last executing test programs: 15.734264268s ago: executing program 0 (id=1715): syz_io_uring_setup(0xb5c, 0x0, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYRES8=r2, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 15.2820302s ago: executing program 1 (id=1716): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_setup(0x666, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 14.326796857s ago: executing program 0 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) getresuid(&(0x7f0000000180), 0x0, 0x0) fstat(r2, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_usb_connect$uac2(0x3, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x2b53, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x4, 0x60, 0xe, {0x8, 0xb, 0x2, 0x2, 0x1, 0x6, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x2, 0xe, 0x1}, [@selector_unit={0x5, 0x24, 0xb, 0x14}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0xba, 0x5, {0x8, 0x25, 0x1, 0x3, 0x3f, 0xf, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x6, 0x7, {0x8, 0x25, 0x1, 0x3, 0x3f, 0x1, 0x9}}}}}}}}]}}, 0x0) 14.241448621s ago: executing program 1 (id=1719): syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) 13.468067289s ago: executing program 3 (id=1721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f00000004c0)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 12.84195146s ago: executing program 3 (id=1723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x4000300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995af"], 0x14b0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000240)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000bc0)={0x424, 0x3f4, 0x300, 0x70bd25, 0x25dfdbfc, {0x5, 0x1, 0xf, [0x3, 0x401, 0x9, 0x7da, 0x203, 0x3, 0xed34, 0x1000, 0x2b7, 0x4, 0x5, 0x4, 0x4, 0x2, 0x2506, 0x3, 0x8, 0xc5c, 0xb, 0x5, 0xfffffffb, 0x9, 0x5, 0xf, 0x10001, 0x401, 0xffffff80, 0x241, 0x8, 0x8, 0x2, 0x8, 0x7, 0x1, 0x1, 0x9, 0x1ff, 0x6, 0x1, 0x8, 0x6, 0x9, 0x7, 0x6e4, 0x2, 0x40000000, 0x7, 0x9, 0x10, 0x7, 0x4, 0x4, 0x6, 0xa82a, 0x5, 0x400, 0x4, 0x6, 0x116, 0x0, 0x8, 0x2, 0x9, 0x8], [0xebaa, 0x8, 0x3, 0x1, 0xa, 0x6, 0x2, 0x2, 0x5, 0x4, 0x9, 0xfffffffd, 0x1, 0x9, 0x401, 0x5, 0x79ed6eaa, 0x73, 0xfffffffa, 0x3, 0x9419, 0x5, 0x5, 0x80000001, 0x1, 0x10, 0x7bbe, 0x3, 0x0, 0xfffffffe, 0x3, 0x5f9, 0xe5a, 0x2, 0x3fe000, 0x9, 0x4, 0x5, 0x7fff, 0x6, 0x2, 0xb, 0x2, 0x401, 0x3, 0x80, 0x9, 0x6e0, 0x9, 0xe, 0x1, 0x9, 0xde, 0xd0e4, 0x1000, 0x8001000, 0xf1b, 0x401, 0x2, 0x1, 0xd, 0x6, 0x7, 0x40], [0x2, 0x5, 0x670, 0x9, 0x5, 0x0, 0xffffffff, 0x8, 0x8, 0x4, 0x5, 0xd, 0xeaa, 0xe, 0x9, 0xffffffa4, 0x8, 0xca93, 0xf8000000, 0x0, 0xde, 0x8, 0x10, 0x3, 0x6, 0x4, 0x3, 0x7fff, 0x6, 0x7, 0x5, 0x800, 0x4, 0x6, 0x5, 0x1, 0x5, 0x4, 0x6, 0x4, 0x5, 0xbe, 0x10, 0x9, 0x5, 0x4, 0x100003ff, 0x9, 0x1, 0x100, 0xd, 0xe58d, 0x3, 0x1, 0x5, 0x2, 0x3, 0x2, 0x30, 0x2d0defeb, 0x7, 0xffffff80, 0x3], [0x524bac62, 0x400, 0x8001, 0x10, 0x4, 0xfffffffd, 0x2, 0x73, 0x80, 0x200, 0x3ff, 0xffffffff, 0x700000, 0x40, 0x12, 0xf1e3, 0x7, 0xe0000, 0x8, 0x32c8, 0x4cec, 0x3, 0x7f, 0xffffffff, 0x6, 0xfffffffc, 0x8, 0x2, 0xfffffffd, 0x4, 0x9, 0x9, 0x0, 0x0, 0xad1, 0x8000, 0x0, 0x7, 0x0, 0x5757, 0x4, 0xf, 0x46, 0x4, 0x4, 0x100, 0x81, 0x1, 0x0, 0x1, 0x7fff, 0x1ff, 0x3, 0x4, 0x3, 0x6, 0x40, 0x4, 0xb786, 0xffff, 0xe, 0x1ff], 0x3, ['\x00', '\x00', '\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e1e, 0x2, @mcast1, 0xfffffffd}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50424752}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) 11.578788351s ago: executing program 1 (id=1726): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000480)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'lblcr\x00', 0x28, 0x5, 0x72}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 10.566240711s ago: executing program 4 (id=1728): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0x1}, 0x6) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 9.787011079s ago: executing program 1 (id=1729): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_setup(0x666, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 9.451533096s ago: executing program 3 (id=1730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0xb, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = eventfd(0x227f) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000180)=r7) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) 8.947686721s ago: executing program 1 (id=1732): creat(&(0x7f0000000080)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000340)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x811) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)) 8.263773974s ago: executing program 2 (id=1733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f00000004c0)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 8.215110137s ago: executing program 4 (id=1734): socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x7fffffff, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @result={0x2, 0x2}}], 0x38) read$hidraw(r3, 0x0, 0x0) 8.010084697s ago: executing program 0 (id=1735): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_pgetevents(0x0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0xa) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000001580)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r5, r6}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5, r4}, 0xc) close(r3) socket(0x10, 0x803, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0xd54b, 0x2, 0x4, 0x345}) io_uring_enter(r7, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) 7.972593348s ago: executing program 2 (id=1736): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0x44e02) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0400010001100000"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x13d) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, 0x0) 6.92114543s ago: executing program 4 (id=1737): fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x24}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) 6.885727182s ago: executing program 2 (id=1738): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[@ANYBLOB="34000000000801010000000000c300000300000209000100730004800500030006000000"], 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001800010027bd050005fef50415000300030000200403000013f907000000000004000000"], 0x34}, 0x1, 0x0, 0x0, 0x805936d41ec618b7}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x8c200, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a010200"], 0xe4}}, 0x0) io_uring_setup(0x243f, &(0x7f0000000200)={0x0, 0xfffffffb, 0x1000, 0x2, 0x2b}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0xffffffb2) syz_emit_ethernet(0x70, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x2, 0x5, 0x62, 0x67, 0x0, 0x2, 0x21, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0xf, 0xfe, [@loopback, @remote, @multicast1]}]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0x9, 0x1, "5e82e6", 0x2, ':]k'}, "4fbac72fac5bf3bbecdb3044df360ef32e9fb7ec5d5a399aee4fc3c61c438aeeb00f417d676b814280430ded1d68"}}}}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x300, 0x0, 0x0, 0x1a0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [0x0, 0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) 6.7057582s ago: executing program 0 (id=1739): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000480)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'lblcr\x00', 0x28, 0x5, 0x72}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 5.959479118s ago: executing program 4 (id=1740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x4000300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995af"], 0x14b0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000240)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000bc0)={0x424, 0x3f4, 0x300, 0x70bd25, 0x25dfdbfc, {0x5, 0x1, 0xf, [0x3, 0x401, 0x9, 0x7da, 0x203, 0x3, 0xed34, 0x1000, 0x2b7, 0x4, 0x5, 0x4, 0x4, 0x2, 0x2506, 0x3, 0x8, 0xc5c, 0xb, 0x5, 0xfffffffb, 0x9, 0x5, 0xf, 0x10001, 0x401, 0xffffff80, 0x241, 0x8, 0x8, 0x2, 0x8, 0x7, 0x1, 0x1, 0x9, 0x1ff, 0x6, 0x1, 0x8, 0x6, 0x9, 0x7, 0x6e4, 0x2, 0x40000000, 0x7, 0x9, 0x10, 0x7, 0x4, 0x4, 0x6, 0xa82a, 0x5, 0x400, 0x4, 0x6, 0x116, 0x0, 0x8, 0x2, 0x9, 0x8], [0xebaa, 0x8, 0x3, 0x1, 0xa, 0x6, 0x2, 0x2, 0x5, 0x4, 0x9, 0xfffffffd, 0x1, 0x9, 0x401, 0x5, 0x79ed6eaa, 0x73, 0xfffffffa, 0x3, 0x9419, 0x5, 0x5, 0x80000001, 0x1, 0x10, 0x7bbe, 0x3, 0x0, 0xfffffffe, 0x3, 0x5f9, 0xe5a, 0x2, 0x3fe000, 0x9, 0x4, 0x5, 0x7fff, 0x6, 0x2, 0xb, 0x2, 0x401, 0x3, 0x80, 0x9, 0x6e0, 0x9, 0xe, 0x1, 0x9, 0xde, 0xd0e4, 0x1000, 0x8001000, 0xf1b, 0x401, 0x2, 0x1, 0xd, 0x6, 0x7, 0x40], [0x2, 0x5, 0x670, 0x9, 0x5, 0x0, 0xffffffff, 0x8, 0x8, 0x4, 0x5, 0xd, 0xeaa, 0xe, 0x9, 0xffffffa4, 0x8, 0xca93, 0xf8000000, 0x0, 0xde, 0x8, 0x10, 0x3, 0x6, 0x4, 0x3, 0x7fff, 0x6, 0x7, 0x5, 0x800, 0x4, 0x6, 0x5, 0x1, 0x5, 0x4, 0x6, 0x4, 0x5, 0xbe, 0x10, 0x9, 0x5, 0x4, 0x100003ff, 0x9, 0x1, 0x100, 0xd, 0xe58d, 0x3, 0x1, 0x5, 0x2, 0x3, 0x2, 0x30, 0x2d0defeb, 0x7, 0xffffff80, 0x3], [0x524bac62, 0x400, 0x8001, 0x10, 0x4, 0xfffffffd, 0x2, 0x73, 0x80, 0x200, 0x3ff, 0xffffffff, 0x700000, 0x40, 0x12, 0xf1e3, 0x7, 0xe0000, 0x8, 0x32c8, 0x4cec, 0x3, 0x7f, 0xffffffff, 0x6, 0xfffffffc, 0x8, 0x2, 0xfffffffd, 0x4, 0x9, 0x9, 0x0, 0x0, 0xad1, 0x8000, 0x0, 0x7, 0x0, 0x5757, 0x4, 0xf, 0x46, 0x4, 0x4, 0x100, 0x81, 0x1, 0x0, 0x1, 0x7fff, 0x1ff, 0x3, 0x4, 0x3, 0x6, 0x40, 0x4, 0xb786, 0xffff, 0xe, 0x1ff], 0x3, ['\x00', '\x00', '\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e1e, 0x2, @mcast1, 0xfffffffd}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50424752}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) 3.736340046s ago: executing program 0 (id=1741): syz_io_uring_setup(0xb5c, 0x0, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYRES8=r2, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 3.735809366s ago: executing program 4 (id=1742): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_setup(0x666, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 3.685079219s ago: executing program 2 (id=1743): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xa812, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0xe) openat$vcsa(0xffffffffffffff9c, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) 2.518341596s ago: executing program 4 (id=1744): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0x1}, 0x6) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 2.422165691s ago: executing program 0 (id=1745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) getresuid(&(0x7f0000000180), 0x0, 0x0) fstat(r2, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_usb_connect$uac2(0x3, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x2b53, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x4, 0x60, 0xe, {0x8, 0xb, 0x2, 0x2, 0x1, 0x6, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x2, 0xe, 0x1}, [@selector_unit={0x5, 0x24, 0xb, 0x14}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0xba, 0x5, {0x8, 0x25, 0x1, 0x3, 0x3f, 0xf, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x6, 0x7, {0x8, 0x25, 0x1, 0x3, 0x3f, 0x1, 0x9}}}}}}}}]}}, 0x0) 2.272681838s ago: executing program 3 (id=1746): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, 0x0, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100}, 0x0) connect$ax25(r1, &(0x7f0000000180)={{0x3, @bcast, 0x8}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) timer_create(0x3, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, 0x0) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f00000000c0)=0xff3b) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='bfs\x00', 0x10008, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x800000, 0x31, r3, 0xffffc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.848555969s ago: executing program 2 (id=1747): socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x7fffffff, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @result={0x2, 0x2}}], 0x38) read$hidraw(r3, 0x0, 0x0) 1.732293784s ago: executing program 1 (id=1748): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0x44e02) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0400010001100000"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x13d) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, 0x0) 1.677158917s ago: executing program 3 (id=1749): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) 2.332049ms ago: executing program 3 (id=1750): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000080)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0xd8080, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 0s ago: executing program 2 (id=1751): pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) kernel console output (not intermixed with test programs): B3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 221.052449][ T5721] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 222.813565][ T5746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 222.843567][ T5746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 223.458323][ T5754] UBIFS error (pid: 5754): cannot open "(null)", error -22 [ 224.539448][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 224.571476][ T5748] netlink: 'syz.3.383': attribute type 10 has an invalid length. [ 225.172211][ T5748] netlink: 40 bytes leftover after parsing attributes in process `syz.3.383'. [ 225.709077][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 227.182271][ T5767] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 228.244606][ T5790] netlink: 'syz.2.396': attribute type 13 has an invalid length. [ 228.264179][ T5790] gretap0: refused to change device tx_queue_len [ 228.270771][ T5790] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 228.540304][ T5791] Cannot find del_set index 2 as target [ 229.015593][ T4287] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 232.090597][ T4287] Bluetooth: hci3: Unknown advertising packet type: 0x7773 [ 232.090649][ T4287] Bluetooth: hci3: Malformed LE Event: 0x0d [ 232.669580][ T4313] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 232.749450][ T5819] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 232.898022][ T4313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.949685][ T4313] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 233.007527][ T4313] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.044513][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.166105][ T4313] usb 3-1: config 0 descriptor?? [ 233.384115][ T4313] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 234.561737][ T3598] usb 3-1: USB disconnect, device number 5 [ 235.982105][ T5842] netlink: 'syz.2.411': attribute type 13 has an invalid length. [ 235.992444][ T5842] gretap0: refused to change device tx_queue_len [ 236.001637][ T5842] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 238.056365][ T5861] netlink: 'syz.2.414': attribute type 10 has an invalid length. [ 238.076452][ T5861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.414'. [ 239.988231][ T5882] Cannot find del_set index 2 as target [ 240.975088][ T4287] Bluetooth: hci2: Unknown advertising packet type: 0x7773 [ 240.975163][ T4287] Bluetooth: hci2: Malformed LE Event: 0x0d [ 242.028008][ T5884] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 244.210632][ T5927] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 245.145428][ T4287] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 247.210046][ T5934] netlink: 'syz.2.437': attribute type 10 has an invalid length. [ 247.225293][ T5934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.437'. [ 249.304944][ T5953] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 249.867435][ T5988] netlink: 'syz.3.454': attribute type 10 has an invalid length. [ 249.905744][ T5988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.454'. [ 250.060919][ T5998] Cannot find del_set index 2 as target [ 251.672259][ T126] libceph: connect (1)[c::]:6789 error -101 [ 251.680260][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 251.895876][ T4286] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 251.964488][ T27] libceph: connect (1)[c::]:6789 error -101 [ 253.342515][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 253.857280][ T126] libceph: connect (1)[c::]:6789 error -101 [ 253.864140][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 254.511632][ T6006] ceph: No mds server is up or the cluster is laggy [ 254.949769][ T3598] libceph: connect (1)[c::]:6789 error -101 [ 255.351933][ T3598] libceph: mon0 (1)[c::]:6789 connect error [ 255.361287][ T126] libceph: connect (1)[c::]:6789 error -101 [ 255.372099][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 255.577052][ T6037] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 255.686944][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.693256][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.897016][ T6051] Cannot find del_set index 2 as target [ 255.905341][ T6045] netlink: 'syz.4.467': attribute type 10 has an invalid length. [ 255.913146][ T6045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.467'. [ 260.521338][ T4286] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 262.647891][ T4286] Bluetooth: hci0: Unknown advertising packet type: 0x7773 [ 262.648888][ T4286] Bluetooth: hci0: Malformed LE Event: 0x0d [ 266.161196][ T6129] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 266.241850][ T6149] netlink: 'syz.3.490': attribute type 10 has an invalid length. [ 266.308180][ T6149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.490'. [ 267.800154][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 267.814695][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 269.169996][ T4286] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 273.345983][ T6193] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 273.352730][ T6193] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 273.382468][ T6194] vhci_hcd: connection closed [ 273.407081][ T6193] vhci_hcd vhci_hcd.0: Device attached [ 273.615699][ T4287] Bluetooth: hci0: Unknown advertising packet type: 0x7773 [ 273.615745][ T4287] Bluetooth: hci0: Malformed LE Event: 0x0d [ 273.654076][ T27] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 274.257584][ T33] vhci_hcd: stop threads [ 274.285347][ T33] vhci_hcd: release socket [ 274.350228][ T33] vhci_hcd: disconnect device [ 275.463707][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 275.480376][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 277.491039][ T6233] UBIFS error (pid: 6233): cannot open "(null)", error -22 [ 277.708156][ T4287] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 279.332787][ T6242] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 279.374279][ T27] vhci_hcd: vhci_device speed not set [ 281.094134][ T4287] Bluetooth: hci2: Unknown advertising packet type: 0x7773 [ 281.094177][ T4287] Bluetooth: hci2: Malformed LE Event: 0x0d [ 281.954254][ T6255] netlink: 'syz.1.517': attribute type 10 has an invalid length. [ 281.969091][ T6255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.517'. [ 283.696143][ T4287] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 286.451228][ T6294] UBIFS error (pid: 6294): cannot open "(null)", error -22 [ 286.614385][ T4314] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 287.068940][ T4314] usb 3-1: Using ep0 maxpacket: 32 [ 289.116744][ T4314] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 289.132251][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.140713][ T4314] usb 3-1: Product: syz [ 289.154257][ T4314] usb 3-1: Manufacturer: syz [ 289.158923][ T4314] usb 3-1: SerialNumber: syz [ 289.171287][ T4314] usb 3-1: config 0 descriptor?? [ 289.451734][ T4314] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate [ 289.467075][ T4314] RobotFuzz Open Source InterFace, OSIF: probe of 3-1:0.0 failed with error -71 [ 289.633717][ T4314] usb 3-1: USB disconnect, device number 6 [ 290.224442][ T4287] Bluetooth: hci3: Unknown advertising packet type: 0x7773 [ 290.224668][ T4287] Bluetooth: hci3: Malformed LE Event: 0x0d [ 290.684215][ T4314] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 291.038052][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.049568][ T4314] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 291.123178][ T4314] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.165470][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.258397][ T4314] usb 3-1: config 0 descriptor?? [ 291.271089][ T4314] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 292.703497][ T129] usb 3-1: USB disconnect, device number 7 [ 293.768926][ T6343] netlink: 'syz.1.541': attribute type 10 has an invalid length. [ 293.830014][ T6343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.541'. [ 295.642232][ T4287] Bluetooth: hci2: Unknown advertising packet type: 0x7773 [ 295.642281][ T4287] Bluetooth: hci2: Malformed LE Event: 0x0d [ 296.169047][ T6368] UBIFS error (pid: 6368): cannot open "(null)", error -22 [ 296.266741][ T4318] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 296.297885][ T6360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.544'. [ 296.596741][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.004111][ T4318] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 297.080712][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 298.572471][ T4318] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.624848][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.685107][ T4318] usb 1-1: config 0 descriptor?? [ 298.719534][ T4318] usb 1-1: can't set config #0, error -71 [ 298.766552][ T4318] usb 1-1: USB disconnect, device number 4 [ 299.617972][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 300.240864][ T6391] ntfs3: loop2: try to read out of volume at offset 0x0 [ 300.834776][ T4287] Bluetooth: hci1: Unknown advertising packet type: 0x7773 [ 300.835727][ T4287] Bluetooth: hci1: Malformed LE Event: 0x0d [ 301.566449][ T126] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 303.544660][ T6412] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 303.552550][ C0] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 304.043218][ T6421] UBIFS error (pid: 6421): cannot open "(null)", error -22 [ 306.603587][ T6438] netlink: 'syz.1.564': attribute type 10 has an invalid length. [ 306.689224][ T6438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.564'. [ 308.862325][ T6457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.914648][ T6457] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.954370][ T6457] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 309.224221][ T6457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 309.308550][ T6457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 310.042080][ T6486] UBIFS error (pid: 6486): cannot open "(null)", error -22 [ 311.968007][ T6501] fuse: Bad value for 'fd' [ 315.438645][ T6526] netlink: 'syz.4.583': attribute type 10 has an invalid length. [ 315.473321][ T6526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.583'. [ 316.244217][ T4374] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 316.654073][ T4374] usb 4-1: Using ep0 maxpacket: 16 [ 316.663253][ T4374] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 316.751004][ T4374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.761060][ T6551] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 316.788707][ T4374] usb 4-1: Product: syz [ 316.814136][ T4374] usb 4-1: Manufacturer: syz [ 316.818874][ T4374] usb 4-1: SerialNumber: syz [ 317.128504][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.137971][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.702576][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.590'. [ 320.155278][ T4374] usb 4-1: USB disconnect, device number 3 [ 320.314613][ T6569] netlink: 68 bytes leftover after parsing attributes in process `syz.3.593'. [ 320.781443][ T5681] udevd[5681]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.819137][ T6596] netlink: 'syz.4.597': attribute type 13 has an invalid length. [ 325.080381][ T6596] gretap0: refused to change device tx_queue_len [ 325.101169][ T6596] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 326.801581][ T6639] netlink: 68 bytes leftover after parsing attributes in process `syz.3.605'. [ 327.656109][ T6651] overlayfs: conflicting lowerdir path [ 327.805899][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.608'. [ 328.161449][ T6662] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 330.145680][ T6654] netlink: 'syz.4.607': attribute type 10 has an invalid length. [ 330.329394][ T6654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.607'. [ 332.511341][ T6699] netlink: 'syz.3.618': attribute type 13 has an invalid length. [ 332.680893][ T6706] netlink: 68 bytes leftover after parsing attributes in process `syz.2.620'. [ 333.334427][ T6711] fuse: Bad value for 'fd' [ 333.422721][ T6699] gretap0: refused to change device tx_queue_len [ 333.456448][ T6699] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 334.266239][ T4314] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 334.454050][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 334.468784][ T4314] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 334.685262][ T6724] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 335.280845][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'. [ 335.345121][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.353694][ T4314] usb 2-1: Product: syz [ 335.358350][ T4314] usb 2-1: Manufacturer: syz [ 335.365483][ T4314] usb 2-1: SerialNumber: syz [ 339.456305][ T4314] usb 2-1: USB disconnect, device number 4 [ 339.602633][ T6762] fuse: Bad value for 'fd' [ 340.066169][ T6761] netlink: 68 bytes leftover after parsing attributes in process `syz.4.633'. [ 340.334475][ T6769] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 341.117818][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.790256][ T6783] fuse: Unknown parameter 'grou00000000000000000000' [ 343.469408][ T6776] netlink: 'syz.3.638': attribute type 10 has an invalid length. [ 343.487697][ T6776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.638'. [ 343.624063][ T6557] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 343.864212][ T6557] usb 1-1: Using ep0 maxpacket: 16 [ 343.879032][ T6557] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 344.535268][ T6557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.544622][ T6557] usb 1-1: Product: syz [ 344.558879][ T6557] usb 1-1: Manufacturer: syz [ 344.563492][ T6557] usb 1-1: SerialNumber: syz [ 344.584396][ T6816] fuse: Invalid rootmode [ 345.176876][ T6827] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 345.340937][ T6823] netlink: 'syz.2.649': attribute type 13 has an invalid length. [ 345.415824][ T6823] gretap0: refused to change device tx_queue_len [ 345.452145][ T6823] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 346.801027][ T6557] usb 1-1: USB disconnect, device number 5 [ 347.909630][ T6846] netlink: 'syz.4.654': attribute type 10 has an invalid length. [ 348.381836][ T6846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.654'. [ 348.402768][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.968673][ T6854] fuse: Unknown parameter 'group_i00000000000000000000' [ 351.595755][ T4314] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 351.804775][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 351.817719][ T4314] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 351.843926][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.855457][ T6884] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 351.874197][ T4314] usb 2-1: Product: syz [ 351.878547][ T4314] usb 2-1: Manufacturer: syz [ 351.883816][ T4314] usb 2-1: SerialNumber: syz [ 351.906097][ T4314] usb 2-1: config 0 descriptor?? [ 353.525795][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 353.804322][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 353.878183][ T14] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 353.888989][ T4314] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 354.019477][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.045034][ T4314] peak_usb: probe of 2-1:0.0 failed with error -71 [ 354.060551][ T14] usb 1-1: Product: syz [ 354.114177][ T4314] usb 2-1: USB disconnect, device number 5 [ 354.144255][ T14] usb 1-1: Manufacturer: syz [ 354.149215][ T14] usb 1-1: SerialNumber: syz [ 354.188758][ T6901] netlink: 'syz.1.667': attribute type 10 has an invalid length. [ 354.234014][ T6901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.667'. [ 354.289062][ T6909] fuse: Unknown parameter 'group_i00000000000000000000' [ 356.006207][ T6905] delete_channel: no stack [ 356.301172][ T14] usb 1-1: USB disconnect, device number 6 [ 357.175453][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 357.425797][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.462354][ T6968] veth1_virt_wifi: default FDB implementation only supports local addresses [ 362.614571][ T6963] netlink: 'syz.1.682': attribute type 10 has an invalid length. [ 362.634130][ T6963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.682'. [ 363.053982][ T4314] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 363.250544][ T4314] usb 1-1: Using ep0 maxpacket: 16 [ 363.329941][ T4314] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 363.373544][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.421465][ T4314] usb 1-1: Product: syz [ 363.453111][ T4314] usb 1-1: Manufacturer: syz [ 363.456005][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 363.470761][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 363.478656][ T4314] usb 1-1: SerialNumber: syz [ 364.367049][ T6982] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 366.179925][ T4314] usb 1-1: USB disconnect, device number 7 [ 367.476833][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.498762][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'. [ 367.571112][ T7006] fuse: Bad value for 'rootmode' [ 369.374961][ T7028] netlink: 'syz.4.696': attribute type 10 has an invalid length. [ 369.448362][ T7028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.696'. [ 369.646632][ T4374] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 369.834009][ T4374] usb 1-1: Using ep0 maxpacket: 32 [ 369.840911][ T4374] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 369.854131][ T4374] usb 1-1: config 0 has no interface number 0 [ 369.895730][ T4374] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 369.939362][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.959774][ T4374] usb 1-1: Product: syz [ 369.970021][ T4374] usb 1-1: Manufacturer: syz [ 370.003418][ T4374] usb 1-1: SerialNumber: syz [ 370.019625][ T4374] usb 1-1: config 0 descriptor?? [ 370.054739][ T4374] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 370.275786][ T4374] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 370.406896][ T4374] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 370.491890][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 112 [ 370.701768][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 370.709887][ T4374] usb 1-1: USB disconnect, device number 8 [ 370.732070][ T4374] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 370.796336][ T4374] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 371.077917][ T4374] quatech2 1-1:0.51: device disconnected [ 373.264064][ T4374] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 374.024106][ T4374] usb 1-1: Using ep0 maxpacket: 16 [ 374.040904][ T4374] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 374.111255][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.134041][ T4374] usb 1-1: Product: syz [ 374.154136][ T4374] usb 1-1: Manufacturer: syz [ 374.194475][ T4374] usb 1-1: SerialNumber: syz [ 374.447395][ T7062] netlink: 68 bytes leftover after parsing attributes in process `syz.2.704'. [ 376.127773][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 377.564075][ T4374] usb 1-1: USB disconnect, device number 9 [ 377.822109][ T5681] udevd[5681]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.857812][ T7086] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 378.053737][ T7087] netlink: 'syz.2.711': attribute type 10 has an invalid length. [ 378.087288][ T7087] netlink: 40 bytes leftover after parsing attributes in process `syz.2.711'. [ 378.929902][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.937260][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.525044][ T7105] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 382.241189][ T7101] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 382.421635][ T7106] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 382.634019][ T4374] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 383.558786][ T4374] usb 2-1: Using ep0 maxpacket: 16 [ 383.597631][ T4374] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 383.666363][ T4374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.733211][ T4374] usb 2-1: Product: syz [ 383.753478][ T4374] usb 2-1: Manufacturer: syz [ 383.763623][ T4374] usb 2-1: SerialNumber: syz [ 384.068784][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 384.493042][ T7144] block nbd0: NBD_DISCONNECT [ 384.573081][ T7144] block nbd0: Disconnected due to user request. [ 384.588007][ T7144] block nbd0: shutting down sockets [ 385.832769][ T4374] usb 2-1: USB disconnect, device number 6 [ 388.366496][ T6577] udevd[6577]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.452369][ T7160] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 388.604179][ T7167] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 390.426262][ T7183] netlink: 'syz.2.734': attribute type 10 has an invalid length. [ 390.436610][ T7183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.734'. [ 390.595101][ T4314] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 390.804372][ T4314] usb 4-1: Using ep0 maxpacket: 16 [ 390.819109][ T4314] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 390.831140][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.839428][ T4314] usb 4-1: Product: syz [ 390.843695][ T4314] usb 4-1: Manufacturer: syz [ 390.848441][ T4314] usb 4-1: SerialNumber: syz [ 390.991461][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 392.917313][ T4314] usb 4-1: USB disconnect, device number 4 [ 394.194535][ T7208] veth1_virt_wifi: default FDB implementation only supports local addresses [ 394.794322][ T6785] udevd[6785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.193704][ T7224] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 398.936017][ T7242] netlink: 60 bytes leftover after parsing attributes in process `syz.1.749'. [ 398.945051][ T126] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 399.924278][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 399.941702][ T126] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 399.971326][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.009857][ T126] usb 4-1: Product: syz [ 400.024166][ T126] usb 4-1: Manufacturer: syz [ 400.029006][ T126] usb 4-1: SerialNumber: syz [ 401.889102][ T126] usb 4-1: USB disconnect, device number 5 [ 402.143666][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 403.005560][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.018123][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 403.031613][ T27] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.109409][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.151683][ T27] usb 2-1: config 0 descriptor?? [ 403.465597][ T7291] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 404.023649][ T27] usb 2-1: can't set config #0, error -71 [ 404.177952][ T27] usb 2-1: USB disconnect, device number 7 [ 406.301079][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.935484][ T4316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 409.234055][ T4316] usb 5-1: Using ep0 maxpacket: 16 [ 409.308421][ T4316] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 409.342351][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.356028][ T4316] usb 5-1: Product: syz [ 409.361524][ T4316] usb 5-1: Manufacturer: syz [ 409.369897][ T4316] usb 5-1: SerialNumber: syz [ 411.577545][ T4316] usb 5-1: USB disconnect, device number 2 [ 411.707959][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 412.747367][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.758870][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 412.773226][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.784002][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.806242][ T27] usb 4-1: config 0 descriptor?? [ 412.912874][ T27] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 413.310109][ T7349] ntfs3: loop4: try to read out of volume at offset 0x0 [ 413.670453][ T6785] udevd[6785]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.809876][ T14] usb 4-1: USB disconnect, device number 6 [ 415.670339][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 417.153520][ T7381] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 417.182732][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 417.287144][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'. [ 417.359910][ T7389] netlink: 44 bytes leftover after parsing attributes in process `syz.3.786'. [ 417.420573][ T7390] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 417.715931][ T7385] Mount JFS Failure: -22 [ 417.720384][ T7385] jfs_mount failed w/return code = -22 [ 417.964172][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 417.982632][ T27] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 418.015002][ T7396] ntfs3: loop4: try to read out of volume at offset 0x0 [ 418.034046][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.042340][ T27] usb 3-1: Product: syz [ 418.048481][ T27] usb 3-1: Manufacturer: syz [ 418.057214][ T27] usb 3-1: SerialNumber: syz [ 419.576558][ T7409] netlink: 68 bytes leftover after parsing attributes in process `syz.4.791'. [ 419.640825][ T27] usb 3-1: USB disconnect, device number 8 [ 422.240248][ T5681] udevd[5681]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.465022][ T7433] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 423.462348][ T7450] ntfs3: loop4: try to read out of volume at offset 0x0 [ 426.314090][ T126] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 426.504192][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 426.514820][ T126] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 426.554066][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.584162][ T126] usb 1-1: Product: syz [ 426.594263][ T126] usb 1-1: Manufacturer: syz [ 426.604210][ T126] usb 1-1: SerialNumber: syz [ 426.846112][ T7479] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 428.864431][ T126] usb 1-1: USB disconnect, device number 10 [ 429.959680][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.995992][ T7513] netlink: 68 bytes leftover after parsing attributes in process `syz.4.817'. [ 430.260712][ T7497] ntfs3: loop3: try to read out of volume at offset 0x0 [ 430.320283][ T7522] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 432.174103][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 432.394100][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 432.415763][ T14] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 432.582834][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.621788][ T14] usb 5-1: Product: syz [ 432.632379][ T14] usb 5-1: Manufacturer: syz [ 432.650358][ T14] usb 5-1: SerialNumber: syz [ 434.247655][ T14] usb 5-1: USB disconnect, device number 3 [ 435.315918][ T6785] udevd[6785]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.630633][ T7574] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 439.554162][ T126] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 440.007097][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.014384][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.160079][ T27] libceph: connect (1)[c::]:6789 error -101 [ 440.180116][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 440.186269][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 440.197434][ T126] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 440.215402][ T7605] ceph: No mds server is up or the cluster is laggy [ 440.231408][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.260461][ T126] usb 1-1: Product: syz [ 440.268655][ T126] usb 1-1: Manufacturer: syz [ 440.289012][ T126] usb 1-1: SerialNumber: syz [ 440.584245][ T27] libceph: connect (1)[c::]:6789 error -101 [ 440.591453][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 441.374032][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 441.556059][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.633245][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 441.781649][ T7619] ntfs3: loop4: try to read out of volume at offset 0x0 [ 441.792550][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.863374][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.904069][ T27] usb 4-1: config 0 descriptor?? [ 441.982049][ T27] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 442.241988][ T126] usb 1-1: USB disconnect, device number 11 [ 442.625335][ T6576] udevd[6576]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.818385][ T7626] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 443.023521][ T7629] netlink: 'syz.1.846': attribute type 13 has an invalid length. [ 443.031912][ T7629] gretap0: refused to change device tx_queue_len [ 443.038355][ T7629] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 444.011050][ T14] usb 4-1: USB disconnect, device number 7 [ 444.241431][ T7639] veth1_virt_wifi: default FDB implementation only supports local addresses [ 445.062041][ T4316] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 446.774903][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 446.788124][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 448.011889][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 448.220730][ T7662] netlink: 'syz.4.857': attribute type 13 has an invalid length. [ 448.228937][ T7662] gretap0: refused to change device tx_queue_len [ 448.235333][ T7662] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 448.384050][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 448.393261][ T27] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 448.409761][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.418754][ T27] usb 4-1: Product: syz [ 448.423475][ T27] usb 4-1: Manufacturer: syz [ 448.428680][ T27] usb 4-1: SerialNumber: syz [ 449.651939][ T7679] ntfs3: loop4: try to read out of volume at offset 0x0 [ 450.706463][ T27] usb 4-1: USB disconnect, device number 8 [ 450.890037][ T4316] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 451.064110][ T4316] usb 3-1: device descriptor read/64, error -71 [ 451.087261][ T4423] udevd[4423]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.151646][ T7694] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 451.335116][ T4316] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 451.764060][ T4316] usb 3-1: device descriptor read/64, error -71 [ 453.200414][ T4316] usb usb3-port1: attempt power cycle [ 453.614055][ T4316] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 453.669515][ T4316] usb 3-1: device descriptor read/8, error -71 [ 453.817702][ T7706] netlink: 'syz.2.870': attribute type 13 has an invalid length. [ 453.825807][ T7706] gretap0: refused to change device tx_queue_len [ 453.832232][ T7706] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 455.724244][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 455.973980][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 455.987790][ T7723] Mount JFS Failure: -22 [ 455.987810][ T27] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 455.992309][ T7723] jfs_mount failed w/return code = -22 [ 456.038941][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.062589][ T27] usb 5-1: Product: syz [ 456.077825][ T27] usb 5-1: Manufacturer: syz [ 456.090461][ T27] usb 5-1: SerialNumber: syz [ 457.406869][ T7741] ntfs3: loop1: try to read out of volume at offset 0x0 [ 457.434215][ T4434] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 457.814006][ T4434] usb 1-1: device descriptor read/64, error -71 [ 458.486037][ T4434] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 458.669727][ T27] usb 5-1: USB disconnect, device number 4 [ 458.705360][ T7747] netlink: 'syz.4.882': attribute type 13 has an invalid length. [ 458.713377][ T7747] gretap0: refused to change device tx_queue_len [ 458.719839][ T7747] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 458.735911][ T4434] usb 1-1: device descriptor read/64, error -71 [ 458.865187][ T4434] usb usb1-port1: attempt power cycle [ 459.020841][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.282456][ T4434] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 459.405194][ T4434] usb 1-1: device descriptor read/8, error -71 [ 459.744293][ T4434] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 459.785805][ T4434] usb 1-1: device descriptor read/8, error -71 [ 459.944422][ T4434] usb usb1-port1: unable to enumerate USB device [ 461.368964][ T7766] delete_channel: no stack [ 461.504565][ T7779] Mount JFS Failure: -22 [ 461.524069][ T7779] jfs_mount failed w/return code = -22 [ 462.382006][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.893'. [ 462.905891][ T4316] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 463.081537][ T7792] netlink: 'syz.2.895': attribute type 13 has an invalid length. [ 463.124207][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 463.487702][ T4316] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 463.497429][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.509036][ T4316] usb 1-1: Product: syz [ 463.513429][ T4316] usb 1-1: Manufacturer: syz [ 464.016820][ T7792] gretap0: refused to change device tx_queue_len [ 464.023213][ T7792] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 464.102253][ T4316] usb 1-1: SerialNumber: syz [ 465.769376][ T4316] usb 1-1: USB disconnect, device number 16 [ 467.081930][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.341459][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.902'. [ 468.117539][ T7840] Mount JFS Failure: -22 [ 468.211698][ T7840] jfs_mount failed w/return code = -22 [ 470.554082][ T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 470.734029][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 470.968133][ T14] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 471.012886][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.060111][ T14] usb 2-1: Product: syz [ 471.114068][ T14] usb 2-1: Manufacturer: syz [ 471.118714][ T14] usb 2-1: SerialNumber: syz [ 471.216009][ T7852] delete_channel: no stack [ 473.450153][ T14] usb 2-1: USB disconnect, device number 9 [ 474.535475][ T6785] udevd[6785]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.822790][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'. [ 481.764172][ T4374] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 481.853492][ T7940] 0x0000000000ff-0x000000020102 : "" [ 481.931709][ T7940] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ff01 [ 481.974230][ T4374] usb 3-1: Using ep0 maxpacket: 16 [ 481.987107][ T7940] ftl_cs: FTL header corrupt! [ 481.997767][ T4374] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 482.011709][ T7937] delete_channel: no stack [ 482.020615][ T4374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.034214][ T4374] usb 3-1: Product: syz [ 482.040494][ T4374] usb 3-1: Manufacturer: syz [ 482.051489][ T4374] usb 3-1: SerialNumber: syz [ 482.148310][ T4374] usb 3-1: can't set config #1, error -71 [ 482.174865][ T4374] usb 3-1: USB disconnect, device number 13 [ 484.794546][ T7967] sched: RT throttling activated [ 486.985078][ T7971] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 488.084046][ T6557] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 488.283999][ T6557] usb 2-1: Using ep0 maxpacket: 16 [ 488.295545][ T6557] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 488.341974][ T6557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.414012][ T6557] usb 2-1: Product: syz [ 488.418797][ T6557] usb 2-1: Manufacturer: syz [ 488.423439][ T6557] usb 2-1: SerialNumber: syz [ 488.464963][ T7995] delete_channel: no stack [ 488.517769][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 489.814764][ T8021] netlink: 'syz.0.950': attribute type 10 has an invalid length. [ 489.976630][ T8021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.950'. [ 490.462945][ T8021] bridge0: port 3(dummy0) entered blocking state [ 490.482653][ T8021] bridge0: port 3(dummy0) entered disabled state [ 490.492091][ T8021] device dummy0 entered promiscuous mode [ 490.502087][ T8021] bridge0: port 3(dummy0) entered blocking state [ 490.508566][ T8021] bridge0: port 3(dummy0) entered forwarding state [ 490.754046][ T6557] usb 2-1: USB disconnect, device number 10 [ 