config 2 interface 111 has no altsetting 0 [ 476.938940][ T5774] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 476.948820][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.163381][ T5774] usb 4-1: string descriptor 0 read error: -71 [ 477.191134][ T5774] usb 4-1: USB disconnect, device number 11 [ 477.541846][T10063] comedi: valid board names for 8255 driver are: [ 477.548608][T10063] 8255 [ 477.551483][T10063] comedi: valid board names for vmk80xx driver are: [ 477.558411][T10063] vmk80xx [ 477.561531][T10063] comedi: valid board names for usbduxsigma driver are: [ 477.568872][T10063] usbduxsigma [ 477.572320][T10063] comedi: valid board names for usbduxfast driver are: [ 477.579390][T10063] usbduxfast [ 477.582771][T10063] comedi: valid board names for usbdux driver are: [ 477.590219][T10063] usbdux [ 477.594144][T10063] comedi: valid board names for ni6501 driver are: [ 477.600908][T10063] ni6501 [ 477.603932][T10063] comedi: valid board names for dt9812 driver are: [ 477.610771][T10063] dt9812 [ 477.613780][T10063] comedi: valid board names for ni_labpc_cs driver are: [ 477.621065][T10063] ni_labpc_cs [ 477.624728][T10063] comedi: valid board names for ni_daq_700 driver are: [ 477.631998][T10063] ni_daq_700 [ 477.635370][T10063] comedi: valid board names for labpc_pci driver are: [ 477.642461][T10063] labpc_pci [ 477.645741][T10063] comedi: valid board names for adl_pci9118 driver are: [ 477.653124][T10063] pci9118dg [ 477.656393][T10063] pci9118hg [ 477.659790][T10063] pci9118hr [ 477.663068][T10063] comedi: valid board names for 8255_pci driver are: [ 477.670135][T10063] 8255_pci [ 477.673383][T10063] comedi: valid board names for s526 driver are: [ 477.679961][T10063] s526 [ 477.682819][T10063] comedi: valid board names for multiq3 driver are: [ 477.690214][T10063] multiq3 [ 477.693579][T10063] comedi: valid board names for pcmuio driver are: [ 477.700356][T10063] pcmuio48 [ 477.703550][T10063] pcmuio96 [ 477.706722][T10063] comedi: valid board names for pcmmio driver are: [ 477.713595][T10063] pcmmio [ 477.716603][T10063] comedi: valid board names for pcmda12 driver are: [ 477.723517][T10063] pcmda12 [ 477.726622][T10063] comedi: valid board names for pcmad driver are: [ 477.733468][T10063] pcmad12 [ 477.736564][T10063] pcmad16 [ 477.739901][T10063] comedi: valid board names for ni_labpc driver are: [ 477.746669][T10063] lab-pc-1200 [ 477.750353][T10063] lab-pc-1200ai [ 477.753993][T10063] lab-pc+ [ 477.757127][T10063] comedi: valid board names for atmio16 driver are: [ 477.763962][T10063] atmio16 [ 477.767061][T10063] atmio16d [ 477.770499][T10063] comedi: valid board names for ni_at_ao driver are: [ 477.777329][T10063] at-ao-6 [ 477.780411][T10063] at-ao-10 [ 477.783578][T10063] comedi: valid board names for ni_at_a2150 driver are: [ 477.791146][T10063] ni_at_a2150 [ 477.794768][T10063] comedi: valid board names for adq12b driver are: [ 477.802825][T10063] adq12b [ 477.810186][T10063] comedi: valid board names for mpc624 driver are: [ 477.818813][T10063] mpc624 [ 477.824820][T10063] comedi: valid board names for c6xdigio driver are: [ 477.832707][T10063] c6xdigio [ 477.836436][T10063] comedi: valid board names for aio_iiro_16 driver are: [ 477.843724][T10063] aio_iiro_16 [ 477.850349][T10063] comedi: valid board names for aio_aio12_8 driver are: [ 477.857729][T10063] aio_aio12_8 [ 477.861224][T10063] aio_ai12_8 [ 477.864639][T10063] aio_ao12_4 [ 477.868131][T10063] comedi: valid board names for fl512 driver are: [ 477.874686][T10063] fl512 [ 477.877891][T10063] comedi: valid board names for dmm32at driver are: [ 477.884614][T10063] dmm32at [ 477.888244][T10063] comedi: valid board names for dt282x driver are: [ 477.896272][T10063] dt2821 [ 477.900098][T10063] dt2821-f [ 477.903327][T10063] dt2821-g [ 477.906469][T10063] dt2823 [ 477.909594][T10063] dt2824-pgh [ 477.913032][T10063] dt2824-pgl [ 477.916405][T10063] dt2825 [ 477.920612][T10063] dt2827 [ 477.924166][T10063] dt2828 [ 477.927298][T10063] dt2829 [ 477.930482][T10063] dt21-ez [ 477.934743][T10063] dt23-ez [ 477.938103][T10063] dt24-ez [ 477.941784][T10063] dt24-ez-pgl [ 477.945504][T10063] comedi: valid board names for dt2817 driver are: [ 477.952989][T10063] dt2817 [ 477.956194][T10063] comedi: valid board names for dt2815 driver are: [ 477.963203][T10063] dt2815 [ 477.966375][T10063] comedi: valid board names for dt2814 driver are: [ 477.973644][T10063] dt2814 [ 477.976857][T10063] comedi: valid board names for dt2811 driver are: [ 477.984260][T10063] dt2811-pgh [ 477.987819][T10063] dt2811-pgl [ 477.991305][T10063] comedi: valid board names for dt2801 driver are: [ 478.010298][T10063] dt2801 [ 478.013731][T10063] comedi: valid board names for das6402 driver are: [ 478.020525][T10063] das6402-12 [ 478.023892][T10063] das6402-16 [ 478.027325][T10063] comedi: valid board names for das1800 driver are: [ 478.034026][T10063] das-1701st [ 478.037639][T10063] das-1701st-da [ 478.041832][T10063] das-1702st [ 478.045157][T10063] das-1702st-da [ 478.049896][T10063] das-1702hr [ 478.053593][T10063] das-1702hr-da [ 478.057524][T10063] das-1701ao [ 478.061069][T10063] das-1702ao [ 478.065662][T10063] das-1801st [ 478.069177][T10063] das-1801st-da [ 478.072868][T10063] das-1802st [ 478.076368][T10063] das-1802st-da [ 478.080323][T10063] das-1802hr [ 478.084092][T10063] das-1802hr-da [ 478.087868][T10063] das-1801hc [ 478.093094][T10063] das-1802hc [ 478.096484][T10063] das-1801ao [ 478.101882][T10063] das-1802ao [ 478.106456][T10063] comedi: valid board names for das800 driver are: [ 478.123023][T10063] das-800 [ 478.128027][T10063] cio-das800 [ 478.134178][T10063] das-801 [ 478.138550][T10063] cio-das801 [ 478.142049][T10063] das-802 [ 478.145139][T10063] cio-das802 [ 478.148841][T10063] cio-das802/16 [ 478.152469][T10063] comedi: valid board names for isa-das08 driver are: [ 478.159588][T10063] isa-das08 [ 478.162917][T10063] das08-pgm [ 478.166230][T10063] das08-pgh [ 478.169601][T10063] das08-pgl [ 478.172994][T10063] das08-aoh [ 478.176319][T10063] das08-aol [ 478.179764][T10063] das08-aom [ 478.183105][T10063] das08/jr-ao [ 478.186593][T10063] das08jr-16-ao [ 478.191394][T10063] pc104-das08 [ 478.195047][T10063] das08jr/16 [ 478.200575][T10063] comedi: valid board names for das16m1 driver are: [ 478.207469][T10063] das16m1 [ 478.210632][T10063] comedi: valid board names for dac02 driver are: [ 478.217164][T10063] dac02 [ 478.220302][T10063] comedi: valid board names for rti802 driver are: [ 478.226877][T10063] rti802 [ 478.229965][T10063] comedi: valid board names for rti800 driver are: [ 478.236553][T10063] rti800 [ 478.239806][T10063] rti815 [ 478.242847][T10063] comedi: valid board names for pcm3724 driver are: [ 478.249707][T10063] pcm3724 [ 478.252818][T10063] comedi: valid board names for pcl818 driver are: [ 478.259685][T10063] pcl818l [ 478.262819][T10063] pcl818h [ 478.265904][T10063] pcl818hd [ 478.269274][T10063] pcl818hg [ 478.272435][T10063] pcl818 [ 478.275419][T10063] pcl718 [ 478.278628][T10063] pcm3718 [ 478.281706][T10063] comedi: valid board names for pcl816 driver are: [ 478.288402][T10063] pcl816 [ 478.291415][T10063] pcl814b [ 478.294488][T10063] comedi: valid board names for pcl812 driver are: [ 478.301219][T10063] pcl812 [ 478.305741][T10063] pcl812pg [ 478.309043][T10063] acl8112pg [ 478.312326][T10063] acl8112dg [ 478.315573][T10063] acl8112hg [ 478.319090][T10063] a821pgl [ 478.322196][T10063] a821pglnda [ 478.325517][T10063] a821pgh [ 478.328747][T10063] a822pgl [ 478.331831][T10063] a822pgh [ 478.334920][T10063] a823pgl [ 478.338219][T10063] a823pgh [ 478.341324][T10063] pcl813 [ 478.344309][T10063] pcl813b [ 478.347518][T10063] acl8113 [ 478.350612][T10063] iso813 [ 478.353603][T10063] acl8216 [ 478.356694][T10063] a826pg [ 478.359922][T10063] comedi: valid board names for pcl730 driver are: [ 478.366524][T10063] pcl730 [ 478.369708][T10063] iso730 [ 478.372764][T10063] acl7130 [ 478.375881][T10063] pcm3730 [ 478.379119][T10063] pcl725 [ 478.382150][T10063] p8r8dio [ 478.385266][T10063] acl7225b [ 478.388560][T10063] p16r16dio [ 478.391872][T10063] pcl733 [ 478.394883][T10063] pcl734 [ 478.398484][T10063] opmm-1616-xt [ 478.402030][T10063] pearl-mm-p [ 478.406416][T10063] ir104-pbf [ 478.409787][T10063] comedi: valid board names for pcl726 driver are: [ 478.416369][T10063] pcl726 [ 478.419484][T10063] pcl727 [ 478.422472][T10063] pcl728 [ 478.425458][T10063] acl6126 [ 478.428676][T10063] acl6128 [ 478.431749][T10063] comedi: valid board names for pcl724 driver are: [ 478.438783][T10063] pcl724 [ 478.442145][T10063] pcl722 [ 478.446375][T10063] pcl731 [ 478.449490][T10063] acl7122 [ 478.452611][T10063] acl7124 [ 