last executing test programs: 16.768495089s ago: executing program 4 (id=10495): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f00000023c0)) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x4, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c041}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101000, 0xd5) openat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 13.986240517s ago: executing program 0 (id=10503): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x2, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x1002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x468d, &(0x7f0000000300)={0x0, 0x9b92, 0x4, 0x1, 0x226, 0x0, r3}, &(0x7f0000000280), &(0x7f0000000380)) close(0xffffffffffffffff) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, 0x0, 0x0) sendfile(r5, r3, 0x0, 0x8010002b) 10.746359402s ago: executing program 3 (id=10507): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x11, 0x10000, 0x0, 0x99d, 0x14, 0x1, 0xe8, 0x3, 0x1, 0x1, 0x7f, 0xffff9d77, 0x7, 0x6d, 0x6, 0x7, [0x3e5, 0xfffffffe]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000f00)=ANY=[], 0x78) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) getpgrp(0x0) r4 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000280)={{r6, r7+10000000}, {0x77359400}}, &(0x7f0000002340)) 9.803151241s ago: executing program 4 (id=10510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, 0xffffffffffffffff, 0xfffffffffffffff8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) syz_emit_vhci(0x0, 0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x8004) r2 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000001400)=0x3d70, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev, 0x0, r2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b0000000000488467f85939db2724be916536df900c0298ff90023e0997e75351299272340377043b5a10d180a6bf687f36ac3cd10026b153d10034a6d240a098648b85893f2c1972fa0ef0e84d60b2255ae4b7f2031c81168784d6"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.888865664s ago: executing program 1 (id=10513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), 0x0) 7.750334379s ago: executing program 1 (id=10514): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x2b, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0x4, r3, 0x1, 0x7, 0x6, @broadcast}, 0x14) 7.732439775s ago: executing program 0 (id=10515): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(0x0, 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$sock(r0, 0x0, 0x8d2) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r2) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r7, @ANYBLOB="17090100000000000000030000000500070000"], 0x5c}}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f0000000180)={0xe9, 0x81}) syz_usb_connect$uac1(0x3, 0x94, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f00092402020000000000072401000001100905"], 0x0) 7.65686853s ago: executing program 1 (id=10516): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x823, &(0x7f0000000480)={0x0, 0x98b8, 0x80, 0x1, 0x5d}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) 6.649448795s ago: executing program 3 (id=10517): open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) execve(0x0, &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x28, 0x1, 0x0) syz_io_uring_setup(0x112, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r8, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.519705648s ago: executing program 4 (id=10518): r0 = open(&(0x7f00000003c0)='./file0\x00', 0x351841, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x112, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x142) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 6.518479858s ago: executing program 1 (id=10519): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f00000001c0)={0xa, 0x2, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x38}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000015000100000000000000080005000000080001001c"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0x6, 0x1, 0xfff}, {0x80, 0x5, 0x3, 0x5}, {0x0, 0x2, 0x9, 0x4}, {0x6, 0x7b, 0xc}, {0x83, 0x4, 0x0, 0x1}]}) 5.507983793s ago: executing program 1 (id=10521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xe8}}, 0x44810) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) readv(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x0) 4.80398077s ago: executing program 4 (id=10523): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) creat(0x0, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) epoll_create(0x1000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250400000008000800", @ANYRES32=r3, @ANYBLOB="48c3631a47d56517b94c688325bcf0e151d7834014991af0a8575ff246cfb49c2ab49eacc1dac2ca71ce220da74a688b348217f77a8d0fcf5d077f95349bee02e92005506db583bae8aba83c749e6640c239bd9e7c669c64a550d11d4a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_emit_ethernet(0x343, &(0x7f00000006c0)={@local, @local, @void, {@ipv4={0x800, @gre={{0x23, 0x4, 0x2, 0x0, 0x335, 0x67, 0x0, 0x7, 0x2f, 0x0, @loopback, @local, {[@noop, @noop, @end, @noop, @cipso={0x86, 0xd, 0x0, [{0x2, 0x4, "90d2"}, {0x2, 0x3, 'u'}]}, @timestamp_addr={0x44, 0x34, 0xdd, 0x1, 0x3, [{@loopback, 0x7fffffff}, {@remote, 0x5}, {@multicast1, 0x80000001}, {@private=0xa010100, 0x7460159f}, {@private=0xa010102, 0x8}, {@rand_addr=0x64010100, 0xff}]}, @timestamp_prespec={0x44, 0x1c, 0xf2, 0x3, 0x9, [{@multicast1, 0x4}, {@multicast2, 0x5b}, {@loopback, 0x1ff}]}, @noop, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x9, [{@empty, 0x5}, {@loopback, 0x9}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6b, 0x0, [0x5, 0x4], "a02b0d02847ff0a59754660dcf99ea6daa931dc487e8d362e4e72e5bdfd24703e7783aa47513c992acc01ef516f0e54fa411c8159e8206db07a8693c41ea18336609135256cd758857ff4ec6a9ad2da057e64db0de866ba02917e97031e9ad4284b792504407e2d89a1aa0"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xc455, 0x2], "f30bba0e45fb103c5cfedc436a2498f5f61aee10b22673d03b8393476e4e1aaacfe77bd91a6c5d885da9bacbb213b3f922d6d54c04ec7fc8945602ec92217719137a0a54e57dbc727d8d49f5f5e2e560da4942f7e3e37b0188d25538520cdd4b664a23da2887cc348ad7d55bda66465a3cd2dbb655b90a381e73f722c5d2715e4f022a00a8e6c8fc81b8ea0bd6ea5b20ba8281de6dacc7e762ff90d7daf72f6ed28b3247d6c7bb35eed4812e51457d66798e5b76040895931f593d15fb938f36"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x2, 0x7], "296335774a95c41d3367f44f7fa947030946ba6b7f1ba952bf7365d6a6c0e44a22b1edfe685da08cabf607c202b906078ba1ada02b17be339259dc4bf33f5a40053cc980e94aacd610beed2a23a740826036396a7a32c538a85e7110"}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0xa8, 0x2, 0x1, 0x3, 0x5, 0x6}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0x9, 0x3, 0x0, 0x1, 0x1, 0x8}, 0x2, {0xf, 0x1, 0x3, 0x4, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "19b7726075397f4062def4a74bd79618f13cfa0a881c0e5fa2d292ea96d1f4c5bb1922dda4726be01ffe79aed80ff2e057cf71bc0d1438c478783e5aa2acf22077bfef674eb3f06dabb5e23734cb1db7e16f696f2a444f2f1eb6e4fb7fdcc305aec3c91674f2de654618bc748bfe5ed8270dfb12c01bf68d7fbb0ae10c981b0aa17a5fe8165a8ea5ae3fbc619acf5c4002f6a23a8813d023c01649ed6bee4c9eabdf2d7e334a9d9f3a5b0b3333990165a0d0f9f131c280c05ca5e1cf60ff6044b7e5fde59ebeb50fd9c3347d2c98100503eb"}}}}}}, 0x0) 4.572290351s ago: executing program 0 (id=10525): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) add_key$user(0x0, 0x0, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c", 0x71, 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x2, 0x24, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) 3.758643226s ago: executing program 2 (id=10527): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008", @ANYRES32=r4], 0x54}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f0000000100)=ANY=[@ANYBLOB='\b']) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.614350104s ago: executing program 4 (id=10528): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.070034072s ago: executing program 2 (id=10529): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000001400)=0x3d70, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev, 0x0, r2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b0000000000488467f85939db2724be916536df900c0298ff90023e0997e75351299272340377043b5a10d180a6bf687f36ac3cd10026b153d10034a6d240a098648b85893f2c1972fa0ef0e84d60b2255ae4b7f2031c81168784d6"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.474275438s ago: executing program 2 (id=10530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.435071073s ago: executing program 3 (id=10531): request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) 2.242342528s ago: executing program 3 (id=10532): statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/153, 0x99}], 0x1) open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x84) iopl(0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="81d7ec1179c854e244dfe13820a2ac88fbcac5517cce360fe3b70f390baa8633454aa7113d72b5c3f7daacc61412f8637162ce8838f4b440e4d94bafb2c4885f451a422e24c11ad29071a769c3e9633ef0fa9fb0d9f7d268901063f715ce8ead2f9ca55fcc44887ea2bb0a6db117c671ee316eafc87d333120bb27096df8a6", 0x7f, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = add_key$user(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r2, 0x0, 0x0, 0xfffffffffffffffe) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=rdma,polt=0x0000000000004e23,sq=0x000000000000000b,\x00']) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x88, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, {0x50, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='wg1\x00') 1.354511241s ago: executing program 2 (id=10533): syz_open_dev$tty1(0xc, 0x4, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_DISALLOCATE(r1, 0x5608) read$FUSE(r0, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 1.340000133s ago: executing program 3 (id=10534): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.250240674s ago: executing program 0 (id=10535): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0x10001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 934.23316ms ago: executing program 2 (id=10536): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() time(&(0x7f0000000180)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x1d) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) 189.280352ms ago: executing program 0 (id=10537): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x2b, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0x4, r3, 0x1, 0x7, 0x6, @broadcast}, 0x14) 130.786064ms ago: executing program 1 (id=10538): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) listen(r0, 0x5) syz_io_uring_setup(0x239, &(0x7f0000000240)={0x0, 0xfbc2, 0x8000, 0x28000003, 0x1}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, &(0x7f0000000080)=[{&(0x7f0000003400)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000003340)="b02c", 0x2}], 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @null, 0x0, 0x200001, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000440)={'\x00', 0xffff, 0x6, 0x6, 0x4, 0xffffffffffff9763, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}, 0x1c) io_setup(0x8, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0xbe26, 0x0, 0x42474752, 0x2, 0x0, [{0x2}, {0x6}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x5}], 0x0, 0x20, 0x2, 0x1}}) 26.255367ms ago: executing program 0 (id=10539): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e590420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x5f5, 0x8}}, 0x50) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x81) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x24) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) listen(r0, 0x7) readv(r0, &(0x7f0000001480)=[{0x0}], 0x1) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) 0s ago: executing program 2 (id=10540): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000280)={{r2, r3+10000000}, {0x77359400}}, &(0x7f0000002340)) kernel console output (not intermixed with test programs): m netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2705.904461][ T6382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2706.925829][ T6670] hub 6-0:1.0: USB hub found [ 2706.933432][ T6670] hub 6-0:1.0: 1 port detected [ 2707.166848][T25184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2707.174716][T25184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2707.426343][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2707.434736][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2708.074573][ T6676] vlan2: entered promiscuous mode [ 2708.135360][ T6676] bridge0: entered promiscuous mode [ 2708.140779][ T6676] vlan2: entered allmulticast mode [ 2708.173209][ T6676] bridge0: entered allmulticast mode [ 2708.223788][ T6677] bridge_slave_0: left allmulticast mode [ 2708.256163][ T6677] bridge_slave_0: left promiscuous mode [ 2708.262038][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 2708.297969][ T6677] bridge_slave_1: left allmulticast mode [ 2708.303651][ T6677] bridge_slave_1: left promiscuous mode [ 2708.309813][T17709] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 2708.320153][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state [ 2708.776236][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9510'. [ 2708.920466][ T6677] bond0: (slave bond_slave_0): Releasing backup interface [ 2708.932689][ T6677] bond0: (slave bond_slave_1): Releasing backup interface [ 2708.966293][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9510'. [ 2708.972322][ T6677] team0: Port device team_slave_0 removed [ 2708.998164][ T6677] team0: Port device team_slave_1 removed [ 2709.005936][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2709.013523][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2709.021234][T17709] usb 3-1: Invalid ep0 maxpacket: 64 [ 2709.055967][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2709.063942][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2709.175032][T17709] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 2710.541188][T17709] usb 3-1: device not accepting address 71, error -71 [ 2710.566654][T17709] usb usb3-port1: attempt power cycle [ 2710.757777][ T6706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2711.114262][ T6711] hub 6-0:1.0: USB hub found [ 2711.119208][ T6711] hub 6-0:1.0: 1 port detected [ 2711.139291][ T6717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9517'. [ 2711.879640][ T6714] lo speed is unknown, defaulting to 1000 [ 2713.161219][T23844] IPVS: starting estimator thread 0... [ 2713.348882][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.355608][ T6734] IPVS: using max 34 ests per chain, 81600 per kthread [ 2714.295184][T23844] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2714.452186][ T6745] vlan2: entered promiscuous mode [ 2714.754004][ T6745] bridge0: entered promiscuous mode [ 2714.760059][ T6745] vlan2: entered allmulticast mode [ 2714.766126][ T6745] bridge0: entered allmulticast mode [ 2714.840887][ T6745] bridge_slave_0: left allmulticast mode [ 2714.868647][ T6745] bridge_slave_0: left promiscuous mode [ 2714.917777][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 2714.989480][ T6745] bridge_slave_1: left allmulticast mode [ 2715.015590][T14986] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 2715.044984][ T6745] bridge_slave_1: left promiscuous mode [ 2715.051025][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 2715.083923][ T6745] bond0: (slave bond_slave_0): Releasing backup interface [ 2715.155780][ T6745] bond0: (slave bond_slave_1): Releasing backup interface [ 2715.207190][T14986] usb 5-1: Invalid ep0 maxpacket: 64 [ 2715.277408][ T6745] team0: Port device team_slave_0 removed [ 2715.329715][ T6745] team0: Port device team_slave_1 removed [ 2715.339484][ T6745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2715.355122][T14986] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 2715.368435][ T6745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2715.386028][ T6745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2715.403905][ T6745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2715.514975][T14986] usb 5-1: Invalid ep0 maxpacket: 64 [ 2715.541567][T14986] usb usb5-port1: attempt power cycle [ 2715.602853][T23844] usb 4-1: device descriptor read/all, error -71 [ 2715.603407][ T6753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2716.011525][T14986] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 2716.239633][T14986] usb 5-1: Invalid ep0 maxpacket: 64 [ 2716.348736][ T6762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9529'. [ 2716.386349][T14986] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 2716.470493][T14986] usb 5-1: Invalid ep0 maxpacket: 64 [ 2716.491530][T14986] usb usb5-port1: unable to enumerate USB device [ 2716.865621][ T6764] hub 6-0:1.0: USB hub found [ 2716.870666][ T6764] hub 6-0:1.0: 1 port detected [ 2718.804690][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9537'. [ 2718.912299][ T6796] netlink: 'syz.3.9537': attribute type 27 has an invalid length. [ 2720.045809][T14986] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2720.549244][T20492] Bluetooth: hci0: command 0x0406 tx timeout [ 2720.610440][T14986] usb 3-1: config 0 has no interfaces? [ 2720.627864][T14986] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2720.644880][T14986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2720.683433][T14986] usb 3-1: Product: syz [ 2720.718233][T14986] usb 3-1: Manufacturer: syz [ 2720.730622][T14986] usb 3-1: SerialNumber: syz [ 2720.746219][T14986] usb 3-1: config 0 descriptor?? [ 2721.451448][ T6796] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.466246][ T6796] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.502647][ T6796] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.576532][ T6796] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.911034][ T6796] vlan2: left promiscuous mode [ 2721.916591][ T6796] bridge0: left promiscuous mode [ 2721.921748][ T6796] vlan2: left allmulticast mode [ 2721.927307][ T6796] bridge0: left allmulticast mode [ 2721.955370][ T6793] lo speed is unknown, defaulting to 1000 [ 2723.967759][T20353] usb 3-1: USB disconnect, device number 73 [ 2728.353751][T23844] libceph: connect (1)[c::]:6789 error -101 [ 2728.599919][ T6895] ceph: No mds server is up or the cluster is laggy [ 2728.606920][T23844] libceph: mon0 (1)[c::]:6789 connect error [ 2729.154897][T23844] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2730.628815][T23844] usb 4-1: config 0 has no interfaces? [ 2730.927808][T23844] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2730.937598][T23844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.733339][ T6918] lo speed is unknown, defaulting to 1000 [ 2731.749624][T23844] usb 4-1: Product: syz [ 2731.753933][T23844] usb 4-1: Manufacturer: syz [ 2732.115455][T23844] usb 4-1: SerialNumber: syz [ 2732.145058][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9567'. [ 2732.192645][T23844] usb 4-1: config 0 descriptor?? [ 2734.225088][T23844] usb 4-1: can't set config #0, error -71 [ 2735.009703][T23844] usb 4-1: USB disconnect, device number 84 [ 2735.247870][ T6953] netlink: 'syz.0.9572': attribute type 27 has an invalid length. [ 2735.260393][ T6952] lo speed is unknown, defaulting to 1000 [ 2737.670240][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9578'. [ 2737.780773][ T6970] netlink: 'syz.2.9578': attribute type 27 has an invalid length. [ 2737.919431][ T6972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9580'. [ 2740.816135][T23844] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2741.567008][T23844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2741.577848][T23844] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2741.594449][T23844] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2741.603970][T23844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2741.617028][T23844] usb 5-1: config 0 descriptor?? [ 2741.631810][ T6970] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2741.643518][T23844] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2741.652128][ T6970] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2741.676950][ T6970] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2741.687105][ T6970] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2742.788451][ T6458] usb 5-1: USB disconnect, device number 64 [ 2742.791192][ T6970] vlan2: left promiscuous mode [ 2742.818118][ T6970] bridge0: left promiscuous mode [ 2742.823571][ T6970] vlan2: left allmulticast mode [ 2742.873735][ T6970] bridge0: left allmulticast mode [ 2743.103452][ T7012] lo speed is unknown, defaulting to 1000 [ 2744.206969][T14986] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2744.437132][T14986] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2744.454953][T14986] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2744.640607][ T7053] macvtap1: entered allmulticast mode [ 2744.646168][ T7053] veth0_macvtap: entered allmulticast mode [ 2744.754706][ T3691] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 2745.007396][T14986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2745.049089][T14986] usb 3-1: config 0 descriptor?? [ 2745.081912][T14986] pwc: Askey VC010 type 2 USB webcam detected. [ 2745.518089][T14986] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2745.536850][T14986] pwc: recv_control_msg error -32 req 02 val 2700 [ 2745.554382][ T7061] virtio-fs: tag not found [ 2745.595168][T14986] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2745.612005][T14986] pwc: recv_control_msg error -32 req 04 val 1000 [ 2745.628668][T14986] pwc: recv_control_msg error -32 req 04 val 1300 [ 2745.661161][T14986] pwc: recv_control_msg error -32 req 04 val 1400 [ 2745.690026][T14986] pwc: recv_control_msg error -32 req 02 val 2000 [ 2745.705751][T14986] pwc: recv_control_msg error -32 req 02 val 2100 [ 2745.713548][T14986] pwc: recv_control_msg error -32 req 04 val 1500 [ 2745.721038][T14986] pwc: recv_control_msg error -32 req 02 val 2500 [ 2745.728361][T14986] pwc: recv_control_msg error -32 req 02 val 2400 [ 2745.827331][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9600'. [ 2745.869949][ T3691] Bluetooth: Frame is too long (len 16, expected len 4) [ 2745.953859][T14986] pwc: recv_control_msg error -71 req 02 val 2900 [ 2745.963179][T14986] pwc: recv_control_msg error -71 req 02 val 2800 [ 2745.985920][T14986] pwc: recv_control_msg error -71 req 04 val 1100 [ 2746.134989][T14986] pwc: recv_control_msg error -71 req 04 val 1200 [ 2746.267671][T14986] pwc: Registered as video103. [ 2746.351202][T14986] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input72 [ 2746.411009][T14986] usb 3-1: USB disconnect, device number 74 [ 2747.051637][T14986] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2747.644971][T14986] usb 3-1: Using ep0 maxpacket: 8 [ 2747.680667][T14986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2747.709427][T14986] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2747.726321][T14986] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 2747.736416][T14986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2747.744711][T14986] usb 3-1: Product: syz [ 2747.790864][T14986] usb 3-1: Manufacturer: syz [ 2747.795899][T14986] usb 3-1: SerialNumber: syz [ 2747.925309][ T7092] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2747.959123][T14986] usb 3-1: config 0 descriptor?? [ 2748.932411][T23844] usb 3-1: USB disconnect, device number 75 [ 2749.238286][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9611'. [ 2749.782667][T14986] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2749.962213][T14986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2750.185024][T14986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2750.195247][T14986] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2750.208468][T14986] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2750.217785][T14986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2750.519179][T14986] usb 4-1: config 0 descriptor?? [ 2751.111939][T14986] usbhid 4-1:0.0: can't add hid device: -71 [ 2751.149179][T14986] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2751.265536][ T3691] Bluetooth: hci5: command 0x0406 tx timeout [ 2751.484990][T14986] usb 4-1: USB disconnect, device number 85 [ 2753.000189][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9623'. [ 2753.275507][ T7152] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2754.986024][ T3015] bridge0: port 3(batadv0) entered disabled state [ 2755.214651][ T3015] bridge_slave_0: left allmulticast mode [ 2755.231258][ T3015] bridge_slave_0: left promiscuous mode [ 2755.244500][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 2755.337128][ T3015] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 2755.352655][ T3015] batadv0: mtu less than device minimum [ 2755.361716][ T3015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2755.374095][ T3015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2755.385434][ T3015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2755.396718][ T3015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2755.408926][ T3015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2755.420505][ T3015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2755.432122][ T3015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2755.443736][ T3015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2755.454979][ T3015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2756.958819][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9636'. [ 2756.997092][ T7189] kernel read not supported