491.245550][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.853811][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.960'. [ 493.903314][ T8068] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 496.114423][ T4314] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 496.553979][ T4314] usb 3-1: Using ep0 maxpacket: 16 [ 496.569984][ T4314] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 496.592941][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.616742][ T4314] usb 3-1: Product: syz [ 496.621751][ T4314] usb 3-1: Manufacturer: syz [ 496.635785][ T4314] usb 3-1: SerialNumber: syz [ 497.756042][ T8091] netlink: 'syz.0.967': attribute type 13 has an invalid length. [ 497.764281][ T8091] gretap0: refused to change device tx_queue_len [ 497.770625][ T8091] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 498.112157][ T4314] usb 3-1: USB disconnect, device number 14 [ 498.614205][ T4314] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 498.789484][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 498.964154][ T4314] usb 3-1: device descriptor read/64, error -71 [ 498.994105][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 499.000958][ T14] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 499.037509][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.072623][ T14] pvrusb2: Hardware description: Terratec Grabster AV400 [ 499.101753][ T14] pvrusb2: ********** [ 499.118711][ T14] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 499.158081][ T14] pvrusb2: Important functionality might not be entirely working. [ 499.180637][ T14] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 499.208555][ T14] pvrusb2: ********** [ 499.254066][ T4314] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 499.271367][ T2305] pvrusb2: Invalid write control endpoint [ 499.354447][ T2305] pvrusb2: Invalid write control endpoint [ 499.372180][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 499.400904][ T8110] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 499.415177][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 499.458561][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 499.474057][ T4314] usb 3-1: device descriptor read/64, error -71 [ 499.502524][ T2305] pvrusb2: Device being rendered inoperable [ 499.514553][ T8099] pvrusb2: Attempted to execute control transfer when device not ok [ 499.533249][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 499.543459][ T6557] usb 4-1: USB disconnect, device number 9 [ 499.567867][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 499.604154][ T4314] usb usb3-port1: attempt power cycle [ 499.616622][ T2305] pvrusb2: Attached sub-driver cx25840 [ 499.624847][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 499.651902][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 500.033976][ T4314] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 500.634741][ T4314] usb 3-1: device descriptor read/8, error -71 [ 501.203766][ T4314] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 501.450048][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.462610][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.294164][ T4314] usb 3-1: device not accepting address 18, error -71 [ 502.304265][ T4314] usb usb3-port1: unable to enumerate USB device [ 503.002704][ T8140] netlink: 'syz.1.980': attribute type 13 has an invalid length. [ 503.010948][ T8140] gretap0: refused to change device tx_queue_len [ 503.017412][ T8140] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 504.135475][ T8152] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 507.062443][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 507.068821][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 507.078247][ T8185] ceph: No mds server is up or the cluster is laggy [ 507.209488][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 507.398940][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 508.989894][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 509.060766][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 509.806139][ T8205] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 512.032874][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1004'. [ 512.083208][ T8230] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1004'. [ 513.209313][ T8240] veth1_virt_wifi: default FDB implementation only supports local addresses [ 514.154504][ T8251] trusted_key: encrypted_key: insufficient parameters specified [ 514.879668][ T8253] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 517.799946][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'. [ 517.878475][ T8280] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1015'. [ 521.387535][ T8307] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 523.228378][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'. [ 523.299904][ T8326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1024'. [ 524.386809][ T8340] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 524.393389][ T8340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 524.514375][ T8340] vhci_hcd vhci_hcd.0: Device attached [ 524.663370][ T8343] vhci_hcd: connection closed [ 524.666577][ T4503] vhci_hcd: stop threads [ 524.748830][ T4503] vhci_hcd: release socket [ 524.787371][ T4503] vhci_hcd: disconnect device [ 524.794018][ T4314] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 527.789905][ T14] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 528.170712][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'. [ 528.197866][ T8376] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1038'. [ 528.234009][ T14] usb 1-1: device descriptor read/64, error -71 [ 528.323191][ T8359] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 528.548798][ T14] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 528.791018][ T14] usb 1-1: device descriptor read/64, error -71 [ 528.911711][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1039'. [ 528.988667][ T8392] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1039'. [ 529.227050][ T14] usb usb1-port1: attempt power cycle [ 529.694182][ T14] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 529.788100][ T14] usb 1-1: device descriptor read/8, error -71 [ 529.944323][ T4314] vhci_hcd: vhci_device speed not set [ 530.094425][ T14] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 530.154765][ T14] usb 1-1: device descriptor read/8, error -71 [ 530.266232][ T8395] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1042'. [ 530.276042][ T14] usb usb1-port1: unable to enumerate USB device [ 530.368792][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1042'. [ 530.861668][ T8410] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 530.868242][ T8410] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.004670][ T8410] vhci_hcd vhci_hcd.0: Device attached [ 531.789655][ T8411] vhci_hcd: connection closed [ 531.791859][ T4419] vhci_hcd: stop threads [ 531.804250][ T4419] vhci_hcd: release socket [ 531.813237][ T4419] vhci_hcd: disconnect device [ 531.834025][ T4316] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 531.851810][ T4316] usb 33-1: enqueue for inactive port 0 [ 532.194479][ T4316] vhci_hcd: vhci_device speed not set [ 533.364897][ T8433] ntfs3: loop0: try to read out of volume at offset 0x0 [ 536.643551][ T8439] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1053'. [ 536.904063][ T4316] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 537.104307][ T4316] usb 1-1: Using ep0 maxpacket: 32 [ 537.121568][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.139027][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'. [ 537.210829][ T8456] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1055'. [ 537.633542][ T4316] usb 1-1: config 0 has no interfaces? [ 537.685357][ T4316] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 537.708142][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.719130][ T4316] usb 1-1: Product: syz [ 537.727482][ T4316] usb 1-1: Manufacturer: syz [ 537.740106][ T4316] usb 1-1: SerialNumber: syz [ 537.833480][ T4316] usb 1-1: config 0 descriptor?? [ 539.733029][ T4314] usb 1-1: USB disconnect, device number 21 [ 539.977458][ T8476] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 539.984065][ T8476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 539.992757][ T8476] vhci_hcd vhci_hcd.0: Device attached [ 540.088920][ T8485] ntfs3: loop0: try to read out of volume at offset 0x0 [ 540.647760][ T8479] vhci_hcd: connection closed [ 540.655253][ T4419] vhci_hcd: stop threads [ 540.766518][ T4419] vhci_hcd: release socket [ 540.771415][ T4419] vhci_hcd: disconnect device [ 540.784082][ T27] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 540.814202][ T27] usb 35-1: enqueue for inactive port 0 [ 540.924083][ T27] vhci_hcd: vhci_device speed not set [ 542.169174][ T8498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1065'. [ 542.841618][ T8502] ntfs3: loop2: try to read out of volume at offset 0x0 [ 545.334143][ T4316] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 545.623987][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 545.637586][ T4316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.659290][ T4316] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 545.702539][ T8536] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 545.709086][ T8536] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 545.717404][ T4316] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 545.724038][ T8536] vhci_hcd vhci_hcd.0: Device attached [ 545.727478][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.740528][ T4316] usb 2-1: Product: syz [ 545.750193][ T4316] usb 2-1: Manufacturer: syz [ 545.758031][ T4316] usb 2-1: SerialNumber: syz [ 545.768964][ T4316] usb 2-1: config 0 descriptor?? [ 546.049497][ T27] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 546.600188][ T8538] vhci_hcd: connection closed [ 546.697389][ T4479] vhci_hcd: stop threads [ 547.392505][ T4479] vhci_hcd: release socket [ 547.409588][ T4479] vhci_hcd: disconnect device [ 547.699632][ T8546] fuse: Bad value for 'fd' [ 548.786334][ T8557] ntfs3: loop4: try to read out of volume at offset 0x0 [ 549.566638][ T4316] usb 2-1: USB disconnect, device number 11 [ 549.631799][ T8565] netlink: 'syz.1.1084': attribute type 13 has an invalid length. [ 549.639946][ T8565] gretap0: refused to change device tx_queue_len [ 549.646320][ T8565] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 551.144127][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1088'. [ 551.312986][ T8589] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1088'. [ 551.626527][ T8587] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 551.633082][ T8587] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 551.641586][ T8587] vhci_hcd vhci_hcd.0: Device attached [ 551.807860][ T8588] vhci_hcd: connection closed [ 551.809010][ T4503] vhci_hcd: stop threads [ 551.831317][ T4503] vhci_hcd: release socket [ 551.846161][ T4503] vhci_hcd: disconnect device [ 551.905642][ T4434] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 551.917664][ T4434] usb 35-1: enqueue for inactive port 0 [ 552.014101][ T4434] vhci_hcd: vhci_device speed not set [ 552.404028][ T27] vhci_hcd: vhci_device speed not set [ 553.992726][ T8617] ntfs3: loop2: try to read out of volume at offset 0x0 [ 554.213951][ T4316] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 554.474514][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 554.488651][ T4316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.500463][ T4316] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.512806][ T4316] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 554.522278][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.530400][ T4316] usb 2-1: Product: syz [ 554.534823][ T4316] usb 2-1: Manufacturer: syz [ 554.539470][ T4316] usb 2-1: SerialNumber: syz [ 554.546504][ T4316] usb 2-1: config 0 descriptor?? [ 555.445932][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 555.648891][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 555.657584][ T27] usb 5-1: no configurations [ 555.674654][ T27] usb 5-1: can't read configurations, error -22 [ 555.844146][ T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 557.052585][ T4316] usb 2-1: USB disconnect, device number 12 [ 557.197082][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'. [ 557.268518][ T8647] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1101'. [ 557.303056][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 557.421296][ T27] usb 5-1: no configurations [ 557.614746][ T27] usb 5-1: can't read configurations, error -22 [ 557.632888][ T27] usb usb5-port1: attempt power cycle [ 558.161263][ T8655] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 558.167988][ T8655] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 558.185381][ T8655] vhci_hcd vhci_hcd.0: Device attached [ 558.423381][ T8657] vhci_hcd: connection closed [ 558.424485][ T4369] vhci_hcd: stop threads [ 558.448141][ T4369] vhci_hcd: release socket [ 558.454747][ T14] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 558.471251][ T4369] vhci_hcd: disconnect device [ 558.529852][ T8662] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 559.727979][ T8677] ntfs3: loop3: try to read out of volume at offset 0x0 [ 560.293918][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1110'. [ 560.367824][ T8688] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1110'. [ 561.135294][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 561.396044][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 561.409428][ T27] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 561.419339][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.616944][ T4314] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 561.645637][ T27] pvrusb2: Hardware description: Terratec Grabster AV400 [ 561.683994][ T4316] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 561.743993][ T27] pvrusb2: ********** [ 561.748025][ T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 561.758164][ T27] pvrusb2: Important functionality might not be entirely working. [ 561.766715][ T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 561.785367][ T27] pvrusb2: ********** [ 561.903210][ T2305] pvrusb2: Invalid write control endpoint [ 561.935659][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 561.965793][ T4316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.997659][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'. [ 562.069770][ T8708] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1116'. [ 562.408362][ T4316] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.508502][ T4316] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 562.518920][ T8694] pvrusb2: Invalid write control endpoint [ 562.523640][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.534068][ T4316] usb 2-1: Product: syz [ 562.538441][ T4316] usb 2-1: Manufacturer: syz [ 562.543126][ T4316] usb 2-1: SerialNumber: syz [ 562.544053][ T4314] usb 3-1: Using ep0 maxpacket: 32 [ 562.551838][ T4316] usb 2-1: config 0 descriptor?? [ 562.571199][ T4314] usb 3-1: no configurations [ 562.579090][ T4316] usb 4-1: USB disconnect, device number 10 [ 562.614264][ T4314] usb 3-1: can't read configurations, error -22 [ 562.705696][ T2305] pvrusb2: Invalid write control endpoint [ 562.712751][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 562.743138][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 562.760066][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 562.778094][ T2305] pvrusb2: Device being rendered inoperable [ 562.784498][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 562.791601][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 562.800161][ T2305] pvrusb2: Attached sub-driver cx25840 [ 562.805988][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 562.816457][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 562.897703][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.904087][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.995569][ T4314] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 564.094014][ T14] vhci_hcd: vhci_device speed not set [ 564.131118][ T27] usb 2-1: USB disconnect, device number 13 [ 564.203961][ T4314] usb 3-1: Using ep0 maxpacket: 32 [ 564.214093][ T4314] usb 