478.455690][T10063] pet48dio [ 478.458995][T10063] pcmio48 [ 478.462068][T10063] onyx-mm-dio [ 478.465526][T10063] comedi: valid board names for pcl711 driver are: [ 478.472198][T10063] pcl711 [ 478.475267][T10063] pcl711b [ 478.478626][T10063] acl8112hg [ 478.481923][T10063] acl8112dg [ 478.485268][T10063] comedi: valid board names for amplc_pc263 driver are: [ 478.492476][T10063] pc263 [ 478.495408][T10063] comedi: valid board names for amplc_pc236 driver are: [ 478.502582][T10063] pc36at [ 478.505602][T10063] comedi: valid board names for amplc_dio200 driver are: [ 478.514223][T10063] pc212e [ 478.517366][T10063] pc214e [ 478.520342][T10063] pc215e [ 478.523336][T10063] pc218e [ 478.526334][T10063] pc272e [ 478.529395][T10063] comedi: valid board names for comedi_parport driver are: [ 478.536628][T10063] comedi_parport [ 478.540469][T10063] comedi: valid board names for comedi_test driver are: [ 478.547647][T10063] comedi_test [ 478.551096][T10063] comedi: valid board names for comedi_bond driver are: [ 478.558261][T10063] comedi_bond [ 478.922335][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 479.184320][T10078] jffs2: notice: (10078) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 481.510154][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 481.741199][T10105] ceph: No mds server is up or the cluster is laggy [ 481.764380][ T7270] libceph: connect (1)[c::]:6789 error -101 [ 481.863242][ T7270] libceph: mon0 (1)[c::]:6789 connect error [ 483.302724][T10130] jffs2: notice: (10130) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 484.457399][ T5840] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 485.240177][T10150] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 485.417452][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 485.443669][ T5840] usb 2-1: config 2 has an invalid interface number: 111 but max is 0 [ 485.459147][ T5840] usb 2-1: config 2 has no interface number 0 [ 485.468039][ T5840] usb 2-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 485.487072][ T5840] usb 2-1: config 2 interface 111 has no altsetting 0 [ 485.496011][ T5840] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 485.505555][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.728175][ T5840] usb 2-1: string descriptor 0 read error: -71 [ 485.745589][ T5840] usb 2-1: USB disconnect, device number 11 [ 486.784950][T10173] ceph: No mds server is up or the cluster is laggy [ 486.799029][ T7270] libceph: connect (1)[c::]:6789 error -101 [ 486.863747][ T7270] libceph: mon0 (1)[c::]:6789 connect error [ 488.211220][T10182] jffs2: notice: (10182) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 488.570302][T10199] fuse: Bad value for 'fd' [ 488.827375][ T7270] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 489.017501][ T7270] usb 4-1: Using ep0 maxpacket: 8 [ 489.026568][ T7270] usb 4-1: config 2 has an invalid interface number: 111 but max is 0 [ 489.056262][ T7270] usb 4-1: config 2 has no interface number 0 [ 489.085840][ T7270] usb 4-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 489.139799][ T7270] usb 4-1: config 2 interface 111 has no altsetting 0 [ 489.173777][ T7270] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 489.209969][ T7270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.447037][ T7270] usb 4-1: string descriptor 0 read error: -71 [ 489.483174][ T7270] usb 4-1: USB disconnect, device number 12 [ 489.500272][T10212] jffs2: notice: (10212) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 492.413943][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 493.331259][T10267] jffs2: notice: (10267) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 494.916457][T10271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.605037][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 496.352399][T10298] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10298] [ 497.263369][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'. [ 499.264308][T10315] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.842578][T10331] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10331] [ 500.794036][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 501.771970][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.960780][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.256162][T10365] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10365] [ 504.077606][T10368] binder: 10367:10368 ioctl c0306201 0 returned -14 [ 504.156293][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 504.972919][T10390] UBIFS error (pid: 10390): cannot open "ubi0_0", error -19 [ 505.429190][T10397] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10397] [ 506.885549][T10418] MTRR 1 not used [ 508.110004][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 508.234410][T10434] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10434] [ 511.704369][T10497] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10497] [ 512.337397][ T5774] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 512.567435][T10503] kAFS: No cell specified [ 512.607386][ T5774] usb 4-1: Using ep0 maxpacket: 32 [ 512.609360][T10503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1405'. [ 512.648535][ T5774] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 512.670844][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.691761][ T5774] usb 4-1: Product: syz [ 512.701593][ T5774] usb 4-1: Manufacturer: syz [ 512.714299][ T5774] usb 4-1: SerialNumber: syz [ 512.750082][ T5774] usb 4-1: config 0 descriptor?? [ 512.937735][ T7270] libceph: connect (1)[c::]:6789 error -101 [ 512.949604][ T7270] libceph: mon0 (1)[c::]:6789 connect error [ 513.370731][ T7270] libceph: connect (1)[c::]:6789 error -101 [ 513.376819][ T7270] libceph: mon0 (1)[c::]:6789 connect error [ 513.397611][T10512] ceph: No mds server is up or the cluster is laggy [ 513.789106][ T5774] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 406225256 serial AE945BFA.BE99EB7A (2 channels) [ 513.825822][ T5774] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 513.850117][ T5774] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 513.918978][ T5774] peak_usb: probe of 4-1:0.0 failed with error -22 [ 514.000487][T10486] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1401'. [ 514.088707][T10486] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1401'. [ 514.187341][T10535] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10535] [ 517.759290][T10567] random: crng reseeded on system resumption [ 518.056847][ T5812] usb 4-1: USB disconnect, device number 13 [ 518.328565][T10580] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10580] [ 521.603496][T10614] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10614] [ 522.168240][T10615] tmpfs: Unknown parameter 'grpquota_b' [ 523.523425][T10630] sctp_transport_update_pmtu: 48 callbacks suppressed [ 523.523452][T10630] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 523.542472][T10630] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 523.553952][T10630] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 523.565987][T10630] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 523.580581][T10630] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 523.592391][T10630] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 523.604724][T10630] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 523.616389][T10630] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 523.628315][T10630] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 523.640056][T10630] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 525.220401][T10644] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10644] [ 526.390015][T10649] MTRR 1 not used [ 526.597116][T10653] tmpfs: Unknown parameter 'grpquota_block_har' [ 527.599109][ T9] libceph: connect (1)[c::]:6789 error -101 [ 527.643057][T10660] ceph: No mds server is up or the cluster is laggy [ 527.678776][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 528.465083][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 528.481498][T10665] gtp1: entered allmulticast mode [ 529.036589][T10678] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10678] [ 529.656373][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'. [ 529.843768][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1460'. [ 529.933166][T10691] tmpfs: Unknown parameter 'grpquota_block_har' [ 530.784223][T10694] MTRR 1 not used [ 533.535939][T10719] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10719] [ 533.605729][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'. [ 533.674208][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'. [ 534.261313][T10725] tmpfs: Unknown parameter 