for file /eth0 (pid: 7189 comm: syz.2.9634) [ 2757.020642][ T30] audit: type=1800 audit(1745998947.627:7951): pid=7189 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.9634" name="eth0" dev="mqueue" ino=182209 res=0 errno=0 [ 2757.132140][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9637'. [ 2757.717308][ T3015] batman_adv: batadv0: Removing interface: ip6gretap1 [ 2759.918564][ T3015] team0: Port device geneve0 removed [ 2759.941242][ T3015] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2760.217530][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2760.229126][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2760.240672][ T3015] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2760.252478][ T3015] bond0 (unregistering): Released all slaves [ 2760.795846][T14986] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2760.894329][ T1003] net_ratelimit: 17 callbacks suppressed [ 2760.894347][ T1003] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 2761.134910][T14986] usb 3-1: Using ep0 maxpacket: 8 [ 2761.141878][T14986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2761.155053][T14986] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2761.710987][T14986] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 2761.720373][T14986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2761.732698][T14986] usb 3-1: Product: syz [ 2761.737336][T14986] usb 3-1: Manufacturer: syz [ 2761.742182][T14986] usb 3-1: SerialNumber: syz [ 2761.759393][T14986] usb 3-1: config 0 descriptor?? [ 2761.793831][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9648'. [ 2762.440259][ T194] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 2762.477302][T14986] usb 3-1: USB disconnect, device number 76 [ 2762.597951][ T7248] kernel read not supported for file /eth0 (pid: 7248 comm: syz.4.9649) [ 2762.618885][ T30] audit: type=1800 audit(1745998953.227:7952): pid=7248 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.9649" name="eth0" dev="mqueue" ino=180343 res=0 errno=0 [ 2762.974212][ T6242] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 2763.258198][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9652'. [ 2764.079009][ T194] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 2764.267565][ T7260] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2764.643347][ T194] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 2764.818523][ T3015] hsr_slave_0: left promiscuous mode [ 2765.425675][T20492] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 2765.913307][ T3015] hsr_slave_1: left promiscuous mode [ 2765.957918][ T194] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 2765.979864][ T3015] batman_adv: batadv0: Interface deactivated: dummy0 [ 2766.022632][ T3015] batman_adv: batadv0: Removing interface: dummy0 [ 2767.062010][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2767.069510][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9659'. [ 2767.085022][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2767.436168][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2767.454650][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2767.494227][ T3015] veth1_macvtap: left promiscuous mode [ 2767.544366][ T3015] veth0_macvtap: left promiscuous mode [ 2767.550940][ T3015] veth1_vlan: left promiscuous mode [ 2769.127908][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 2769.191613][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 2769.829437][ T7269] macvtap2: entered allmulticast mode [ 2769.842987][ T7280] macvtap1: entered allmulticast mode [ 2769.848723][ T7280] veth0_macvtap: entered allmulticast mode [ 2769.986355][ T7292] kernel read not supported for file /eth0 (pid: 7292 comm: syz.0.9662) [ 2770.085126][ T30] audit: type=1800 audit(1745998960.647:7953): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.9662" name="eth0" dev="mqueue" ino=174153 res=0 errno=0 [ 2771.300907][ T7308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9666'. [ 2772.756295][ T7328] netlink: 'syz.3.9671': attribute type 27 has an invalid length. [ 2772.767286][ T7325] lo speed is unknown, defaulting to 1000 [ 2773.335304][T17709] libceph: connect (1)[c::]:6789 error -101 [ 2773.521247][ T7333] ceph: No mds server is up or the cluster is laggy [ 2773.549771][T17709] libceph: mon0 (1)[c::]:6789 connect error [ 2773.564246][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9674'. [ 2774.572471][ T7348] kernel read not supported for file /eth0 (pid: 7348 comm: syz.3.9678) [ 2774.610759][ T30] audit: type=1800 audit(1745998965.217:7954): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.9678" name="eth0" dev="mqueue" ino=177970 res=0 errno=0 [ 2774.712535][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9679'. [ 2774.799131][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2776.146667][T14986] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2776.534908][T14986] usb 4-1: Using ep0 maxpacket: 16 [ 2777.609967][T14986] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2777.623175][T14986] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2777.643816][T14986] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2777.653172][T14986] usb 4-1: config 1 has no interface number 1 [ 2777.659433][T14986] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2777.675919][T14986] usb 4-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2777.714863][T14986] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2777.735073][T14986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2777.743167][T14986] usb 4-1: Product: syz [ 2777.747944][T14986] usb 4-1: Manufacturer: syz [ 2777.752639][T14986] usb 4-1: SerialNumber: syz [ 2778.889578][ T7392] kernel read not supported for file /eth0 (pid: 7392 comm: syz.1.9691) [ 2778.905995][ T30] audit: type=1800 audit(1745998969.507:7955): pid=7392 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.9691" name="eth0" dev="mqueue" ino=182608 res=0 errno=0 [ 2778.998790][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9694'. [ 2779.049592][T14986] usb 4-1: USB disconnect, device number 86 [ 2779.557168][T14986] libceph: connect (1)[c::]:6789 error -101 [ 2779.618529][ T7303] udevd[7303]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2779.627486][T14986] libceph: mon0 (1)[c::]:6789 connect error [ 2780.146251][ T59] libceph: connect (1)[c::]:6789 error -101 [ 2780.152500][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 2780.203838][ T7403] ceph: No mds server is up or the cluster is laggy [ 2780.805431][ T59] libceph: connect (1)[c::]:6789 error -101 [ 2780.811442][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 2782.157093][ T6458] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2782.165148][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 2782.304918][ T7446] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2782.497343][ T6458] usb 3-1: device descriptor read/64, error -32 [ 2782.945426][ T6458] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2783.045394][ T7447] ceph: No mds server is up or the cluster is laggy [ 2783.105672][ T6458] usb 3-1: Using ep0 maxpacket: 16 [ 2783.118743][ T6458] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2783.139065][ T6458] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2783.169016][ T6458] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2783.192962][ T6458] usb 3-1: config 1 has no interface number 1 [ 2783.209804][ T6458] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2783.230330][ T6458] usb 3-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2783.367913][ T6458] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2783.428016][ T6458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2783.474187][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9708'. [ 2783.507886][ T6458] usb 3-1: Product: syz [ 2783.536287][ T6458] usb 3-1: Manufacturer: syz [ 2783.555582][ T6458] usb 3-1: SerialNumber: syz [ 2783.683269][ T7458] kernel read not supported for file /eth0 (pid: 7458 comm: syz.0.9709) [ 2783.740863][ T30] audit: type=1800 audit(1745998974.347:7956): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.9709" name="eth0" dev="mqueue" ino=174153 res=0 errno=0 [ 2784.846675][ T7473] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2786.051847][ T7482] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2786.299627][ T6458] usb 3-1: USB disconnect, device number 78 [ 2787.719429][ T7487] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 2787.788329][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9720'. [ 