3-1: no configurations [ 564.278577][ T4314] usb 3-1: can't read configurations, error -22 [ 564.298897][ T6557] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 564.313970][ T4314] usb usb3-port1: attempt power cycle [ 564.505983][ T6557] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.532224][ T6557] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 564.582065][ T6557] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 564.601513][ T6557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.619189][ T6557] usb 5-1: config 0 descriptor?? [ 564.626647][ T8729] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 564.633222][ T8729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 564.647921][ T6557] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 564.765288][ T8729] vhci_hcd vhci_hcd.0: Device attached [ 564.815631][ T8733] ntfs3: loop0: try to read out of volume at offset 0x0 [ 565.110492][ T126] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 565.942386][ T8730] vhci_hcd: connection reset by peer [ 565.977447][ T4314] usb 5-1: USB disconnect, device number 8 [ 566.073477][ T8315] vhci_hcd: stop threads [ 566.082859][ T8315] vhci_hcd: release socket [ 566.118234][ T8315] vhci_hcd: disconnect device [ 566.719570][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1127'. [ 566.759478][ T8754] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1127'. [ 567.189432][ T4434] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 567.444249][ T4434] usb 4-1: Using ep0 maxpacket: 8 [ 567.496929][ T4434] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 567.519756][ T4434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.574102][ T27] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 567.593374][ T4434] pvrusb2: Hardware description: Terratec Grabster AV400 [ 567.607816][ T4434] pvrusb2: ********** [ 567.612307][ T4434] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 567.628501][ T4434] pvrusb2: Important functionality might not be entirely working. [ 567.638291][ T4434] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 567.652136][ T4434] pvrusb2: ********** [ 567.784204][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 567.964315][ T27] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 567.973801][ T2305] pvrusb2: Invalid write control endpoint [ 567.993180][ T27] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 568.003307][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.022898][ T27] usb 1-1: Product: syz [ 568.049196][ T27] usb 1-1: Manufacturer: syz [ 568.074118][ T27] usb 1-1: SerialNumber: syz [ 568.093265][ T27] usb 1-1: config 0 descriptor?? [ 568.173682][ T2305] pvrusb2: Invalid write control endpoint [ 568.184082][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 568.234056][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 568.241651][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 568.273940][ T2305] pvrusb2: Device being rendered inoperable [ 568.280049][ T8749] pvrusb2: Attempted to execute control transfer when device not ok [ 568.300101][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 568.309932][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 568.314239][ T4434] usb 4-1: USB disconnect, device number 11 [ 568.332262][ T2305] pvrusb2: Attached sub-driver cx25840 [ 568.355824][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 568.386857][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 568.434206][ T27] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 568.634073][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 568.641190][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.661904][ T27] usb 3-1: config 0 has no interfaces? [ 568.689428][ T27] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 568.722464][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.736670][ T27] usb 3-1: Product: syz [ 568.741946][ T27] usb 3-1: Manufacturer: syz [ 568.754533][ T27] usb 3-1: SerialNumber: syz [ 568.764934][ T27] usb 3-1: config 0 descriptor?? [ 569.027283][ T8784] ntfs3: loop1: try to read out of volume at offset 0x0 [ 570.796562][ T126] vhci_hcd: vhci_device speed not set [ 570.805466][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 571.424134][ T14] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 571.467576][ T6557] usb 3-1: USB disconnect, device number 22 [ 571.527827][ T4434] usb 1-1: USB disconnect, device number 22 [ 571.556027][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.568135][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 571.581735][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 571.862842][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1141'. [ 572.075372][ T8809] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1141'. [ 572.254592][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.269315][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 572.282601][ T14] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 572.294607][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.305024][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.315075][ T27] usb 4-1: config 0 descriptor?? [ 572.328580][ T27] usb 4-1: can't set config #0, error -71 [ 572.337433][ T27] usb 4-1: USB disconnect, device number 12 [ 572.360580][ T14] usb 2-1: config 0 descriptor?? [ 572.607906][ T14] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 572.909392][ T8816] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 572.915978][ T8816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 572.965821][ T8816] vhci_hcd vhci_hcd.0: Device attached [ 573.244712][ T4434] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 573.440061][ T8822] vhci_hcd: connection reset by peer [ 573.446573][ T4366] vhci_hcd: stop threads [ 573.451052][ T4366] vhci_hcd: release socket [ 573.487385][ T4366] vhci_hcd: disconnect device [ 573.780112][ T4316] usb 2-1: USB disconnect, device number 14 [ 574.200857][ T8834] ntfs3: loop2: try to read out of volume at offset 0x0 [ 575.514057][ T126] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 576.221651][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 576.687339][ T126] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 576.815938][ T126] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 576.833915][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.194394][ T4314] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 577.484376][ T126] usb 3-1: Product: syz [ 577.497272][ T126] usb 3-1: Manufacturer: syz [ 577.510501][ T126] usb 3-1: SerialNumber: syz [ 577.655902][ T4314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.706177][ T126] usb 3-1: config 0 descriptor?? [ 577.712658][ T4314] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 577.951886][ T4314] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.981595][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.011404][ T4314] usb 5-1: config 0 descriptor?? [ 578.037979][ T4314] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 578.414504][ T4434] vhci_hcd: vhci_device speed not set [ 578.541190][ T8865] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 579.812722][ T4314] usb 5-1: USB disconnect, device number 9 [ 579.888201][ T126] usb 3-1: USB disconnect, device number 23 [ 579.958407][ T4434] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 580.604863][ T4434] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.381321][ T4434] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 581.395061][ T4434] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 581.405017][ T4434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.415185][ T4434] usb 2-1: config 0 descriptor?? [ 581.422294][ T8880] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 581.428863][ T8880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 581.442173][ T4434] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 581.451899][ T8885] vhci_hcd: connection closed [ 581.452747][ T8880] vhci_hcd vhci_hcd.0: Device attached [ 581.473568][ T4369] vhci_hcd: stop threads [ 581.482254][ T4369] vhci_hcd: release socket [ 581.501567][ T4369] vhci_hcd: disconnect device [ 581.741206][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 581.750481][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 582.716118][ T126] usb 2-1: USB disconnect, device number 15 [ 585.173940][ T4316] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 585.934388][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.972753][ T4316] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 585.998268][ T4316] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 586.011393][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.030089][ T4316] usb 5-1: config 0 descriptor?? [ 586.053792][ T4316] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 586.484150][ T126] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 586.674323][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 586.686336][ T126] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 586.734907][ T126] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 586.782864][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.858754][ T126] usb 4-1: Product: syz [ 586.886791][ T126] usb 4-1: Manufacturer: syz [ 586.960859][ T126] usb 4-1: SerialNumber: syz [ 587.028933][ T126] usb 4-1: config 0 descriptor?? [ 587.332308][ T126] usb 5-1: USB disconnect, device number 10 [ 588.782014][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 588.789747][ T8951] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 588.799024][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 588.810926][ T8949] ceph: No mds server is up or the cluster is laggy [ 588.818430][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 588.831874][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 588.897785][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 588.932206][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 589.752851][ T14] usb 4-1: USB disconnect, device number 13 [ 592.764070][ T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 592.995938][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.038959][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 593.125993][ T14] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 593.181864][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.244946][ T14] usb 4-1: config 0 descriptor?? [ 593.276249][ T14] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 595.162140][ T126] usb 4-1: USB disconnect, device number 14 [ 596.056486][ T14] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 596.254071][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 596.265614][ T14] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 596.322503][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.371916][ T14] usb 2-1: Product: syz [ 596.397582][ T14] usb 2-1: Manufacturer: syz [ 596.422631][ T14] usb 2-1: SerialNumber: syz [ 596.465376][ T14] usb 2-1: config 0 descriptor?? [ 596.790269][ T14] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 016 [ 597.568284][ T14] usb 2-1: USB disconnect, device number 16 [ 599.007108][ T9037] trusted_key: encrypted_key: insufficient parameters specified [ 600.483995][ T14] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 600.728612][ T9046] Mount JFS Failure: -22 [ 600.729872][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.743575][ T9046] jfs_mount failed w/return code = -22 [ 601.055400][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 601.110934][ T14] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 601.120552][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.146882][ T14] usb 2-1: config 0 descriptor?? [ 601.167285][ T14] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 601.674475][ T9055] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 603.565688][ T4316] usb 2-1: USB disconnect, device number 17 [ 605.394182][ T126] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 605.734058][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 605.747045][ T126] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 605.768087][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.788394][ T126] usb 1-1: Product: syz [ 605.792622][ T126] usb 1-1: Manufacturer: syz [ 605.800649][ T126] usb 1-1: SerialNumber: syz [ 605.823942][ T4434] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 605.834893][ T126] usb 1-1: config 0 descriptor?? [ 606.024017][ T4434] usb 3-1: Using ep0 maxpacket: 32 [ 606.053359][ T4434] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.196395][ T126] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 023 [ 606.226319][ T4434] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 607.595529][ T126] usb 1-1: USB disconnect, device number 23 [ 607.606757][ T4434] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 607.621404][ T4434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.630242][ T4434] usb 3-1: Product: syz [ 607.638415][ T4434] usb 3-1: Manufacturer: syz [ 607.643421][ T4434] usb 3-1: SerialNumber: syz [ 607.662585][ T4434] usb 3-1: config 0 descriptor?? [ 608.930169][ T126] usb 3-1: USB disconnect, device number 24 [ 611.427810][ T9114] Mount JFS Failure: -22 [ 611.432090][ T9114] jfs_mount failed w/return code = -22 [ 612.593969][ T9129] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 613.858030][ T9140] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1231'. [ 614.557136][ T14] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 614.764088][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 614.774671][ T14] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 614.801224][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.826000][ T14] usb 1-1: Product: syz [ 614.839823][ T14] usb 1-1: Manufacturer: syz [ 614.846137][ T14] usb 1-1: SerialNumber: syz [ 614.881702][ T14] usb 1-1: config 0 descriptor?? [ 616.653936][ T14] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 617.041073][ T14] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -71 [ 617.074737][ T14] usb 1-1: USB disconnect, device number 24 [ 619.919461][ T9184] ======================================================= [ 619.919461][ T9184] WARNING: The mand mount option has been deprecated and [ 619.919461][ T9184] and is ignored by this kernel. Remove the mand [ 619.919461][ T9184] option from the mount to silence this warning. [ 619.919461][ T9184] ======================================================= [ 619.954839][ T9184] fuse: Unknown parameter '0x00000000000000030x0000000000000004' [ 620.807902][ T9198] veth1_virt_wifi: default FDB implementation only supports local addresses [ 621.204426][ T126] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 621.454030][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 621.462862][ T126] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 621.520139][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.532528][ T126] usb 2-1: Product: syz [ 621.541320][ T126] usb 2-1: Manufacturer: syz [ 621.546505][ T126] usb 2-1: SerialNumber: syz [ 621.561182][ T126] usb 2-1: config 0 descriptor?? [ 621.787426][ T126] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 018 [ 622.635304][ T126] usb 2-1: USB disconnect, device number 18 [ 624.325887][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.332248][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.234162][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 627.684075][ T14] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 627.703660][ T9243] veth1_virt_wifi: default FDB implementation only supports local addresses [ 627.890271][ T14] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 628.999524][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.022977][ T14] usb 5-1: config 0 descriptor?? [ 629.044614][ T14] cp210x 5-1:0.0: cp210x converter detected [ 630.045357][ T14] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 630.142631][ T14] usb 5-1: cp210x converter now attached to ttyUSB0 [ 630.333792][ T14] usb 5-1: USB disconnect, device number 11 [ 630.397449][ T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 630.570532][ T14] cp210x 5-1:0.0: device disconnected [ 630.750230][ T9269] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 631.124200][ T6557] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 631.474126][ T6557] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.540982][ T6557] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 631.590353][ T6557] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 631.610416][ T6557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.626703][ T6557] usb 2-1: config 0 descriptor?? [ 631.644910][ T6557] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 633.716442][ T6557] usb 2-1: USB disconnect, device number 19 [ 634.711750][ T9309] trusted_key: encrypted_key: insufficient parameters specified [ 636.746948][ T126] libceph: connect (1)[c::]:6789 error -101 [ 636.771833][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 636.810368][ T9321] ceph: No mds server is up or the cluster is laggy [ 638.271538][ T126] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 640.546015][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.735731][ T9362] trusted_key: encrypted_key: insufficient parameters specified [ 641.428987][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 642.816196][ T126] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 642.825736][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.359263][ T126] usb 3-1: config 0 descriptor?? [ 643.365730][ T126] usb 3-1: can't set config #0, error -71 [ 643.408519][ T126] usb 3-1: USB disconnect, device number 25 [ 644.485636][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x6 [ 644.613374][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 644.621561][ T4316] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 644.643597][ T4316] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 644.830602][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1294'. [ 644.863929][ T9389] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1294'. [ 645.919988][ T9391] fido_id[9391]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 645.934447][ T126] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 646.304160][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 646.444492][ T126] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 646.464451][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.484484][ T126] usb 2-1: Product: syz [ 646.494023][ T126] usb 2-1: Manufacturer: syz [ 646.500711][ T126] usb 2-1: SerialNumber: syz [ 647.108968][ T6557] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 649.236911][ T9420] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 650.672012][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 650.750096][ T9433] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1305'. [ 652.631171][ T14] libceph: connect (1)[c::]:6789 error -101 [ 652.638513][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 652.654142][ T9444] ceph: No mds server is up or the cluster is laggy [ 652.663517][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 652.684503][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 653.559615][ T14] usb 2-1: USB disconnect, device number 20 [ 655.594796][ T6557] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 655.816058][ T6557] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.874887][ T6557] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 655.931004][ T6557] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 656.026616][ T6557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.073593][ T6557] usb 1-1: config 0 descriptor?? [ 656.539502][ T6557] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 657.663227][ T6557] usb 1-1: USB disconnect, device number 25 [ 658.153988][ T14] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 659.108831][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 659.129870][ T14] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 659.142655][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.151129][ T14] usb 5-1: Product: syz [ 659.155580][ T14] usb 5-1: Manufacturer: syz [ 659.160240][ T14] usb 5-1: SerialNumber: syz [ 660.304888][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 660.334444][ T9523] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1325'. [ 661.562660][ T9534] veth1_virt_wifi: default FDB implementation only supports local addresses [ 663.187122][ T14] usb 5-1: USB disconnect, device number 12 [ 664.844734][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.324338][ T14] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 666.604880][ T14] usb 2-1: device descriptor read/all, error -71 [ 667.413990][ T6557] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 667.577812][ T9581] veth1_virt_wifi: default FDB implementation only supports local addresses [ 667.635776][ T6557] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.271435][ T6557] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 668.718288][ T6557] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 668.748043][ T6557] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.778124][ T6557] usb 4-1: config 0 descriptor?? [ 668.806442][ T6557] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 669.134535][ T9588] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 670.080219][ T6557] usb 4-1: USB disconnect, device number 16 [ 670.315199][ T126] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 670.844005][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 670.862328][ T126] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 671.110336][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.118956][ T126] usb 3-1: Product: syz [ 671.123243][ T126] usb 3-1: Manufacturer: syz [ 671.128289][ T126] usb 3-1: SerialNumber: syz [ 671.926469][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 672.957089][ T9628] veth1_virt_wifi: default FDB implementation only supports local addresses [ 674.966813][ T9637] ceph: No mds server is up or the cluster is laggy [ 674.973957][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 674.980040][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 675.388149][ T9643] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 676.154180][ T126] usb 3-1: USB disconnect, device number 26 [ 676.452239][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1359'. [ 679.388953][ T126] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 680.716232][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 680.728748][ T126] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 680.773151][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.895611][ T126] usb 5-1: Product: syz [ 680.900124][ T126] usb 5-1: Manufacturer: syz [ 680.905649][ T126] usb 5-1: SerialNumber: syz [ 682.184344][ T126] usb 5-1: config 0 descriptor?? [ 682.430875][ T126] usb 5-1: can't set config #0, error -71 [ 682.447492][ T126] usb 5-1: USB disconnect, device number 13 [ 682.628692][ T9693] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 683.473933][ T4374] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 683.615951][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 683.686504][ T9711] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1373'. [ 683.964487][ T4374] usb 2-1: Using ep0 maxpacket: 16 [ 684.168049][ T4374] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 684.192202][ T4374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.199988][ T126] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 684.267359][ T4374] usb 2-1: Product: syz [ 684.271605][ T4374] usb 2-1: Manufacturer: syz [ 684.276352][ T4374] usb 2-1: SerialNumber: syz [ 684.491940][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.905062][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 684.959905][ T126] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 685.009882][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.074859][ T126] usb 5-1: config 0 descriptor?? [ 685.107759][ T126] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 685.334526][ T4314] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 685.424123][ T9727] IPVS: length: 24 != 24159191448 [ 685.775677][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.776743][ T4314] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 685.793546][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.851726][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.884906][ T4314] usb 1-1: config 0 descriptor?? [ 685.918926][ T4314] cp210x 1-1:0.0: cp210x converter detected [ 686.375279][ T4316] usb 5-1: USB disconnect, device number 14 [ 686.506424][ T4314] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 686.524209][ T4314] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 687.864867][ T4314] usb 1-1: cp210x converter now attached to ttyUSB0 [ 687.877878][ T4314] usb 1-1: USB disconnect, device number 26 [ 687.914917][ T4314] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 687.933659][ T4314] cp210x 1-1:0.0: device disconnected [ 688.054332][ T4374] usb 2-1: USB disconnect, device number 23 [ 689.178983][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.220952][ T9763] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1384'. [ 691.988447][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 692.633925][ T4374] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 692.633944][ T4314] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 692.815768][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.846733][ T4314] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 692.870701][ T4374] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 692.880346][ T4314] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.900560][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.933166][ T4374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.953251][ T4314] usb 3-1: config 0 descriptor?? [ 692.984900][ T4314] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 693.013702][ T4374] usb 2-1: config 0 descriptor?? [ 693.043550][ T4374] cp210x 2-1:0.0: cp210x converter detected [ 693.638569][ T4374] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 694.722327][ T4374] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 694.730916][ T4374] usb 2-1: cp210x converter now attached to ttyUSB0 [ 694.750708][ T4374] usb 2-1: USB disconnect, device number 24 [ 694.770616][ T4374] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 694.782283][ T4374] cp210x 2-1:0.0: device disconnected [ 695.084826][ T4314] usb 3-1: USB disconnect, device number 27 [ 696.264256][ T4374] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 696.545424][ T4374] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.565497][ T4374] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 696.623154][ T4374] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 696.830107][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.945918][ T4374] usb 1-1: config 0 descriptor?? [ 697.009194][ T4374] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 698.689168][ T9836] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1403'. [ 698.711850][ T4374] usb 1-1: USB disconnect, device number 27 [ 698.937859][ T9841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'. [ 699.394070][ T9715] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 700.124291][ T4374] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 700.394054][ T9715] usb 5-1: Using ep0 maxpacket: 8 [ 700.405594][ T9715] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 700.458752][ T9715] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 700.529516][ T9715] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 700.587405][ T9715] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.650559][ T4374] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 700.662608][ T9715] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 700.691708][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.742262][ T9715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.861243][ T4374] usb 1-1: config 0 descriptor?? [ 700.924496][ T4374] cp210x 1-1:0.0: cp210x converter detected [ 701.077050][ T9715] usb 5-1: GET_CAPABILITIES returned 0 [ 701.082670][ T9715] usbtmc 5-1:16.0: can't read capabilities [ 701.238194][ T7] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 701.555399][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.572120][ T9715] usb 5-1: USB disconnect, device number 15 [ 701.588974][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 701.643366][ T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.655914][ T4374] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 701.671457][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.688772][ T4374] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 701.708760][ T7] usb 3-1: config 0 descriptor?? [ 701.714750][ T4374] usb 1-1: cp210x converter now attached to ttyUSB0 [ 701.735586][ T4374] usb 1-1: USB disconnect, device number 28 [ 701.748063][ T7] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 701.769175][ T4374] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 701.779358][ T4374] cp210x 1-1:0.0: device disconnected [ 702.534699][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 703.124604][ T4434] usb 3-1: USB disconnect, device number 28 [ 703.813972][ T4374] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 704.584770][ T9896] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 704.591325][ T9896] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 704.659287][ T9899] vhci_hcd: connection closed [ 704.660102][ T9896] vhci_hcd vhci_hcd.0: Device attached [ 704.734768][ T9] vhci_hcd: stop threads [ 704.735671][ T4374] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.739193][ T9] vhci_hcd: release socket [ 704.767278][ T4374] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 704.802279][ T9] vhci_hcd: disconnect device [ 704.839284][ T4374] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 704.873931][ T4434] vhci_hcd: vhci_device speed not set [ 704.898944][ T4374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.956223][ T4374] usb 4-1: config 0 descriptor?? [ 704.992559][ T4374] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 706.670265][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1421'. [ 707.200635][ T126] usb 4-1: USB disconnect, device number 17 [ 707.449352][ T9927] fuse: Bad value for 'fd' [ 708.508570][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1428'. [ 709.503924][ T7] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 710.501782][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.541064][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 710.557225][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 710.567124][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.587628][ T7] usb 2-1: config 0 descriptor?? [ 710.599648][ T7] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 710.694735][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1430'. [ 711.839584][ T4434] usb 2-1: USB disconnect, device number 25 [ 715.284288][T10006] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 717.477071][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'. [ 718.074023][ T4434] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 718.356757][ T4434] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.493245][ T4434] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 718.506988][ T4434] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.516241][ T4434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.812142][ T4434] usb 2-1: config 0 descriptor?? [ 718.865221][ T4434] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 719.072791][T10043] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1450'. [ 721.058283][ T7] usb 2-1: USB disconnect, device number 26 [ 722.897315][T10070] trusted_key: encrypted_key: insufficient parameters specified [ 724.202156][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 724.496351][ T9715] libceph: connect (1)[c::]:6789 error -101 [ 724.502721][ T9715] libceph: mon0 (1)[c::]:6789 connect error [ 724.526307][ T9715] libceph: connect (1)[c::]:6789 error -101 [ 724.532421][ T9715] libceph: mon0 (1)[c::]:6789 connect error [ 724.646633][T10092] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1464'. [ 725.044866][ T9715] libceph: connect (1)[c::]:6789 error -101 [ 725.108838][T10085] ceph: No mds server is up or the cluster is laggy [ 725.116367][ T9715] libceph: mon0 (1)[c::]:6789 connect error [ 725.868198][T10104] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 