'grpquota_block_har' [ 535.225274][T10733] MTRR 1 not used [ 535.711305][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 537.036194][T10756] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10756] [ 537.277290][T10755] MTRR 1 not used [ 538.088746][T10765] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 539.380211][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'. [ 539.567578][ T5840] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 539.785483][ T5840] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 539.797315][ T5840] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 539.817910][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 539.844129][ T5840] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 539.857431][ T5840] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 539.884569][ T5840] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 539.894095][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 539.902258][ T5840] usb 4-1: Product: syz [ 539.906522][ T5840] usb 4-1: Manufacturer: syz [ 539.917907][ T5840] cdc_wdm 4-1:1.0: skipping garbage [ 539.923181][ T5840] cdc_wdm 4-1:1.0: skipping garbage [ 539.959497][ T5840] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 539.965551][ T5840] cdc_wdm 4-1:1.0: Unknown control protocol [ 540.196470][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 540.196482][ T5812] usb 4-1: USB disconnect, device number 14 [ 540.209279][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 540.215399][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 540.279771][T10788] MTRR 1 not used [ 541.248856][T10800] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 542.852696][T10812] CIFS: Attempting to mount //127.0.0.1/share [ 543.239852][T10812] CIFS: VFS: Error connecting to socket. Aborting operation. [ 543.263995][T10812] CIFS: VFS: cifs_mount failed w/return code = -111 [ 543.378234][T10821] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.387104][T10821] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.604975][T10829] MTRR 1 not used [ 544.507924][T10835] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 546.477921][T10860] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.338525][T10861] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 547.724578][T10872] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 547.777454][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 548.734031][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 548.749412][T10879] sctp_transport_update_pmtu: 48 callbacks suppressed [ 548.749437][T10879] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.769122][T10879] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.780894][T10879] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.792807][T10879] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.809023][T10879] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.821439][T10879] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.833538][T10879] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.845424][T10879] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.857696][T10879] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.869634][T10879] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 549.450193][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 549.478404][ T8] usb 2-1: can't read configurations, error -71 [ 549.684574][T10893] dummy0: entered allmulticast mode [ 549.692446][T10893] dummy0: left allmulticast mode [ 550.749453][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 550.755559][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 550.839566][T10894] ceph: No mds server is up or the cluster is laggy [ 551.487363][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 551.491957][T10922] netlink: 'syz.0.1538': attribute type 1 has an invalid length. [ 551.921075][T10922] netlink: 'syz.0.1538': attribute type 2 has an invalid length. [ 552.607345][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 552.632399][ T8] usb 2-1: config 2 has an invalid interface number: 111 but max is 0 [ 552.649024][ T8] usb 2-1: config 2 has no interface number 0 [ 552.655333][ T8] usb 2-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 552.687315][ T8] usb 2-1: config 2 interface 111 has no altsetting 0 [ 552.706628][ T8] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 552.717084][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.959889][ T8] usb 2-1: string descriptor 0 read error: -71 [ 553.678253][ T8] usb 2-1: USB disconnect, device number 14 [ 553.732090][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 553.749704][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 553.771930][T10934] ceph: No mds server is up or the cluster is laggy [ 553.967724][T10952] 9pnet_virtio: no channels available for device 127.0.0.1 [ 556.335176][ T5812] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 556.539923][ T5812] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 556.562614][ T5812] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 556.577409][ T5812] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 556.587435][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.665745][T10967] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 556.707164][ T5812] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 556.720926][T10984] 9pnet_virtio: no channels available for device 127.0.0.1 [ 556.974976][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 557.074880][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 557.082246][T10989] ceph: No mds server is up or the cluster is laggy [ 557.306825][T10995] vivid-001: disconnect [ 557.427666][ T789] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 557.677534][ T789] usb 3-1: Using ep0 maxpacket: 8 [ 557.770750][ T789] usb 3-1: config 2 has an invalid interface number: 111 but max is 0 [ 557.837679][ T789] usb 3-1: config 2 has no interface number 0 [ 557.859066][ T789] usb 3-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 557.923771][T10966] vivid-001: reconnect [ 557.930301][ T8] usb 4-1: USB disconnect, device number 15 [ 557.951814][ T789] usb 3-1: config 2 interface 111 has no altsetting 0 [ 557.965789][ T789] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 557.987058][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.256218][ T789] usb 3-1: string descriptor 0 read error: -71 [ 558.272703][ T789] usb 3-1: USB disconnect, device number 16 [ 560.464507][T11024] 9pnet_virtio: no channels available for device 127.0.0.1 [ 563.228285][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.234739][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.829966][T11066] 9pnet_virtio: no channels available for device 127.0.0.1 [ 565.037373][ T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 565.958517][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 565.971243][ T23] usb 3-1: config 2 has an invalid interface number: 111 but max is 0 [ 565.975810][T11076] kvm: kvm [11075]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffffffffffffff [ 565.979630][ T23] usb 3-1: config 2 has no interface number 0 [ 566.001278][ T23] usb 3-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 566.015281][T11074] sctp_transport_update_pmtu: 46 callbacks suppressed [ 566.015299][T11074] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.037391][ T23] usb 3-1: config 2 interface 111 has no altsetting 0 [ 566.046121][ T23] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 566.056221][T11074] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.067067][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.078279][T11074] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.089219][T11074] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.110237][T11074] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.122239][T11074] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.134063][T11074] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.145015][T11074] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.156088][T11074] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.173736][T11074] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.266211][T11082] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(855638020.1667391802.3982703204), cmd(13) [ 566.318558][ T23] usb 3-1: string descriptor 0 read error: -71 [ 566.378153][ T23] usb 3-1: USB disconnect, device number 17 [ 568.011327][T11105] 9pnet_virtio: no channels available for device 127.0.0.1 [ 569.032269][T11110] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 569.041726][T11110] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 569.051400][T11110] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 