2788.702096][ T7503] kernel read not supported for file /eth0 (pid: 7503 comm: syz.3.9722) [ 2788.711172][ T30] audit: type=1800 audit(1745998979.327:7957): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.9722" name="eth0" dev="mqueue" ino=177970 res=0 errno=0 [ 2790.983708][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9728'. [ 2791.040728][ T7525] netlink: 'syz.3.9728': attribute type 27 has an invalid length. [ 2791.075255][ T7525] macvtap1: left allmulticast mode [ 2791.097028][ T7525] veth0_macvtap: left allmulticast mode [ 2791.140715][ T7525] macvtap2: left allmulticast mode [ 2791.224053][ T7530] 8021q: VLANs not supported on sit0 [ 2791.275820][ T6749] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2791.428035][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9731'. [ 2791.463906][ T6749] usb 1-1: Using ep0 maxpacket: 16 [ 2791.588161][ T7537] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2791.805332][ T6749] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2791.825821][ T6749] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2791.983286][ T6749] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2791.993966][ T6749] usb 1-1: config 1 has no interface number 1 [ 2792.008432][ T6749] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2792.023003][ T6749] usb 1-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2792.045568][ T7543] kernel read not supported for file /eth0 (pid: 7543 comm: syz.4.9734) [ 2792.063456][ T30] audit: type=1800 audit(1745998982.657:7958): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.9734" name="eth0" dev="mqueue" ino=184111 res=0 errno=0 [ 2792.118315][ T6749] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2792.128688][ T6749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2792.138013][ T6749] usb 1-1: Product: syz [ 2792.143511][ T6749] usb 1-1: Manufacturer: syz [ 2792.168379][ T6749] usb 1-1: SerialNumber: syz [ 2793.201791][ T7564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2794.429670][ T7569] netlink: 'syz.3.9740': attribute type 27 has an invalid length. [ 2794.455006][ T6749] usb 1-1: USB disconnect, device number 84 [ 2795.085889][ T7577] 8021q: VLANs not supported on ip6tnl0 [ 2795.137945][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9739'. [ 2795.182936][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9739'. [ 2795.622723][ T7587] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 2795.815521][ T7592] lo speed is unknown, defaulting to 1000 [ 2795.857114][ T7593] netlink: 'syz.3.9745': attribute type 27 has an invalid length. [ 2796.139520][ T7597] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 2796.604327][ T7602] kernel read not supported for file /eth0 (pid: 7602 comm: syz.2.9748) [ 2796.664907][ T30] audit: type=1800 audit(1745998987.257:7959): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.9748" name="eth0" dev="mqueue" ino=182209 res=0 errno=0 [ 2797.064956][ T5872] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2797.295134][ T6749] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2797.465047][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 2797.476854][ T6749] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2797.617438][ T5872] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2797.785423][T20492] Bluetooth: hci5: unknown advertising packet type: 0x70 [ 2797.858375][ T7629] macvtap1: entered allmulticast mode [ 2797.870994][ T7629] veth0_macvtap: entered allmulticast mode [ 2798.136403][ T6749] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2798.151466][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2798.176412][ T6749] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2798.389234][ T5872] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2798.409186][ T6749] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2798.513180][ T5872] usb 4-1: config 1 has no interface number 1 [ 2798.569215][T14986] libceph: connect (1)[c::]:6789 error -101 [ 2798.586595][ T6749] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2798.599209][ T5872] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2798.615370][T14986] libceph: mon0 (1)[c::]:6789 connect error [ 2798.669507][ T6749] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2798.688820][ T5872] usb 4-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2798.707552][ T6749] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2798.716474][ T6749] usb 1-1: Product: syz [ 2798.717092][ T7643] bridge_slave_0: left allmulticast mode [ 2798.723218][ T5872] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2798.740692][ T6749] usb 1-1: Manufacturer: syz [ 2798.748177][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2798.758787][ T7643] bridge_slave_0: left promiscuous mode [ 2798.780315][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 2798.791338][ T6749] cdc_wdm 1-1:1.0: skipping garbage [ 2798.863099][ T5872] usb 4-1: Product: syz [ 2798.867875][ T6749] cdc_wdm 1-1:1.0: skipping garbage [ 2798.888330][ T7643] bridge_slave_1: left allmulticast mode [ 2798.894429][ T5872] usb 4-1: Manufacturer: syz [ 2798.901726][T23844] libceph: connect (1)[c::]:6789 error -101 [ 2798.901878][T23844] libceph: mon0 (1)[c::]:6789 connect error [ 2798.906862][ T6749] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2798.906876][ T6749] cdc_wdm 1-1:1.0: Unknown control protocol [ 2798.912394][ T5872] usb 4-1: SerialNumber: syz [ 2798.975122][ T7643] bridge_slave_1: left promiscuous mode [ 2798.975395][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 2799.052753][ T7643] bond0: (slave bond_slave_0): Releasing backup interface [ 2799.078267][ T7643] bond0: (slave bond_slave_1): Releasing backup interface [ 2799.190673][ T7643] team0: Port device team_slave_0 removed [ 2799.198370][ T7643] team0: Port device team_slave_1 removed [ 2799.199244][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2799.199278][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2799.228749][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2799.228799][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2799.230023][ T6749] usb 1-1: USB disconnect, device number 85 [ 2799.255831][ T7636] ceph: No mds server is up or the cluster is laggy [ 2799.414486][T23844] libceph: connect (1)[c::]:6789 error -101 [ 2799.414615][T23844] libceph: mon0 (1)[c::]:6789 connect error [ 2800.683309][ T5872] usb 4-1: USB disconnect, device number 87 [ 2800.754486][ T7303] udevd[7303]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2800.777989][ T6458] IPVS: starting estimator thread 0... [ 2800.865108][ T7658] IPVS: using max 36 ests per chain, 86400 per kthread [ 2801.576887][ T7666] macvtap3: entered allmulticast mode [ 2801.576910][ T7666] veth0_macvtap: entered allmulticast mode [ 2802.628813][T20492] Bluetooth: hci1: command 0x0406 tx timeout [ 2803.007837][ T7680] kernel read not supported for file /eth0 (pid: 7680 comm: syz.3.9765) [ 2803.175015][ T30] audit: type=1800 audit(1745998993.727:7960): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.9765" name="eth0" dev="mqueue" ino=177970 res=0 errno=0 [ 2806.253405][ T7707] lo speed is unknown, defaulting to 1000 [ 2807.188809][ T7716] macvtap2: entered allmulticast mode [ 2809.405163][ T6749] libceph: connect (1)[c::]:6789 error -101 [ 2809.454098][ T6749] libceph: mon0 (1)[c::]:6789 connect error [ 2810.180805][ T6749] libceph: connect (1)[c::]:6789 error -101 [ 2810.188263][ T6749] libceph: mon0 (1)[c::]:6789 connect error [ 2810.203228][ T7737] ceph: No mds server is up or the cluster is laggy [ 2810.734728][ T6749] libceph: connect (1)[c::]:6789 error -101 [ 2810.782493][ T6749] libceph: mon0 (1)[c::]:6789 connect error [ 2811.481086][ T7756] 8021q: VLANs not supported on ip6tnl0 [ 2812.688982][ T7766] macvtap3: entered allmulticast mode [ 2813.360334][T17709] IPVS: starting estimator thread 0... [ 2813.803338][ T7775] IPVS: using max 32 ests per chain, 76800 per kthread [ 2814.529061][ T3691] Bluetooth: Unexpected continuation frame (len 16) [ 2815.965063][ T6749] libceph: connect (1)[c::]:6789 error -101 [ 2815.971258][ T6749] libceph: mon0 (1)[c::]:6789 connect error [ 2816.060937][ T7794] ceph: No mds server is up or the cluster is laggy [ 2817.014176][ T7803] macvtap4: entered allmulticast mode [ 2817.153648][ T7805] 8021q: VLANs not supported on ip6tnl0 [ 2817.474917][ T5869] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2817.824941][ T5869] usb 4-1: device descriptor read/64, error -71 [ 2818.194110][ T5869] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2818.786093][ T5869] usb 4-1: device descriptor read/64, error -71 [ 2818.793255][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 2818.799593][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 2818.984200][ T5869] usb usb4-port1: attempt power cycle [ 2819.545950][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 2819.552303][ T7828] ceph: No mds server is up or the cluster is laggy [ 2819.562291][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 2819.960291][ T5869] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2819.985723][ T5869] usb 4-1: device descriptor read/8, error -71 [ 2820.987194][ T7844] macvtap1: entered allmulticast mode [ 2820.992618][ T7844] veth0_macvtap: entered allmulticast mode [ 2821.154901][ T5869] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2821.385058][ T5869] usb 4-1: device descriptor read/8, error -71 [ 2821.507347][ T5869] usb usb4-port1: unable to enumerate USB device [ 2822.730964][ T5869] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2823.072957][ T7866] macvtap2: entered allmulticast mode [ 2823.196766][ T3691] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 2823.748325][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 2823.840694][ T7873] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2824.179460][ T5869] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2824.211018][ T5869] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2824.282305][ T5869] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2824.313363][ T5869] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2824.335016][ T5869] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2824.567803][ T6749] libceph: connect (1)[c::]:6789 error -101 [ 2824.573863][ T6749] libceph: mon0 (1)[c::]:6789 connect error [ 2824.673471][ T7879] ceph: No mds server is up or the cluster is laggy [ 2824.905661][ T5869] usb 4-1: unable to read config index 1 descriptor/all [ 2824.956218][ T5869] usb 4-1: can't read configurations, error -71 [ 2825.070855][ T7889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9818'. [ 2825.467221][ T7900] macvtap5: entered allmulticast mode [ 2826.614940][ T5869] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 2827.147764][ T5869] usb 1-1: Invalid ep0 maxpacket: 64 [ 2827.794273][ T5869] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 2827.795135][ T7921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9827'. [ 2828.126539][ T5869] usb 1-1: Invalid ep0 maxpacket: 64 [ 2828.132944][ T5869] usb usb1-port1: attempt power cycle [ 2828.695152][ T5869] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 2828.945144][ T6458] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2829.124871][ T6458] usb 4-1: Using ep0 maxpacket: 8 [ 2829.141028][ T6458] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2829.164900][ T6458] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2829.207240][ T6458] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2829.313922][ T6458] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2829.550522][ T5869] usb 1-1: device descriptor read/8, error -71 [ 2830.003938][ T7931] ceph: No mds server is up or the cluster is laggy [ 2830.531027][ T6458] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2830.550902][ T6458] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2830.561320][ T6458] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2830.572878][ T6458] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2830.585544][ T6458] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2830.598192][ T6458] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2830.616474][ T6458] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2830.660500][ T6458] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2830.803800][ T6458] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2831.469707][ T6458] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2831.736315][ T6458] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2831.797306][ T6458] usb 4-1: string descriptor 0 read error: -71 [ 2831.926703][ T6458] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2831.974130][ T6458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2832.048333][ T7953] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9839'. [ 2832.222989][ T6458] usb 4-1: can't set config #168, error -71 [ 2832.504426][ T6458] usb 4-1: USB disconnect, device number 94 [ 2834.651100][ T7980] lo speed is unknown, defaulting to 1000 [ 2835.002817][ T7983] team0: Port device gtp0 added [ 2835.795216][ T59] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2835.976417][ T59] usb 4-1: no configurations [ 2835.981065][ T59] usb 4-1: can't read configurations, error -22 [ 2836.115557][ T6749] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2836.155275][ T59] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2836.250401][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.305887][ T6749] usb 5-1: Using ep0 maxpacket: 8 [ 2836.316417][ T6749] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2836.349790][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2836.406615][ T59] usb 4-1: no configurations [ 2836.411351][ T59] usb 4-1: can't read configurations, error -22 [ 2836.455077][ T5872] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2837.332770][ T6749] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2837.345195][ T59] usb usb4-port1: attempt power cycle [ 2837.356004][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2837.367194][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2837.380083][ T6749] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2837.387769][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2837.399230][ T6749] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2837.411861][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2837.423164][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 2837.429515][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2837.442868][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2837.452920][ T5872] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2837.469189][ T6749] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2837.477795][ T5872] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 2837.494648][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2837.507223][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2837.515327][ T5872] usb 3-1: Product: syz [ 2837.519760][ T6749] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2837.531697][ T5872] usb 3-1: Manufacturer: syz [ 2837.536412][ T5872] usb 3-1: SerialNumber: syz [ 2837.541877][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2837.554355][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2837.566808][ T5872] usb 3-1: config 0 descriptor?? [ 2837.580068][ T6749] usb 5-1: string descriptor 0 read error: -22 [ 2837.586893][ T6749] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2837.596066][ T6749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2837.636265][ T6749] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2837.715473][ T59] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2837.855921][ T59] usb 4-1: no configurations [ 2837.860603][ T59] usb 4-1: can't read configurations, error -22 [ 2838.861175][ T5872] usb 3-1: USB disconnect, device number 79 [ 2839.817255][ T6749] usb 5-1: USB disconnect, device number 65 [ 2840.383880][ T8027] macvtap3: entered allmulticast mode [ 2840.417992][ T3691] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 2844.958011][ T8080] macvtap4: entered allmulticast mode [ 2844.989245][ T3691] Bluetooth: hci5: unknown advertising packet type: 0x70 [ 2846.699186][ T8092] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2849.593485][ T6749] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2849.807044][ T6749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2849.913959][ T6749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2849.981339][ T6749] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2850.574849][ T6749] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2850.583937][ T6749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2850.663152][ T6749] usb 5-1: config 0 descriptor?? [ 2851.728468][ T8143] macvtap1: entered allmulticast mode [ 2851.733930][ T8143] veth0_macvtap: entered allmulticast mode [ 2851.816616][ T3691] Bluetooth: hci0: unknown advertising packet type: 0x70 [ 2852.122531][ T6749] usbhid 5-1:0.0: can't add hid device: -71 [ 2852.774039][ T6749] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2852.805170][ T6749] usb 5-1: USB disconnect, device number 66 [ 2853.336641][ T5872] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2854.405121][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 2854.618207][ T5872] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2855.415054][ T5872] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2855.428532][ T5872] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2855.440665][ T5872] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2855.455019][ T5872] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2855.516773][ T5872] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2855.524436][ T5872] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2855.537113][ T5872] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2855.553029][ T5872] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2855.564893][ T5872] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2855.604417][ T5872] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2855.640973][ T5872] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2855.682537][ T5872] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2855.700696][ T5872] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2855.714681][ T5872] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2855.884868][ T5872] usb 4-1: string descriptor 0 read error: -22 [ 2855.891638][ T5872] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2855.895170][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9887'. [ 2855.933129][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2857.247406][ T8177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2857.635454][ T5872] usb 4-1: can't set config #168, error -71 [ 2857.701041][ T5872] usb 4-1: USB disconnect, device number 99 [ 2859.569504][ T8204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9898'. [ 2859.845156][ T8213] netlink: 'syz.0.9900': attribute type 27 has an invalid length. [ 2859.926781][ T8213] macvtap1: left allmulticast mode [ 2859.946025][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9901'. [ 2860.066654][ T8213] macvtap2: left allmulticast mode [ 2860.152654][ T8213] veth0_macvtap: left allmulticast mode [ 2860.182488][ T8213] macvtap3: left allmulticast mode [ 2861.394937][ T5869] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 2862.227319][ T8253] macvtap6: entered allmulticast mode [ 2862.405332][ T5869] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2862.439634][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2862.509964][ T5869] usb 1-1: Product: syz [ 2862.514367][ T5869] usb 1-1: Manufacturer: syz [ 2862.545998][ T5869] usb 1-1: SerialNumber: syz [ 2862.565983][ T5869] usb 1-1: config 0 descriptor?? [ 2863.748273][ T8268] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9912'. [ 2863.901467][ T5869] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2864.806129][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9914'. [ 2864.894973][ T5889] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 2865.070029][ T5889] usb 4-1: config 0 has no interfaces? [ 2865.082328][ T5889] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2865.108052][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2865.128746][ T5889] usb 4-1: Product: syz [ 2865.179737][ T8288] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 2865.201482][ T5889] usb 4-1: Manufacturer: syz [ 2865.241398][ T5889] usb 4-1: SerialNumber: syz [ 2865.265149][ T5889] usb 4-1: config 0 descriptor?? [ 2865.323257][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 2865.405973][ T5869] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2865.445298][ T5869] usb 1-1: USB disconnect, device number 90 [ 2866.954229][ T8313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9923'. [ 2867.097529][T25721] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2867.133249][ T8315] macvtap5: entered allmulticast mode [ 2867.720817][T25721] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2867.751322][T25721] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2867.761180][T25721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2867.782362][T25721] usb 5-1: config 0 descriptor?? [ 2867.978342][T25721] pwc: Askey VC010 type 2 USB webcam detected. [ 2868.924559][T25721] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2868.936189][T25721] pwc: recv_control_msg error -32 req 02 val 2700 [ 2869.071040][T25721] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2869.081683][T25721] pwc: recv_control_msg error -32 req 04 val 1000 [ 2869.101611][T25721] pwc: recv_control_msg error -32 req 04 val 1300 [ 2869.116434][ T6749] usb 4-1: USB disconnect, device number 100 [ 2869.155689][T25721] pwc: recv_control_msg error -32 req 04 val 1400 [ 2869.163488][T25721] pwc: recv_control_msg error -32 req 02 val 2000 [ 2869.171671][T25721] pwc: recv_control_msg error -32 req 02 val 2100 [ 2869.179212][T25721] pwc: recv_control_msg error -32 req 04 val 1500 [ 2869.186700][T25721] pwc: recv_control_msg error -32 req 02 val 2500 [ 2869.196298][T25721] pwc: recv_control_msg error -32 req 02 val 2400 [ 2869.230352][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 2869.238569][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 2869.371997][ T8333] ceph: No mds server is up or the cluster is laggy [ 2869.417223][T25721] pwc: recv_control_msg error -71 req 02 val 2900 [ 2869.434358][T25721] pwc: recv_control_msg error -71 req 02 val 2800 [ 2869.469305][T25721] pwc: recv_control_msg error -71 req 04 val 1100 [ 2869.482151][T25721] pwc: recv_control_msg error -71 req 04 val 1200 [ 2869.493827][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9931'. [ 2869.604691][T25721] pwc: Registered as video103. [ 2869.641507][T25721] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input73 [ 2870.231963][T25721] usb 5-1: USB disconnect, device number 67 [ 2870.681104][ T8356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2871.781185][ T8365] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9934'. [ 2873.908856][ T6749] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2874.018623][ T8404] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2874.372126][ T6749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2874.411092][ T6749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2874.452983][ T6749] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2874.481852][ T6749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2874.515260][ T6749] usb 5-1: config 0 descriptor?? [ 2875.764073][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9940'. [ 2876.203937][ T8424] kAFS: No cell specified [ 2876.216162][ T8424] overlayfs: overlapping lowerdir path [ 2876.882349][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9947'. [ 2876.965665][ T8431] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9948'. [ 2877.091327][ T6749] hid-led 0003:0FC5:B080.004B: probe with driver hid-led failed with error -71 [ 2877.128637][ T6749] usb 5-1: USB disconnect, device number 68 [ 2877.448963][ T8437] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2878.747469][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9954'. [ 2879.688395][ T8469] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9959'. [ 2881.178225][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9961'. [ 2881.425492][T25721] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2881.747681][T25721] usb 5-1: Using ep0 maxpacket: 8 [ 2881.870309][T25721] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2881.870365][T25721] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2881.870391][T25721] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2881.870415][T25721] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2881.870439][T25721] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2881.884292][T25721] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2881.884342][T25721] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2881.884367][T25721] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2881.884388][T25721] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2881.884410][T25721] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2881.890537][T25721] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2881.890584][T25721] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2881.890610][T25721] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2881.890634][T25721] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2881.890657][T25721] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2881.894340][T25721] usb 