727.473955][ T4434] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 727.724683][ T7] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 728.073905][ T4434] usb 1-1: Using ep0 maxpacket: 16 [ 728.082959][ T4434] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 728.092519][ T4434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.100853][ T4434] usb 1-1: Product: syz [ 728.202237][ T4434] usb 1-1: Manufacturer: syz [ 728.212251][ T4434] usb 1-1: SerialNumber: syz [ 728.593935][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 728.612556][ T7] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 728.693571][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.783967][ T7] usb 2-1: Product: syz [ 728.817261][ T7] usb 2-1: Manufacturer: syz [ 728.854613][ T7] usb 2-1: SerialNumber: syz [ 728.996708][ T7] usb 2-1: config 0 descriptor?? [ 729.599007][ T4434] usb 1-1: USB disconnect, device number 29 [ 729.700705][ T7] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 729.716996][ T7] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 729.721255][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 729.853308][ T7] peak_usb: probe of 2-1:0.0 failed with error -32 [ 730.484041][ T7] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 730.777594][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 730.792646][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.815872][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.898485][T10144] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 731.534887][ T7] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 731.615505][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.632179][ T9715] usb 2-1: USB disconnect, device number 27 [ 731.639154][ T7] usb 3-1: config 0 descriptor?? [ 732.411424][ T7] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 732.791719][ T4434] usb 3-1: USB disconnect, device number 29 [ 732.901713][T10163] fido_id[10163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 733.804042][ T4434] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 734.336503][ T4434] usb 1-1: Using ep0 maxpacket: 16 [ 734.347791][ T4434] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 734.363738][ T4434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.372814][ T4434] usb 1-1: Product: syz [ 734.381131][ T4434] usb 1-1: Manufacturer: syz [ 734.386903][ T4434] usb 1-1: SerialNumber: syz [ 734.476238][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 735.770273][ T7] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 736.153900][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 736.167554][T10196] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 736.350875][ T7] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 736.408103][ T4434] usb 1-1: USB disconnect, device number 30 [ 736.444235][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.496473][ T7] usb 2-1: Product: syz [ 736.500689][ T7] usb 2-1: Manufacturer: syz [ 736.593944][ T7] usb 2-1: SerialNumber: syz [ 736.615955][ T7] usb 2-1: config 0 descriptor?? [ 737.033237][ T7] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 737.062632][ T7] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 737.677438][ T7] peak_usb: probe of 2-1:0.0 failed with error -32 [ 737.909880][T10222] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1499'. [ 738.312073][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'. [ 738.499032][ T4434] usb 2-1: USB disconnect, device number 28 [ 738.904826][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1505'. [ 738.980748][T10241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1505'. [ 740.739502][T10254] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 741.893964][ T4434] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 742.293990][ T4434] usb 3-1: Using ep0 maxpacket: 16 [ 742.337237][ T4434] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 742.362156][ T4434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.395294][ T4434] usb 3-1: Product: syz [ 742.399579][ T4434] usb 3-1: Manufacturer: syz [ 742.434054][ T4434] usb 3-1: SerialNumber: syz [ 742.507706][T10267] block device autoloading is deprecated and will be removed. [ 744.013982][ T9715] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 744.203862][ T9715] usb 1-1: Using ep0 maxpacket: 32 [ 744.231962][ T9715] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 744.272610][ T4434] usb 3-1: USB disconnect, device number 30 [ 744.318997][ T9715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.334706][ T9715] usb 1-1: Product: syz [ 744.338997][ T9715] usb 1-1: Manufacturer: syz [ 744.343570][ T9715] usb 1-1: SerialNumber: syz [ 744.363707][ T9715] usb 1-1: config 0 descriptor?? [ 744.533452][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 744.909954][ T9715] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 744.928777][ T9715] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 744.999954][T10295] netlink: 'syz.1.1519': attribute type 13 has an invalid length. [ 745.008366][T10295] gretap0: refused to change device tx_queue_len [ 745.014785][T10295] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 745.030887][ T9715] peak_usb: probe of 1-1:0.0 failed with error -32 [ 745.378361][ T9715] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 745.488001][T10304] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 745.498644][T10303] trusted_key: encrypted_key: insufficient parameters specified [ 746.125542][ T9715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.163009][ T9715] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 746.208547][ T9715] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 746.218278][T10311] netlink: 'syz.2.1524': attribute type 62 has an invalid length. [ 746.225294][ T9715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.704255][ T9715] usb 5-1: config 0 descriptor?? [ 746.717955][ T4316] usb 1-1: USB disconnect, device number 31 [ 746.733703][ T9715] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 747.405034][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.412330][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.056119][ T4316] usb 5-1: USB disconnect, device number 16 [ 750.265828][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1530'. [ 750.533144][T10340] trusted_key: encrypted_key: insufficient parameters specified [ 750.630582][T10344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1535'. [ 750.834796][T10346] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 751.717573][T10353] ax25_connect(): syz.2.1536 uses autobind, please contact jreuter@yaina.de [ 751.804036][ T4434] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 751.994022][ T4434] usb 2-1: Using ep0 maxpacket: 32 [ 752.019386][ T4434] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 752.030159][ T4434] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.038406][ T4434] usb 2-1: Product: syz [ 752.043746][ T4434] usb 2-1: Manufacturer: syz [ 752.048716][ T4434] usb 2-1: SerialNumber: syz [ 752.067034][ T4434] usb 2-1: config 0 descriptor?? [ 753.483176][ T4434] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 753.492771][ T4434] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 754.482672][T10353] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 754.584534][ T4434] peak_usb: probe of 2-1:0.0 failed with error -32 [ 754.615970][ T4434] usb 2-1: USB disconnect, device number 29 [ 755.060924][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'. [ 756.099858][T10399] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 756.306151][ T4434] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 757.024041][ T4434] usb 2-1: Using ep0 maxpacket: 16 [ 757.446301][ T4434] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 757.461469][ T4434] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.541840][ T4434] usb 2-1: Product: syz [ 757.616399][ T4434] usb 2-1: Manufacturer: syz [ 757.660664][ T4434] usb 2-1: SerialNumber: syz [ 757.874645][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1553'. [ 757.945719][T10411] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1553'. [ 758.745585][T10413] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1552'. [ 760.334434][ T4434] usb 2-1: can't set config #1, error -71 [ 760.413963][ T4434] usb 2-1: USB disconnect, device number 30 [ 760.439826][T10424] netlink: 'syz.1.1556': attribute type 13 has an invalid length. [ 760.448016][T10424] gretap0: refused to change device tx_queue_len [ 760.454474][T10424] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 760.737717][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'. [ 760.864165][ T27] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 761.069585][ T27] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 761.085997][ T27] usb 3-1: config 0 has no interface number 0 [ 761.110307][ T27] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 761.149645][ T27] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 761.159085][ T27] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 761.168390][ T27] usb 3-1: Product: syz [ 761.172758][ T27] usb 3-1: Manufacturer: syz [ 761.186634][ T27] usb 3-1: SerialNumber: syz [ 761.220575][ T27] usb 3-1: config 0 descriptor?? [ 761.227015][T10426] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 761.336645][ T27] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 761.347300][ T27] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 761.530998][T10436] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 761.617807][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1560'. [ 761.689868][T10438] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1560'. [ 761.892048][ T27] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 762.105139][ T27] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 762.124242][ T27] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 762.133000][ T27] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 762.224965][ T27] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 762.261229][ T27] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 762.284985][ T27] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 762.305678][ T27] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 762.330909][T10444] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1564'. [ 762.775512][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1565'. [ 762.857852][T10452] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1565'. [ 764.938389][ T4434] usb 3-1: USB disconnect, device number 31 [ 764.975235][ T4434] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 765.014149][ T4434] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 765.036031][ T4434] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 765.047393][T10469] netlink: 'syz.1.1570': attribute type 13 has an invalid length. [ 765.055506][T10469] gretap0: refused to change device tx_queue_len [ 765.061861][T10469] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 765.081391][ T4434] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 765.091651][ T4434] keyspan 3-1:0.107: device disconnected [ 765.407390][T10475] ntfs3: loop4: try to read out of volume at offset 0x0 [ 766.091028][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'. [ 766.773935][ T4316] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 766.975488][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 766.986232][T10500] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1576'. [ 767.053355][ T4316] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 767.211592][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.251491][ T4316] usb 1-1: Product: syz [ 767.311799][ T4316] usb 1-1: Manufacturer: syz [ 767.353529][ T4316] usb 1-1: SerialNumber: syz [ 767.463998][ T4314] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 767.665515][ T4314] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 767.684246][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.719827][ T4314] usb 2-1: config 0 descriptor?? [ 767.747230][ T4314] cp210x 2-1:0.0: cp210x converter detected [ 767.994258][ T4314] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 768.002449][ T4314] cp210x 2-1:0.0: querying part number failed [ 768.015416][ T4314] usb 2-1: cp210x converter now attached to ttyUSB0 [ 768.115654][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1578'. [ 768.185853][T10508] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1578'. [ 769.671464][ T4316] usb 1-1: USB disconnect, device number 32 [ 769.928516][T10511] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 770.975872][ T4374] usb 2-1: USB disconnect, device number 31 [ 771.173022][ T4374] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 771.189308][ T4374] cp210x 2-1:0.0: device disconnected [ 771.465346][T10535] ntfs3: loop1: try to read out of volume at offset 0x0 [ 772.289624][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'. [ 772.693878][ T4374] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 772.887544][ T4374] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.917699][ T4374] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 772.931498][ T4374] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 772.951027][ T4374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.962573][ T4374] usb 5-1: config 0 descriptor?? [ 772.966176][ T4374] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 773.753711][T10534] schedule_timeout: wrong timeout value fffffffffffffffd [ 773.819225][T10534] CPU: 0 PID: 10534 Comm: vivid-009-sdr-c Not tainted syzkaller #0 [ 773.827167][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.837228][T10534] Call Trace: [ 773.840505][T10534] [ 773.843425][T10534] dump_stack_lvl+0x188/0x24e [ 773.848144][T10534] ? show_regs_print_info+0x12/0x12 [ 773.853384][T10534] ? load_image+0x400/0x400 [ 773.857931][T10534] schedule_timeout+0x25f/0x2d0 [ 773.862806][T10534] ? console_conditional_schedule+0x40/0x40 [ 773.868724][T10534] ? lockdep_hardirqs_on+0x94/0x140 [ 773.873943][T10534] ? prepare_to_wait_event+0x430/0x470 [ 773.879398][T10534] vivid_thread_sdr_cap+0xaa9/0x1000 [ 773.884685][T10534] ? vivid_sdr_cap_process+0xb00/0xb00 [ 773.890221][T10534] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 773.896126][T10534] ? _raw_spin_unlock+0x40/0x40 [ 773.900959][T10534] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 773.906934][T10534] ? wake_bit_function+0x200/0x200 [ 773.912036][T10534] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 773.917946][T10534] ? __kthread_parkme+0x162/0x1c0 [ 773.922966][T10534] kthread+0x29d/0x330 [ 773.927027][T10534] ? vivid_sdr_cap_process+0xb00/0xb00 [ 773.932490][T10534] ? kthread_blkcg+0xd0/0xd0 [ 773.937077][T10534] ret_from_fork+0x1f/0x30 [ 773.941490][T10534] [ 774.813856][ T4434] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 775.013937][ T4434] usb 1-1: Using ep0 maxpacket: 16 [ 775.030931][ T4434] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 775.080851][ T4434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.128353][ T4434] usb 1-1: Product: syz [ 775.132595][ T4434] usb 1-1: Manufacturer: syz [ 775.139774][ T4374] usb 5-1: USB disconnect, device number 17 [ 775.160327][ T4434] usb 1-1: SerialNumber: syz [ 777.403052][T10586] ntfs3: loop4: try to read out of volume at offset 0x0 [ 778.290958][T10590] device syzkaller0 entered promiscuous mode [ 779.149476][ T4434] usb 1-1: USB disconnect, device number 33 [ 779.278903][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 779.978613][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.434168][ T4434] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 781.845608][ T4434] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.973877][ T4434] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 782.070404][T10639] ntfs3: loop4: try to read out of volume at offset 0x0 [ 782.669366][ T4434] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 782.679424][ T4434] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.700672][ T4434] usb 1-1: config 0 descriptor?? [ 782.807139][ T4434] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 783.018358][ T4434] libceph: connect (1)[c::]:6789 error -101 [ 783.047681][ T4434] libceph: mon0 (1)[c::]:6789 connect error [ 783.065972][T10642] ceph: No mds