569.058529][ T28] audit: type=1800 audit(1786080702.169:3): pid=11110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1587" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 569.253391][T11120] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(855638020.1667391802.3982703204), cmd(13) [ 569.387693][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 570.358085][T11131] 9pnet_virtio: no channels available for device 127.0.0.1 [ 570.567328][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 571.927354][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 571.936563][ T23] usb 4-1: config 2 has an invalid interface number: 111 but max is 0 [ 571.959827][ T23] usb 4-1: config 2 has no interface number 0 [ 571.977987][ T23] usb 4-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 571.994652][ T23] usb 4-1: config 2 interface 111 has no altsetting 0 [ 572.006101][ T23] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 572.023263][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.299389][ T23] usb 4-1: string descriptor 0 read error: -71 [ 572.345633][ T23] usb 4-1: USB disconnect, device number 16 [ 572.435431][T11148] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(855638020.1667391802.3982703204), cmd(13) [ 572.627156][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 573.683325][T11161] 9pnet_virtio: no channels available for device 127.0.0.1 [ 573.858191][T11166] MTRR 1 not used [ 574.737599][T11167] ceph: No mds server is up or the cluster is laggy [ 574.748525][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 574.754628][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 575.457666][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1613'. [ 575.488955][T11184] gadgetfs: bound to dummy_udc driver [ 576.707354][ T5814] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 577.100142][T11201] 9pnet_virtio: no channels available for device 127.0.0.1 [ 577.147376][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 577.162419][ T5814] usb 2-1: config 2 has an invalid interface number: 111 but max is 0 [ 577.189915][ T5814] usb 2-1: config 2 has no interface number 0 [ 577.211424][ T5814] usb 2-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 577.464646][ T5814] usb 2-1: config 2 interface 111 has no altsetting 0 [ 578.219797][ T5814] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 578.288326][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.670986][T11217] MTRR 1 not used [ 578.735843][T11219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.095573][ T5814] usb 2-1: string descriptor 0 read error: -71 [ 579.513048][ T5814] usb 2-1: USB disconnect, device number 15 [ 579.813008][T11236] 9pnet_virtio: no channels available for device 127.0.0.1 [ 581.374007][T11244] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 581.388206][T11244] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 582.114695][T11260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.301321][T11265] MTRR 1 not used [ 584.240196][T11271] 9pnet_virtio: no channels available for device 127.0.0.1 [ 584.327738][T11227] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 584.527514][T11227] usb 3-1: Using ep0 maxpacket: 8 [ 584.543488][T11227] usb 3-1: config 2 has an invalid interface number: 111 but max is 0 [ 584.562908][T11227] usb 3-1: config 2 has no interface number 0 [ 584.604291][T11227] usb 3-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 584.683160][T11227] usb 3-1: config 2 interface 111 has no altsetting 0 [ 584.739212][T11227] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 584.815259][T11227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.705886][T11227] usb 3-1: string descriptor 0 read error: -71 [ 585.731731][T11227] usb 3-1: USB disconnect, device number 18 [ 585.852797][T11295] MTRR 1 not used [ 586.204350][T11299] 9pnet_virtio: no channels available for device 127.0.0.1 [ 588.506034][T11227] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 589.649137][T11227] usb 2-1: Using ep0 maxpacket: 8 [ 590.440251][T11227] usb 2-1: device descriptor read/all, error -71 [ 591.157050][T11334] 9pnet_virtio: no channels available for device 127.0.0.1 [ 591.255596][T11338] MTRR 1 not used [ 593.490195][T11346] ceph: No mds server is up or the cluster is laggy [ 593.500055][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 593.568088][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 593.736011][T11352] sctp_transport_update_pmtu: 48 callbacks suppressed [ 593.736023][T11352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.753518][T11352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.764949][T11352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.775931][T11352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.788124][T11352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.798901][T11352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.809500][T11352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.820709][T11352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.831504][T11352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 593.842139][T11352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 595.197404][ T5814] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 595.437931][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 595.493258][ T5814] usb 3-1: config 2 has an invalid interface number: 111 but max is 0 [ 595.576122][ T5814] usb 3-1: config 2 has no interface number 0 [ 595.631021][ T5814] usb 3-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 595.777869][ T5814] usb 3-1: config 2 interface 111 has no altsetting 0 [ 595.845239][ T5814] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 595.953028][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.478490][ T5814] usb 3-1: string descriptor 0 read error: -71 [ 597.553453][T11364] jffs2: notice: (11364) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 597.569294][T11371] 9pnet_virtio: no channels available for device 127.0.0.1 [ 597.582696][ T5814] usb 3-1: USB disconnect, device number 19 [ 598.601641][T11384] MTRR 1 not used [ 600.047627][T11393] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 600.327002][T11406] 9pnet_virtio: no channels available for device 127.0.0.1 [ 600.457339][ T5814] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 602.317805][T11223] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 602.497295][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 602.547519][T11223] usb 4-1: Using ep0 maxpacket: 8 [ 602.584957][T11223] usb 4-1: config 2 has an invalid interface number: 111 but max is 0 [ 602.704649][T11223] usb 4-1: config 2 has no interface number 0 [ 602.773326][T11223] usb 4-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 602.888717][T11223] usb 4-1: config 2 interface 111 has no altsetting 0 [ 602.945293][T11223] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 603.010272][T11223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.308599][T11223] usb 4-1: string descriptor 0 read error: -71 [ 603.324524][ T5814] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 603.337443][ T5814] usb 2-1: can't read configurations, error -71 [ 603.390889][T11223] usb 4-1: USB disconnect, device number 17 [ 603.519980][T11426] jffs2: notice: (11426) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 604.427500][T11431] MTRR 1 not used [ 606.220712][T11438] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 607.097577][T11225] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 607.398336][T11225] usb 3-1: Using ep0 maxpacket: 8 [ 607.423718][T11225] usb 3-1: config 2 has an invalid interface number: 111 but max is 0 [ 607.485036][T11225] usb 3-1: config 2 has no interface number 0 [ 607.551427][T11225] usb 3-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 607.670738][T11225] usb 3-1: config 2 interface 111 has no altsetting 0 [ 607.722100][T11225] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 607.791361][T11225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.812771][T11225] usb 3-1: string descriptor 0 read error: -71 [ 609.957828][T11225] usb 3-1: USB disconnect, device number 20 [ 610.347987][T11223] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 610.647510][T11223] usb 2-1: Using ep0 maxpacket: 16 [ 610.699029][T11223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.735281][T11465] Bluetooth: MGMT ver 1.22 [ 610.805309][T11223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 610.882194][T11223] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 611.039471][T11469] ceph: No mds server is up or the cluster is laggy [ 