server is up or the cluster is laggy [ 784.702303][ T4316] usb 1-1: USB disconnect, device number 34 [ 786.217177][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 787.178897][ T4434] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 788.887857][T10689] ntfs3: loop4: try to read out of volume at offset 0x0 [ 790.106408][T10685] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1621'. [ 791.194519][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 791.214868][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 791.224691][T10705] ceph: No mds server is up or the cluster is laggy [ 791.231832][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 791.238499][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 791.513519][ T4374] libceph: connect (1)[c::]:6789 error -101 [ 791.520281][ T4374] libceph: mon0 (1)[c::]:6789 connect error [ 792.503917][ T27] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 792.697292][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.740467][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 792.794934][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 792.814762][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.852292][ T27] usb 4-1: config 0 descriptor?? [ 792.883620][ T27] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 793.947030][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 795.199418][T10742] ntfs3: loop0: try to read out of volume at offset 0x0 [ 795.862637][T10743] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1634'. [ 797.741199][ T27] usb 4-1: USB disconnect, device number 18 [ 798.892999][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'. [ 799.489630][T10769] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 799.991784][T10782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1645'. [ 801.531046][T10789] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1647'. [ 801.746636][T10792] ntfs3: loop2: try to read out of volume at offset 0x0 [ 802.788851][T10806] trusted_key: encrypted_key: insufficient parameters specified [ 805.258312][T10838] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 805.377294][T10843] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1658'. [ 805.976236][T10836] vivid-002: disconnect [ 806.263128][T10850] ntfs3: loop4: try to read out of volume at offset 0x0 [ 806.829490][T10835] vivid-002: reconnect [ 807.286703][T10858] trusted_key: encrypted_key: insufficient parameters specified [ 807.458086][T10864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1664'. [ 808.645637][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.651940][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.152902][ T6557] libceph: connect (1)[c::]:6789 error -101 [ 809.164126][ T6557] libceph: mon0 (1)[c::]:6789 connect error [ 809.255891][T10870] ceph: No mds server is up or the cluster is laggy [ 809.408848][T10888] ax25_connect(): syz.3.1670 uses autobind, please contact jreuter@yaina.de [ 809.461024][ T9715] libceph: connect (1)[c::]:6789 error -101 [ 809.476325][ T9715] libceph: mon0 (1)[c::]:6789 connect error [ 809.833037][T10894] ntfs3: loop4: try to read out of volume at offset 0x0 [ 810.737704][T10902] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 811.234013][ T27] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 811.423954][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 811.436447][ T27] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 811.528175][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.585848][ T27] usb 1-1: Product: syz [ 811.615806][ T27] usb 1-1: Manufacturer: syz [ 811.639463][ T27] usb 1-1: SerialNumber: syz [ 812.548092][T10924] ax25_connect(): syz.4.1680 uses autobind, please contact jreuter@yaina.de [ 813.557824][T10931] trusted_key: encrypted_key: insufficient parameters specified [ 813.749102][T10934] ax25_connect(): syz.1.1683 uses autobind, please contact jreuter@yaina.de [ 813.819184][ T27] usb 1-1: USB disconnect, device number 35 [ 814.503988][T10944] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1685'. [ 814.655989][T10945] ntfs3: loop4: try to read out of volume at offset 0x0 [ 815.995347][T10968] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1693'. [ 816.633128][T10971] trusted_key: encrypted_key: insufficient parameters specified [ 816.761765][T10974] ax25_connect(): syz.2.1696 uses autobind, please contact jreuter@yaina.de [ 817.008663][T10979] ntfs3: loop3: try to read out of volume at offset 0x0 [ 818.112657][T10993] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1700'. [ 819.144082][ T27] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 819.643846][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 821.110427][ T27] usb 1-1: device descriptor read/all, error -71 [ 821.563225][T11018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1707'. [ 824.367889][T11046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1713'. [ 827.577432][T11073] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1721'. [ 829.204427][ T9715] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 829.774043][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1725'. [ 829.858704][T11090] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1725'. [ 829.874069][ T9715] usb 1-1: Using ep0 maxpacket: 16 [ 832.445224][ T9715] usb 1-1: device descriptor read/all, error -71 [ 832.633675][T11119] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1733'. [ 833.759849][T11131] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 836.586508][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1738'. [ 836.615616][T11150] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1738'. [ 838.701406][T11169] ax25_connect(): syz.3.1746 uses autobind, please contact jreuter@yaina.de [ 838.759843][T11169] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 840.776974][T11181] ================================================================== [ 840.785085][T11181] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 840.792323][T11181] Read of size 8 at addr ffff888029856a18 by task syz.1.1748/11181 [ 840.800243][T11181] [ 840.802571][T11181] CPU: 0 PID: 11181 Comm: syz.1.1748 Not tainted syzkaller #0 [ 840.810045][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 840.820116][T11181] Call Trace: [ 840.823398][T11181] [ 840.826331][T11181] dump_stack_lvl+0x188/0x24e [ 840.831021][T11181] ? read_lock_is_recursive+0x10/0x10 [ 840.836396][T11181] ? show_regs_print_info+0x12/0x12 [ 840.841599][T11181] ? load_image+0x400/0x400 [ 840.846100][T11181] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 840.851550][T11181] ? __virt_addr_valid+0x188/0x540 [ 840.856656][T11181] ? __virt_addr_valid+0x465/0x540 [ 840.861762][T11181] ? dvb_device_open+0xc6/0x370 [ 840.866623][T11181] print_report+0xa8/0x210 [ 840.871028][T11181] kasan_report+0x10b/0x140 [ 840.875526][T11181] ? dvb_device_open+0xc6/0x370 [ 840.880372][T11181] dvb_device_open+0xc6/0x370 [ 840.885037][T11181] ? do_raw_spin_unlock+0x11d/0x230 [ 840.890224][T11181] chrdev_open+0x5c5/0x6a0 [ 840.894632][T11181] ? cd_forget+0x160/0x160 [ 840.899038][T11181] ? fsnotify_perm+0x39b/0x550 [ 840.903801][T11181] ? cd_forget+0x160/0x160 [ 840.908297][T11181] do_dentry_open+0x7e9/0x10d0 [ 840.913154][T11181] path_openat+0x2635/0x2ee0 [ 840.917779][T11181] ? verify_lock_unused+0x140/0x140 [ 840.923072][T11181] ? do_syscall_64+0x4c/0xa0 [ 840.927833][T11181] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.933979][T11181] ? do_filp_open+0x430/0x430 [ 840.938751][T11181] do_filp_open+0x1f1/0x430 [ 840.943243][T11181] ? vfs_tmpfile+0x480/0x480 [ 840.947828][T11181] ? _raw_spin_unlock+0x24/0x40 [ 840.952664][T11181] ? alloc_fd+0x58f/0x630 [ 840.956986][T11181] do_sys_openat2+0x150/0x4b0 [ 840.961740][T11181] ? do_sys_open+0xe0/0xe0 [ 840.966146][T11181] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 840.972128][T11181] ? lock_chain_count+0x20/0x20 [ 840.976972][T11181] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 840.983033][T11181] __x64_sys_openat+0x135/0x160 [ 840.987876][T11181] do_syscall_64+0x4c/0xa0 [ 840.992289][T11181] ? clear_bhb_loop+0x60/0xb0 [ 840.996959][T11181] ? clear_bhb_loop+0x60/0xb0 [ 841.001624][T11181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.007507][T11181] RIP: 0033:0x7fd5fcf5cfce [ 841.011920][T11181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 841.031523][T11181] RSP: 002b:00007fd5fddeab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 841.039928][T11181] RAX: ffffffffffffffda RBX: 00007fd5fddeb6c0 RCX: 00007fd5fcf5cfce [ 841.047892][T11181] RDX: 0000000000044e02 RSI: 00007fd5fddeac00 RDI: ffffffffffffff9c [ 841.055857][T11181] RBP: 00007fd5fddeac00 R08: 0000000000000000 R09: 0000000000000000 [ 841.063838][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 841.071795][T11181] R13: 00007fd5fd216128 R14: 00007fd5fd216090 R15: 00007fff0f2c63c8 [ 841.079757][T11181] [ 841.082764][T11181] [ 841.085082][T11181] Allocated by task 1: [ 841.089205][T11181] kasan_set_track+0x4b/0x70 [ 841.093790][T11181] __kasan_kmalloc+0x8e/0xa0 [ 841.098368][T11181] dvb_register_device+0x311/0x2150 [ 841.103567][T11181] dvb_register_frontend+0x645/0x920 [ 841.108847][T11181] vidtv_bridge_probe+0x9a1/0xf70 [ 841.113858][T11181] platform_probe+0x137/0x1c0 [ 841.118536][T11181] really_probe+0x2aa/0xc70 [ 841.123033][T11181] __driver_probe_device+0x18c/0x330 [ 841.128305][T11181] driver_probe_device+0x4f/0x420 [ 841.133327][T11181] __driver_attach+0x44a/0x6e0 [ 841.138077][T11181] bus_for_each_dev+0x182/0x1f0 [ 841.142934][T11181] bus_add_driver+0x30a/0x5a0 [ 841.147619][T11181] driver_register+0x32d/0x430 [ 841.152392][T11181] vidtv_bridge_init+0x39/0x67 [ 841.157222][T11181] do_one_initcall+0x26a/0x840 [ 841.161979][T11181] do_initcall_level+0x137/0x1e4 [ 841.166922][T11181] do_initcalls+0x4b/0x8a [ 841.171242][T11181] kernel_init_freeable+0x415/0x5be [ 841.176471][T11181] kernel_init+0x19/0x1b0 [ 841.180817][T11181] ret_from_fork+0x1f/0x30 [ 841.185243][T11181] [ 841.187564][T11181] Freed by task 11131: [ 841.191619][T11181] kasan_set_track+0x4b/0x70 [ 841.196211][T11181] kasan_save_free_info+0x2d/0x50 [ 841.201314][T11181] ____kasan_slab_free+0x126/0x1e0 [ 841.206420][T11181] slab_free_freelist_hook+0x131/0x1a0 [ 841.211870][T11181] __kmem_cache_free+0xb6/0x1f0 [ 841.216716][T11181] dvb_device_open+0x2e7/0x370 [ 841.221472][T11181] chrdev_open+0x5c5/0x6a0 [ 841.225874][T11181] do_dentry_open+0x7e9/0x10d0 [ 841.230658][T11181] path_openat+0x2635/0x2ee0 [ 841.235237][T11181] do_filp_open+0x1f1/0x430 [ 841.239740][T11181] do_sys_openat2+0x150/0x4b0 [ 841.244485][T11181] __x64_sys_openat+0x135/0x160 [ 841.249358][T11181] do_syscall_64+0x4c/0xa0 [ 841.253773][T11181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.259692][T11181] [ 841.262010][T11181] The buggy address belongs to the object at ffff888029856a00 [ 841.262010][T11181] which belongs to the cache kmalloc-256 of size 256 [ 841.276067][T11181] The buggy address is located 24 bytes inside of [ 841.276067][T11181] 256-byte region [ffff888029856a00, ffff888029856b00) [ 841.289250][T11181] [ 841.291575][T11181] The buggy address belongs to the physical page: [ 841.297980][T11181] page:ffffea0000a61580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29856 [ 841.308135][T11181] head:ffffea0000a61580 order:1 compound_mapcount:0 compound_pincount:0 [ 841.316470][T11181] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 841.324548][T11181] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 841.333209][T11181] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 841.341776][T11181] page dumped because: kasan: bad access detected [ 841.348318][T11181] page_owner tracks the page as allocated [ 841.354026][T11181] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9554979076, free_ts 0 [ 841.373745][T11181] post_alloc_hook+0x173/0x1a0 [ 841.378505][T11181] get_page_from_freelist+0x1a1e/0x1ab0 [ 841.384049][T11181] __alloc_pages+0x1ec/0x4f0 [ 841.388626][T11181] alloc_page_interleave+0x24/0x1e0 [ 841.393897][T11181] alloc_slab_page+0x5d/0x160 [ 841.398579][T11181] new_slab+0x87/0x2c0 [ 841.402647][T11181] ___slab_alloc+0xbc6/0x1240 [ 841.407322][T11181] __kmem_cache_alloc_node+0x1a0/0x260 [ 841.412772][T11181] kmalloc_trace+0x26/0xe0 [ 841.417184][T11181] bus_add_driver+0xda/0x5a0 [ 841.421758][T11181] driver_register+0x32d/0x430 [ 841.426510][T11181] usb_register_driver+0x202/0x3d0 [ 841.431631][T11181] do_one_initcall+0x26a/0x840 [ 841.436403][T11181] do_initcall_level+0x137/0x1e4 [ 841.441335][T11181] do_initcalls+0x4b/0x8a [ 841.445655][T11181] kernel_init_freeable+0x415/0x5be [ 841.450840][T11181] page_owner free stack trace missing [ 841.456189][T11181] [ 841.458500][T11181] Memory state around the buggy address: [ 841.464114][T11181] ffff888029856900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 841.472156][T11181] ffff888029856980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 841.480201][T11181] >ffff888029856a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 841.488417][T11181] ^ [ 841.493255][T11181] ffff888029856a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 841.501304][T11181] ffff888029856b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 841.509368][T11181] ================================================================== [ 841.522850][T11181] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 841.530052][T11181] CPU: 0 PID: 11181 Comm: syz.1.1748 Not tainted syzkaller #0 [ 841.537521][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.547561][T11181] Call Trace: [ 841.550829][T11181] [ 841.553761][T11181] dump_stack_lvl+0x188/0x24e [ 841.558434][T11181] ? memcpy+0x3c/0x60 [ 841.562393][T11181] ? show_regs_print_info+0x12/0x12 [ 841.567573][T11181] ? load_image+0x400/0x400 [ 841.572055][T11181] panic+0x2e5/0x730 [ 841.575938][T11181] ? bpf_jit_dump+0xd0/0xd0 [ 841.580419][T11181] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 841.586401][T11181] ? _raw_spin_unlock+0x40/0x40 [ 841.591318][T11181] check_panic_on_warn+0x80/0xa0 [ 841.596313][T11181] ? dvb_device_open+0xc6/0x370 [ 841.601141][T11181] end_report+0x66/0x110 [ 841.605394][T11181] kasan_report+0x118/0x140 [ 841.609877][T11181] ? dvb_device_open+0xc6/0x370 [ 841.614710][T11181] dvb_device_open+0xc6/0x370 [ 841.619370][T11181] ? do_raw_spin_unlock+0x11d/0x230 [ 841.624665][T11181] chrdev_open+0x5c5/0x6a0 [ 841.629165][T11181] ? cd_forget+0x160/0x160 [ 841.633659][T11181] ? fsnotify_perm+0x39b/0x550 [ 841.638444][T11181] ? cd_forget+0x160/0x160 [ 841.642925][T11181] do_dentry_open+0x7e9/0x10d0 [ 841.647674][T11181] path_openat+0x2635/0x2ee0 [ 841.652308][T11181] ? verify_lock_unused+0x140/0x140 [ 841.657486][T11181] ? do_syscall_64+0x4c/0xa0 [ 841.662083][T11181] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.668141][T11181] ? do_filp_open+0x430/0x430 [ 841.672799][T11181] do_filp_open+0x1f1/0x430 [ 841.677414][T11181] ? vfs_tmpfile+0x480/0x480 [ 841.681986][T11181] ? _raw_spin_unlock+0x24/0x40 [ 841.686814][T11181] ? alloc_fd+0x58f/0x630 [ 841.691122][T11181] do_sys_openat2+0x150/0x4b0 [ 841.695779][T11181] ? do_sys_open+0xe0/0xe0 [ 841.700176][T11181] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 841.706137][T11181] ? lock_chain_count+0x20/0x20 [ 841.710966][T11181] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 841.716924][T11181] __x64_sys_openat+0x135/0x160 [ 841.721756][T11181] do_syscall_64+0x4c/0xa0 [ 841.726155][T11181] ? clear_bhb_loop+0x60/0xb0 [ 841.730809][T11181] ? clear_bhb_loop+0x60/0xb0 [ 841.735464][T11181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.741334][T11181] RIP: 0033:0x7fd5fcf5cfce [ 841.745724][T11181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 841.765309][T11181] RSP: 002b:00007fd5fddeab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 841.773700][T11181] RAX: ffffffffffffffda RBX: 00007fd5fddeb6c0 RCX: 00007fd5fcf5cfce [ 841.781746][T11181] RDX: 0000000000044e02 RSI: 00007fd5fddeac00 RDI: ffffffffffffff9c [ 841.789698][T11181] RBP: 00007fd5fddeac00 R08: 0000000000000000 R09: 0000000000000000 [ 841.797650][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 841.805603][T11181] R13: 00007fd5fd216128 R14: 00007fd5fd216090 R15: 00007fff0f2c63c8 [ 841.813646][T11181] [ 841.816951][T11181] Kernel Offset: disabled [ 841.821301][T11181] Rebooting in 86400 seconds..