611.053906][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 611.133503][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 611.776585][T11223] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 611.789681][T11223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.085211][T11223] usb 2-1: config 0 descriptor?? [ 615.202157][ T5781] block nbd1: Receive control failed (result -32) [ 615.221203][ T5814] usb 2-1: USB disconnect, device number 20 [ 619.997752][T11225] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 620.217401][T11225] usb 2-1: Using ep0 maxpacket: 16 [ 620.251645][T11225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.264090][T11225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 620.276647][T11225] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 620.295218][T11225] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 620.304958][T11225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.345238][T11225] usb 2-1: config 0 descriptor?? [ 624.644491][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.650992][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.112297][ T5781] block nbd2: Receive control failed (result -32) [ 625.186554][T11227] usb 2-1: USB disconnect, device number 21 [ 625.408425][T11223] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 625.617551][T11223] usb 3-1: Using ep0 maxpacket: 8 [ 625.795934][T11223] usb 3-1: config 2 has an invalid interface number: 111 but max is 0 [ 625.869646][T11223] usb 3-1: config 2 has no interface number 0 [ 625.938182][T11223] usb 3-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 626.078697][T11223] usb 3-1: config 2 interface 111 has no altsetting 0 [ 626.140049][T11223] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 626.221413][T11223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.517101][T11223] usb 3-1: string descriptor 0 read error: -71 [ 626.528316][T11223] usb 3-1: USB disconnect, device number 21 [ 629.017787][T11223] libceph: connect (1)[c::]:6789 error -101 [ 629.024016][T11223] libceph: mon0 (1)[c::]:6789 connect error [ 629.116125][T11223] libceph: connect (1)[c::]:6789 error -101 [ 629.122555][T11223] libceph: mon0 (1)[c::]:6789 connect error [ 629.133818][T11551] ceph: No mds server is up or the cluster is laggy [ 629.688055][T11223] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 629.981648][T11223] usb 2-1: Using ep0 maxpacket: 16 [ 630.114973][T11223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.174885][T11223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 630.188535][T11223] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 630.707507][T11223] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 630.716610][T11223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.756100][T11223] usb 2-1: config 0 descriptor?? [ 634.261704][T11532] block nbd3: Receive control failed (result -32) [ 634.368971][T11223] usb 2-1: USB disconnect, device number 22 [ 636.497739][T10996] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 636.728967][T10996] usb 3-1: Using ep0 maxpacket: 8 [ 636.794723][T10996] usb 3-1: config 2 has an invalid interface number: 111 but max is 0 [ 636.936378][T10996] usb 3-1: config 2 has no interface number 0 [ 637.049242][T10996] usb 3-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 637.268188][T10996] usb 3-1: config 2 interface 111 has no altsetting 0 [ 637.375864][T10996] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 637.517996][T10996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.333334][T10996] usb 3-1: string descriptor 0 read error: -71 [ 639.378616][T10996] usb 3-1: USB disconnect, device number 22 [ 642.038741][T11646] Bluetooth: MGMT ver 1.22 [ 643.157672][ T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 644.427353][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 644.596312][T11658] netlink: 868 bytes leftover after parsing attributes in process `syz.3.1745'. [ 644.611689][ T23] usb 3-1: config 2 has an invalid interface number: 111 but max is 0 [ 644.637472][ T23] usb 3-1: config 2 has no interface number 0 [ 644.643778][ T23] usb 3-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 644.657913][ T23] usb 3-1: config 2 interface 111 has no altsetting 0 [ 644.658194][T11659] netlink: 868 bytes leftover after parsing attributes in process `syz.3.1745'. [ 644.664726][ T23] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 644.664754][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.705354][T11663] fuse: Unknown parameter 'grou00000000000000000000' [ 645.675897][ T23] usb 3-1: string descriptor 0 read error: -71 [ 645.782335][ T23] usb 3-1: USB disconnect, device number 23 [ 646.584761][T11679] MTRR 1 not used [ 646.944060][T11673] syzkaller0: entered promiscuous mode [ 646.968991][T11673] syzkaller0: entered allmulticast mode [ 649.082840][T11702] fuse: Unknown parameter 'grou00000000000000000000' [ 650.099410][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 650.293942][T11708] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1759'. [ 650.416084][T11712] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1759'. [ 650.747749][ T23] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 650.957760][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 650.966349][ T23] usb 2-1: config 2 has an invalid interface number: 111 but max is 0 [ 650.979215][ T23] usb 2-1: config 2 has no interface number 0 [ 651.010570][ T23] usb 2-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 651.089094][ T23] usb 2-1: config 2 interface 111 has no altsetting 0 [ 651.133926][ T23] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 651.188113][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.386836][ T23] usb 2-1: string descriptor 0 read error: -71 [ 653.412317][ T23] usb 2-1: USB disconnect, device number 23 [ 654.465265][T11718] MTRR 1 not used [ 657.408890][T11734] fuse: Unknown parameter 'grou00000000000000000000' [ 657.420867][T11736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1765'. [ 657.446358][T11736] netlink: 'syz.1.1765': attribute type 7 has an invalid length. [ 657.474555][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 658.547597][ T5814] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 659.507576][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 659.526870][ T5814] usb 2-1: config 2 has an invalid interface number: 111 but max is 0 [ 659.529901][T11749] MTRR 1 not used [ 659.558517][ T5814] usb 2-1: config 2 has no interface number 0 [ 659.581346][ T5814] usb 2-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 660.391773][ T5814] usb 2-1: config 2 interface 111 has no altsetting 0 [ 660.398842][ T5814] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 660.437340][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.807345][ T5814] usb 2-1: string descriptor 0 read error: -71 [ 661.841184][ T5814] usb 2-1: USB disconnect, device number 24 [ 662.195577][T11762] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1775'. [ 662.237020][T11766] fuse: Unknown parameter 'group_i00000000000000000000' [ 662.256980][T11764] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1775'. [ 663.465331][T11775] MTRR 1 not used [ 664.550823][ T28] audit: type=1326 audit(1786080797.689:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11759 comm="syz.1.1774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cf859e0d9 code=0x0 [ 664.645211][T11532] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 664.687568][T11532] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 664.696850][T11532] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 664.706418][T11532] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 664.714541][T11532] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 664.722108][T11532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 666.887010][T11532] Bluetooth: hci4: command tx timeout [ 667.069903][T11792] fuse: Unknown parameter 'group_i00000000000000000000' [ 667.127537][T11224] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 667.154370][T11410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.301105][T11778] chnl_net:caif_netlink_parms(): no params data found [ 667.367539][T11224] usb 3-1: Using ep0 maxpacket: 8 [ 668.213109][T11410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.213586][T11224] usb 3-1: device descriptor read/all, error -71 [ 668.512069][T11410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.560666][T11814] fuse: Unknown parameter 'group_i00000000000000000000' [ 668.681919][T11410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.798777][T11778] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.901091][T11778] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.930740][T11778] bridge_slave_0: entered allmulticast mode [ 668.957351][T11532] Bluetooth: hci4: command tx timeout [ 668.963693][T11778] bridge_slave_0: entered promiscuous mode [ 669.004564][T11827] sctp_transport_update_pmtu: 46 callbacks suppressed [ 669.004579][T11827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 669.022408][T11778] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.035236][T11778] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.042945][T11778] bridge_slave_1: entered allmulticast mode [ 669.056491][T11827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 669.071075][T11778] bridge_slave_1: entered promiscuous mode [ 669.084353][T11827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 669.115810][T11827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 669.270168][T11827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 669.286103][T11778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.297357][T11224] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 669.316294][T11827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 669.351517][T11778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.369514][T11827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 669.407154][T11827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 669.463132][T11827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 669.509319][T11827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 669.537011][T11778] team0: Port device team_slave_0 added [ 669.574736][T11778] team0: Port device team_slave_1 added [ 669.693831][T11778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.716650][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.746975][T11778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.803180][T11778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.827306][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.853635][T11778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.897325][T11224] usb 3-1: Using ep0 maxpacket: 16 [ 669.904625][T11224] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.915959][T11224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 669.932268][T11778] hsr_slave_0: entered promiscuous mode [ 669.938574][T11224] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 669.957734][T11778] hsr_slave_1: entered promiscuous mode [ 669.967485][T11778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.975093][T11778] Cannot create hsr debugfs directory [ 669.987368][T11224] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 669.995098][T11838] fuse: Unknown parameter 'group_id00000000000000000000' [ 670.007345][T11224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.028801][T11224] usb 3-1: config 0 descriptor?? [ 671.037385][ T5083] Bluetooth: hci4: command tx timeout [ 671.938647][T11532] block nbd4: Receive control failed (result -32) [ 671.960116][ T5814] usb 3-1: USB disconnect, device number 25 [ 672.055234][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1804'. [ 672.094272][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1804'. [ 672.244495][T11848] erspan0: entered promiscuous mode [ 672.298030][T11848] gretap0: entered promiscuous mode [ 672.785464][T11778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 672.805332][T11874] fuse: Unknown parameter 'group_id00000000000000000000' [ 672.855580][T11778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 672.873482][T11778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 672.932758][T11778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 673.117893][T11532] Bluetooth: hci4: command tx timeout [ 673.238460][T11886] jffs2: notice: (11886) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 673.794616][T11897] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 674.204539][T11778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.444851][T11778] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.568226][T11410] hsr_slave_0: left promiscuous mode [ 674.594982][T11410] hsr_slave_1: left promiscuous mode [ 674.608052][T11410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.626362][T11410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.690863][T11410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.163418][T11410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.180522][T11410] bridge_slave_1: left allmulticast mode [ 675.189057][T11410] bridge_slave_1: left promiscuous mode [ 675.203354][T11410] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.216184][T11410] bridge_slave_0: left allmulticast mode [ 675.223195][T11410] bridge_slave_0: left promiscuous mode [ 675.229645][T11410] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.263551][T11410] veth1_macvtap: left promiscuous mode [ 675.279156][T11410] veth0_macvtap: left promiscuous mode [ 675.291418][T11410] veth1_vlan: left promiscuous mode [ 675.334532][T11410] veth0_vlan: left promiscuous mode [ 677.262295][T11934] comedi: valid board names for 8255 driver are: [ 677.269079][T11934] 8255 [ 677.271837][T11934] comedi: valid board names for vmk80xx driver are: [ 677.278630][T11934] vmk80xx [ 677.281752][T11934] comedi: valid board names for usbduxsigma driver are: [ 677.288732][T11934] usbduxsigma [ 677.292088][T11934] comedi: valid board names for usbduxfast driver are: [ 677.301926][T11934] usbduxfast [ 677.305230][T11934] comedi: valid board names for usbdux driver are: [ 677.311769][T11934] usbdux [ 677.314704][T11934] comedi: valid board names for ni6501 driver are: [ 677.321298][T11934] ni6501 [ 677.324231][T11934] comedi: valid board names for dt9812 driver are: [ 677.330773][T11934] dt9812 [ 677.333722][T11934] comedi: valid board names for ni_labpc_cs driver are: [ 677.342362][T11934] ni_labpc_cs [ 677.345725][T11934] comedi: valid board names for ni_daq_700 driver are: [ 677.357205][T11934] ni_daq_700 [ 677.360591][T11934] comedi: valid board names for labpc_pci driver are: [ 677.367395][T11934] labpc_pci [ 677.370918][T11934] comedi: valid board names for adl_pci9118 driver are: [ 677.377873][T11934] pci9118dg [ 677.381061][T11934] pci9118hg [ 677.384243][T11934] pci9118hr [ 677.387926][T11934] comedi: valid board names for 8255_pci driver are: [ 677.394607][T11934] 8255_pci [ 677.397725][T11934] comedi: valid board names for s526 driver are: [ 677.404055][T11934] s526 [ 677.406804][T11934] comedi: valid board names for multiq3 driver are: [ 677.437972][T11934] multiq3 [ 677.441203][T11934] comedi: valid board names for pcmuio driver are: [ 677.448020][T11934] pcmuio48 [ 677.451216][T11934] pcmuio96 [ 677.454539][T11934] comedi: valid board names for pcmmio driver are: [ 677.461161][T11934] pcmmio [ 677.464171][T11934] comedi: valid board names for pcmda12 driver are: [ 677.471166][T11934] pcmda12 [ 677.474411][T11934] comedi: valid board names for pcmad driver are: [ 677.481075][T11934] pcmad12 [ 677.484194][T11934] pcmad16 [ 677.487338][T11934] comedi: valid board names for ni_labpc driver are: [ 677.494106][T11934] lab-pc-1200 [ 677.497577][T11934] lab-pc-1200ai [ 677.501185][T11934] lab-pc+ [ 677.504278][T11934] comedi: valid board names for atmio16 driver are: [ 677.510947][T11934] atmio16 [ 677.514102][T11934] atmio16d [ 677.517382][T11934] comedi: valid board names for ni_at_ao driver are: [ 677.524144][T11934] at-ao-6 [ 677.527302][T11934] at-ao-10 [ 677.530477][T11934] comedi: valid board names for ni_at_a2150 driver are: [ 677.537534][T11934] ni_at_a2150 [ 677.540978][T11934] comedi: valid board names for adq12b driver are: [ 677.547566][T11934] adq12b [ 677.550566][T11934] comedi: valid board names for mpc624 driver are: [ 677.557130][T11934] mpc624 [ 677.560158][T11934] comedi: valid board names for c6xdigio driver are: [ 677.566921][T11934] c6xdigio [ 677.570132][T11934] comedi: valid board names for aio_iiro_16 driver are: [ 677.577585][T11934] aio_iiro_16 [ 677.581163][T11934] comedi: valid board names for aio_aio12_8 driver are: [ 677.588229][T11934] aio_aio12_8 [ 677.591666][T11934] aio_ai12_8 [ 677.595014][T11934] aio_ao12_4 [ 677.598531][T11934] comedi: valid board names for fl512 driver are: [ 677.605075][T11934] fl512 [ 677.608027][T11934] comedi: valid board names for dmm32at driver are: [ 677.614676][T11934] dmm32at [ 677.617779][T11934] comedi: valid board names for dt282x driver are: [ 677.624340][T11934] dt2821 [ 677.627383][T11934] dt2821-f [ 677.630552][T11934] dt2821-g [ 677.633723][T11934] dt2823 [ 677.636720][T11934] dt2824-pgh [ 677.640094][T11934] dt2824-pgl [ 677.643429][T11934] dt2825 [ 677.646421][T11934] dt2827 [ 677.649441][T11934] dt2828 [ 677.652431][T11934] dt2829 [ 677.655418][T11934] dt21-ez [ 677.658530][T11934] dt23-ez [ 677.661612][T11934] dt24-ez [ 677.664689][T11934] dt24-ez-pgl [ 677.668164][T11934] comedi: valid board names for dt2817 driver are: [ 677.674747][T11934] dt2817 [ 677.678008][T11934] comedi: valid board names for dt2815 driver are: [ 677.684634][T11934] dt2815 [ 677.687657][T11934] comedi: valid board names for dt2814 driver are: [ 677.694503][T11934] dt2814 [ 677.697561][T11934] comedi: valid board names for dt2811 driver are: [ 677.704134][T11934] dt2811-pgh [ 677.707580][T11934] dt2811-pgl [ 677.710961][T11934] comedi: valid board names for dt2801 driver are: [ 677.717543][T11934] dt2801 [ 677.720546][T11934] comedi: valid board names for das6402 driver are: [ 677.727238][T11934] das6402-12 [ 677.730596][T11934] das6402-16 [ 677.733940][T11934] comedi: valid board names for das1800 driver are: [ 677.740629][T11934] das-1701st [ 677.743980][T11934] das-1701st-da [ 677.747609][T11934] das-1702st [ 677.750961][T11934] das-1702st-da [ 677.754571][T11934] das-1702hr [ 677.757998][T11934] das-1702hr-da [ 677.761602][T11934] das-1701ao [ 677.764946][T11934] das-1702ao [ 677.768318][T11934] das-1801st [ 677.771666][T11934] das-1801st-da [ 677.775267][T11934] das-1802st [ 677.778885][T11934] das-1802st-da [ 677.782562][T11934] das-1802hr [ 677.785913][T11934] das-1802hr-da [ 677.789534][T11934] das-1801hc [ 677.792884][T11934] das-1802hc [ 677.796242][T11934] das-1801ao [ 677.799614][T11934] das-1802ao [ 677.802958][T11934] comedi: valid board names for das800 driver are: [ 677.809537][T11934] das-800 [ 677.812622][T11934] cio-das800 [ 677.817957][T11934] das-801 [ 677.821009][T11934] cio-das801 [ 677.824278][T11934] das-802 [ 677.827336][T11934] cio-das802 [ 677.830605][T11934] cio-das802/16 [ 677.834135][T11934] comedi: valid board names for isa-das08 driver are: [ 677.841356][T11934] isa-das08 [ 677.844547][T11934] das08-pgm [ 677.847797][T11934] das08-pgh [ 677.850977][T11934] das08-pgl [ 677.854160][T11934] das08-aoh [ 677.857363][T11934] das08-aol [ 677.860542][T11934] das08-aom [ 677.863745][T11934] das08/jr-ao [ 677.867147][T11934] das08jr-16-ao [ 677.870755][T11934] pc104-das08 [ 677.874117][T11934] das08jr/16 [ 677.877422][T11934] comedi: valid board names for das16m1 driver are: [ 677.884333][T11934] das16m1 [ 677.887422][T11934] comedi: valid board names for dac02 driver are: [ 677.893826][T11934] dac02 [ 677.896661][T11934] comedi: valid board names for rti802 driver are: [ 677.903312][T11934] rti802 [ 677.906239][T11934] comedi: valid board names for rti800 driver are: [ 677.912762][T11934] rti800 [ 677.915683][T11934] rti815 [ 677.918642][T11934] comedi: valid board names for pcm3724 driver are: [ 677.925216][T11934] pcm3724 [ 677.928266][T11934] comedi: valid board names for pcl818 driver are: [ 677.934749][T11934] pcl818l [ 677.937790][T11934] pcl818h [ 677.940812][T11934] pcl818hd [ 677.943916][T11934] pcl818hg [ 677.947009][T11934] pcl818 [ 677.949967][T11934] pcl718 [ 677.952897][T11934] pcm3718 [ 677.955919][T11934] comedi: valid board names for pcl816 driver are: [ 677.962442][T11934] pcl816 [ 677.965366][T11934] pcl814b [ 677.968431][T11934] comedi: valid board names for pcl812 driver are: [ 677.974918][T11934] pcl812 [ 677.977874][T11934] pcl812pg [ 677.980967][T11934] acl8112pg [ 677.984460][T11934] acl8112dg [ 677.988020][T11934] acl8112hg [ 677.991425][T11934] a821pgl [ 677.994451][T11934] a821pglnda [ 677.997779][T11934] a821pgh [ 678.000789][T11934] a822pgl [ 678.003797][T11934] a822pgh [ 678.006842][T11934] a823pgl [ 678.009903][T11934] a823pgh [ 678.012927][T11934] pcl813 [ 678.015875][T11934] pcl813b [ 678.018916][T11934] acl8113 [ 678.021930][T11934] iso813 [ 678.024854][T11934] acl8216 [ 678.027892][T11934] a826pg [ 678.030811][T11934] comedi: valid board names for pcl730 driver are: [ 678.037315][T11934] pcl730 [ 678.040234][T11934] iso730 [ 678.043153][T11934] acl7130 [ 678.046157][T11934] pcm3730 [ 678.049198][T11934] pcl725 [ 678.052112][T11934] p8r8dio [ 678.055111][T11934] acl7225b [ 678.058233][T11934] p16r16dio [ 678.061413][T11934] pcl733 [ 678.064327][T11934] pcl734 [ 678.067296][T11934] opmm-1616-xt [ 678.070739][T11934] pearl-mm-p [ 678.074109][T11934] ir104-pbf [ 678.077353][T11934] comedi: valid board names for pcl726 driver are: [ 678.083848][T11934] pcl726 [ 678.087042][T11934] pcl727 [ 678.090005][T11934] pcl728 [ 678.092921][T11934] acl6126 [ 678.095948][T11934] acl6128 [ 678.098974][T11934] comedi: valid board names for pcl724 driver are: [ 678.105454][T11934] pcl724 [ 678.108406][T11934] pcl722 [ 678.111322][T11934] pcl731 [ 678.114237][T11934] acl7122 [ 678.117296][T11934] acl7124 [ 678.120300][T11934] pet48dio [ 678.123387][T11934] pcmio48 [ 678.126385][T11934] onyx-mm-dio [ 678.129829][T11934] comedi: valid board names for pcl711 driver are: [ 678.136310][T11934] pcl711 [ 678.139264][T11934] pcl711b [ 678.142266][T11934] acl8112hg [ 678.145458][T11934] acl8112dg [ 678.148676][T11934] comedi: valid board names for amplc_pc263 driver are: [ 678.155589][T11934] pc263 [ 678.158470][T11934] comedi: valid board names for amplc_pc236 driver are: [ 678.165383][T11934] pc36at [ 678.168328][T11934] comedi: valid board names for amplc_dio200 driver are: [ 678.175327][T11934] pc212e [ 678.178271][T11934] pc214e [ 678.181207][T11934] pc215e [ 678.184123][T11934] pc218e [ 678.187045][T11934] pc272e [ 678.190287][T11934] comedi: valid board names for comedi_parport driver are: [ 678.197530][T11934] comedi_parport [ 678.201148][T11934] comedi: valid board names for comedi_test driver are: [ 678.208126][T11934] comedi_test [ 678.211489][T11934] comedi: valid board names for comedi_bond driver are: [ 678.218433][T11934] comedi_bond [ 678.475590][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 678.482021][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 678.521703][T11942] ceph: No mds server is up or the cluster is laggy [ 678.930534][T11410] team0 (unregistering): Port device team_slave_1 removed [ 678.982311][T11410] team0 (unregistering): Port device team_slave_0 removed [ 679.542027][T11591] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.549190][T11591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.786899][T11591] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.795206][T11591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.810306][T11778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 680.822809][T11778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 682.193553][T11410] IPVS: stop unused estimator thread 0... [ 682.719508][T11977] netlink: 860 bytes leftover after parsing attributes in process `syz.1.1838'. [ 682.780902][T11980] netlink: 860 bytes leftover after parsing attributes in process `syz.1.1838'. [ 682.802490][T11778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.083532][T11778] veth0_vlan: entered promiscuous mode [ 685.125024][T11778] veth1_vlan: entered promiscuous mode [ 685.133247][T12012] MTRR 1 not used [ 685.144257][T12013] fuse: Bad value for 'user_id' [ 686.229810][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.236405][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.303158][T11778] veth0_macvtap: entered promiscuous mode [ 686.433676][T11778] veth1_macvtap: entered promiscuous mode [ 686.488229][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.527922][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.543284][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.557333][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.577875][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.595664][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.618974][T11778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.632885][T12030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1848'. [ 686.646401][T12030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1848'. [ 686.661747][T12030] gretap0: entered promiscuous mode [ 686.672177][T12030] gretap0: left promiscuous mode [ 686.698735][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.711272][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.723259][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.734477][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.747928][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.770483][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.782684][T11778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.860094][T11778] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.881898][T11778] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.907573][T11778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.928899][T11778] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.484860][T11595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.625445][T11595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.850596][T11579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.868105][T11579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.128468][T12053] fuse: Bad value for 'user_id' [ 688.380740][T11224] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 688.481542][T11224] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 688.526995][T12065] ================================================================== [ 688.527044][T12065] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x2114/0x25d0 [ 688.527200][T12065] Write of size 4 at addr ffffc90003d49ff8 by task syz.3.1854/12065 [ 688.527221][T12065] [ 688.527265][T12065] CPU: 0 PID: 12065 Comm: syz.3.1854 Not tainted syzkaller #0 [ 688.527324][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 688.527340][T12065] Call Trace: [ 688.527373][T12065] [ 688.527416][T12065] dump_stack_lvl+0x18c/0x250 [ 688.527529][T12065] ? sys_imageblit+0x2114/0x25d0 [ 688.527583][T12065] ? show_regs_print_info+0x20/0x20 [ 688.527603][T12065] ? load_image+0x420/0x420 [ 688.527649][T12065] print_report+0xa8/0x210 [ 688.527666][T12065] ? sys_imageblit+0x2114/0x25d0 [ 688.527691][T12065] kasan_report+0x117/0x150 [ 688.527746][T12065] ? sys_imageblit+0x2114/0x25d0 [ 688.527776][T12065] sys_imageblit+0x2114/0x25d0 [ 688.527810][T12065] ? sys_copyarea+0x2530/0x2530 [ 688.527839][T12065] ? wq_worker_last_func+0x40/0x40 [ 688.527877][T12065] ? try_to_wake_up+0x6c3/0x10e0 [ 688.527899][T12065] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 688.527943][T12065] cw_putcs+0x15f3/0x18a0 [ 688.527983][T12065] ? cw_clear+0x250/0x250 [ 688.528009][T12065] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 688.528032][T12065] ? fb_get_color_depth+0x162/0x280 [ 688.528053][T12065] fbcon_putcs+0x35c/0x520 [ 688.528077][T12065] ? cw_clear+0x250/0x250 [ 688.528101][T12065] do_update_region+0x4e9/0x640 [ 688.528133][T12065] ? __asan_memcpy+0x40/0x70 [ 688.528161][T12065] ? hide_cursor+0x320/0x320 [ 688.528185][T12065] redraw_screen+0xa30/0x1000 [ 688.528205][T12065] ? _raw_spin_unlock+0x40/0x40 [ 688.528292][T12065] ? clear_buffer_attributes+0x320/0x320 [ 688.528316][T12065] ? tty_do_resize+0xe1/0x120 [ 688.528344][T12065] vc_do_resize+0x1256/0x17f0 [ 688.528377][T12065] ? vc_resize+0x50/0x50 [ 688.528403][T12065] fbcon_do_set_font+0xb5c/0x1ae0 [ 688.528436][T12065] ? fbcon_blank+0xb40/0xb40 [ 688.528458][T12065] con_font_op+0xc3c/0xf60 [ 688.528483][T12065] ? reset_palette+0xdd0/0xdd0 [ 688.528507][T12065] ? __might_fault+0xaa/0x120 [ 688.528543][T12065] ? __lock_acquire+0x7d80/0x7d80 [ 688.528574][T12065] ? apparmor_capable+0x137/0x1a0 [ 688.528613][T12065] ? __might_fault+0xaa/0x120 [ 688.528631][T12065] ? __might_fault+0xc6/0x120 [ 688.528648][T12065] ? __might_fault+0xaa/0x120 [ 688.528668][T12065] vt_ioctl+0x1a07/0x1f00 [ 688.528696][T12065] ? __vt_event_wait+0x260/0x260 [ 688.528732][T12065] ? __fget_files+0x28/0x460 [ 688.528765][T12065] ? tty_jobctrl_ioctl+0x378/0xba0 [ 688.528788][T12065] tty_ioctl+0x91e/0xdc0 [ 688.528810][T12065] ? tty_get_icount+0xb0/0xb0 [ 688.528832][T12065] __se_sys_ioctl+0xfd/0x170 [ 688.528856][T12065] do_syscall_64+0x55/0xb0 [ 688.528874][T12065] ? clear_bhb_loop+0x40/0x90 [ 688.528959][T12065] ? clear_bhb_loop+0x40/0x90 [ 688.528979][T12065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 688.529004][T12065] RIP: 0033:0x7f2d14f9e0d9 [ 688.529054][T12065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.529098][T12065] RSP: 002b:00007f2d15ea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.529148][T12065] RAX: ffffffffffffffda RBX: 00007f2d15226180 RCX: 00007f2d14f9e0d9 [ 688.529163][T12065] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 0000000000000007 [ 688.529176][T12065] RBP: 00007f2d15035024 R08: 0000000000000000 R09: 0000000000000000 [ 688.529188][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.529199][T12065] R13: 00007f2d15226218 R14: 00007f2d15226180 R15: 00007ffe14860668 [ 688.529219][T12065] [ 688.529226][T12065] [ 688.529230][T12065] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003d4a000 allocated at drm_gem_shmem_vmap+0x3c4/0x650 [ 688.529291][T12065] Memory state around the buggy address: [ 688.529331][T12065] ffffc90003d49e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 688.529344][T12065] ffffc90003d49f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 688.529355][T12065] >ffffc90003d49f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 688.529364][T12065] ^ [ 688.529376][T12065] ffffc90003d4a000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 688.529387][T12065] ffffc90003d4a080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 688.529396][T12065] ================================================================== [ 688.529491][T12065] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 688.529501][T12065] CPU: 0 PID: 12065 Comm: syz.3.1854 Not tainted syzkaller #0 [ 688.529520][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 688.529530][T12065] Call Trace: [ 688.529540][T12065] [ 688.529545][T12065] dump_stack_lvl+0x18c/0x250 [ 688.529567][T12065] ? show_regs_print_info+0x20/0x20 [ 688.529584][T12065] ? load_image+0x420/0x420 [ 688.529613][T12065] panic+0x2ca/0x720 [ 688.529635][T12065] ? bpf_jit_dump+0xd0/0xd0 [ 688.529657][T12065] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 688.529682][T12065] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 688.529704][T12065] ? _raw_spin_unlock+0x40/0x40 [ 688.529735][T12065] ? print_memory_metadata+0x314/0x400 [ 688.529753][T12065] ? sys_imageblit+0x2114/0x25d0 [ 688.529780][T12065] check_panic_on_warn+0x84/0xa0 [ 688.529801][T12065] ? sys_imageblit+0x2114/0x25d0 [ 688.529825][T12065] end_report+0x6f/0x130 [ 688.529845][T12065] kasan_report+0x128/0x150 [ 688.529866][T12065] ? sys_imageblit+0x2114/0x25d0 [ 688.529894][T12065] sys_imageblit+0x2114/0x25d0 [ 688.529924][T12065] ? sys_copyarea+0x2530/0x2530 [ 688.529951][T12065] ? wq_worker_last_func+0x40/0x40 [ 688.529968][T12065] ? try_to_wake_up+0x6c3/0x10e0 [ 688.529988][T12065] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 688.530012][T12065] cw_putcs+0x15f3/0x18a0 [ 688.530048][T12065] ? cw_clear+0x250/0x250 [ 688.530072][T12065] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 688.530094][T12065] ? fb_get_color_depth+0x162/0x280 [ 688.530115][T12065] fbcon_putcs+0x35c/0x520 [ 688.530138][T12065] ? cw_clear+0x250/0x250 [ 688.530161][T12065] do_update_region+0x4e9/0x640 [ 688.530182][T12065] ? __asan_memcpy+0x40/0x70 [ 688.530208][T12065] ? hide_cursor+0x320/0x320 [ 688.530231][T12065] redraw_screen+0xa30/0x1000 [ 688.530250][T12065] ? _raw_spin_unlock+0x40/0x40 [ 688.530277][T12065] ? clear_buffer_attributes+0x320/0x320 [ 688.530299][T12065] ? tty_do_resize+0xe1/0x120 [ 688.530321][T12065] vc_do_resize+0x1256/0x17f0 [ 688.530353][T12065] ? vc_resize+0x50/0x50 [ 688.530378][T12065] fbcon_do_set_font+0xb5c/0x1ae0 [ 688.530410][T12065] ? fbcon_blank+0xb40/0xb40 [ 688.530432][T12065] con_font_op+0xc3c/0xf60 [ 688.530456][T12065] ? reset_palette+0xdd0/0xdd0 [ 688.530480][T12065] ? __might_fault+0xaa/0x120 [ 688.530499][T12065] ? __lock_acquire+0x7d80/0x7d80 [ 688.530519][T12065] ? apparmor_capable+0x137/0x1a0 [ 688.530537][T12065] ? __might_fault+0xaa/0x120 [ 688.530554][T12065] ? __might_fault+0xc6/0x120 [ 688.530571][T12065] ? __might_fault+0xaa/0x120 [ 688.530591][T12065] vt_ioctl+0x1a07/0x1f00 [ 688.530617][T12065] ? __vt_event_wait+0x260/0x260 [ 688.530645][T12065] ? __fget_files+0x28/0x460 [ 688.530669][T12065] ? tty_jobctrl_ioctl+0x378/0xba0 [ 688.530690][T12065] tty_ioctl+0x91e/0xdc0 [ 688.530719][T12065] ? tty_get_icount+0xb0/0xb0 [ 688.530740][T12065] __se_sys_ioctl+0xfd/0x170 [ 688.530764][T12065] do_syscall_64+0x55/0xb0 [ 688.530782][T12065] ? clear_bhb_loop+0x40/0x90 [ 688.530801][T12065] ? clear_bhb_loop+0x40/0x90 [ 688.530821][T12065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 688.530840][T12065] RIP: 0033:0x7f2d14f9e0d9 [ 688.530855][T12065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.530870][T12065] RSP: 002b:00007f2d15ea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.530889][T12065] RAX: ffffffffffffffda RBX: 00007f2d15226180 RCX: 00007f2d14f9e0d9 [ 688.530903][T12065] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 0000000000000007 [ 688.530915][T12065] RBP: 00007f2d15035024 R08: 0000000000000000 R09: 0000000000000000 [ 688.530927][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.530939][T12065] R13: 00007f2d15226218 R14: 00007f2d15226180 R15: 00007ffe14860668 [ 688.530959][T12065] [ 688.531307][T12065] Kernel Offset: disabled