5-1: string descriptor 0 read error: -22 [ 2881.894456][T25721] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2881.894469][T25721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2881.985434][T25721] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2882.291036][T25721] usb 5-1: USB disconnect, device number 69 [ 2882.840628][ T8507] kAFS: No cell specified [ 2882.848138][ T8507] overlayfs: overlapping lowerdir path [ 2884.386396][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9968'. [ 2884.520831][ T8494] tty tty20: ldisc open failed (-12), clearing slot 19 [ 2884.541164][ T8498] tty tty1: ldisc open failed (-12), clearing slot 0 [ 2884.565914][ T8499] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2884.615557][ T8520] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9971'. [ 2884.744590][ T8500] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 2884.752543][ T8509] pty pty22: ldisc open failed (-12), clearing slot 22 [ 2884.774138][ T8512] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 2884.784589][ T8511] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 2886.130754][ T6749] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 2886.433961][ T6749] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2886.504911][ T6749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2886.543380][ T6749] usb 5-1: Product: syz [ 2886.556359][ T6749] usb 5-1: Manufacturer: syz [ 2886.569918][ T6749] usb 5-1: SerialNumber: syz [ 2887.548153][T27556] IPVS: starting estimator thread 0... [ 2887.614073][ T6749] usb 5-1: config 0 descriptor?? [ 2887.751518][ T8556] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2887.761804][ T8549] IPVS: using max 35 ests per chain, 84000 per kthread [ 2888.076077][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9980'. [ 2888.111517][ T6749] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2888.715435][T27556] libceph: connect (1)[c::]:6789 error -101 [ 2888.721692][T27556] libceph: mon0 (1)[c::]:6789 connect error [ 2888.985246][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 2888.991468][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 2889.060216][ T8560] ceph: No mds server is up or the cluster is laggy [ 2890.080245][ T6749] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2890.194479][ T6749] usb 5-1: USB disconnect, device number 70 [ 2891.075765][ T194] Bluetooth: hci3: Frame reassembly failed (-84) [ 2891.350441][ T8590] kernel read not supported for file /eth0 (pid: 8590 comm: syz.2.9990) [ 2891.408743][ T30] audit: type=1800 audit(1745999081.997:7961): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.9990" name="eth0" dev="mqueue" ino=182209 res=0 errno=0 [ 2892.242956][T27556] IPVS: starting estimator thread 0... [ 2892.435098][ T8605] IPVS: using max 28 ests per chain, 67200 per kthread [ 2893.026026][ T3691] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2894.693711][ T8633] 8021q: VLANs not supported on ip6tnl0 [ 2895.374855][T27556] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2895.546578][T27556] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2895.576732][T27556] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2895.624067][T27556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2895.664402][T27556] usb 1-1: config 0 descriptor?? [ 2895.695652][T27556] pwc: Askey VC010 type 2 USB webcam detected. [ 2895.804876][ T6749] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2896.343877][ T6749] usb 5-1: Using ep0 maxpacket: 8 [ 2896.676754][ T6749] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2896.690583][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2896.712058][ T6749] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2896.726388][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2896.742142][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2896.756903][ T6749] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2896.770141][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2896.793362][ T6749] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2896.806482][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2896.854382][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2896.917298][ T6749] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2896.936591][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2896.948286][T27556] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2897.002403][T27556] pwc: recv_control_msg error -32 req 02 val 2700 [ 2897.021051][T27556] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2897.031994][ T6749] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2897.051165][T27556] pwc: recv_control_msg error -32 req 04 val 1000 [ 2897.066786][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2897.078634][T27556] pwc: recv_control_msg error -32 req 04 val 1300 [ 2897.085667][ T6749] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2897.099278][T27556] pwc: recv_control_msg error -32 req 04 val 1400 [ 2897.108571][T27556] pwc: recv_control_msg error -32 req 02 val 2000 [ 2897.120319][ T6749] usb 5-1: string descriptor 0 read error: -22 [ 2897.140106][ T6749] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2897.154702][T27556] pwc: recv_control_msg error -32 req 02 val 2100 [ 2897.498813][ T6749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2897.509598][T27556] pwc: recv_control_msg error -32 req 04 val 1500 [ 2897.528142][T27556] pwc: recv_control_msg error -32 req 02 val 2500 [ 2897.539941][ T6749] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2897.557679][T27556] pwc: recv_control_msg error -32 req 02 val 2400 [ 2897.680437][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.751792][ T8669] trusted_key: encrypted_key: insufficient parameters specified [ 2897.774813][ T8669] trusted_key: encrypted_key: insufficient parameters specified [ 2897.824261][T27556] pwc: recv_control_msg error -71 req 02 val 2900 [ 2897.855675][T27556] pwc: recv_control_msg error -71 req 02 val 2800 [ 2898.111925][T27556] pwc: recv_control_msg error -71 req 04 val 1100 [ 2898.183625][T27556] pwc: recv_control_msg error -71 req 04 val 1200 [ 2898.234026][ T6749] usb 5-1: USB disconnect, device number 71 [ 2898.273488][T27556] pwc: Registered as video103. [ 2898.301071][T27556] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input74 [ 2898.359197][T27556] usb 1-1: USB disconnect, device number 91 [ 2898.670147][ T8680] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2899.116603][ T6749] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2899.956552][ T6749] usb 3-1: no configurations [ 2899.961217][ T6749] usb 3-1: can't read configurations, error -22 [ 2900.017684][ T8690] 8021q: VLANs not supported on ip6tnl0 [ 2900.164971][ T6749] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2900.240703][ T3691] Bluetooth: hci0: unexpected event for opcode 0x203d [ 2900.365630][ T6749] usb 3-1: no configurations [ 2901.107707][ T6749] usb 3-1: can't read configurations, error -22 [ 2901.126048][ T6749] usb usb3-port1: attempt power cycle [ 2902.254724][ T8713] trusted_key: encrypted_key: insufficient parameters specified [ 2902.275543][ T8713] trusted_key: encrypted_key: insufficient parameters specified [ 2902.293177][ T6749] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2902.615095][ T6749] usb 3-1: device descriptor read/8, error -71 [ 2904.324993][ T3691] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2904.335358][ T3691] Bluetooth: hci0: Injecting HCI hardware error event [ 2904.344629][ T3691] Bluetooth: hci0: hardware error 0x00 [ 2905.251826][ T8733] 8021q: VLANs not supported on ip6tnl0 [ 2905.364893][T27556] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2906.625695][ T3691] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2906.644952][T27556] usb 5-1: Using ep0 maxpacket: 8 [ 2906.667153][T27556] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2906.686772][T27556] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2906.698676][T27556] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2906.698694][T27556] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2906.698708][T27556] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2906.717073][T27556] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2906.717120][T27556] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2906.717143][T27556] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2906.717162][T27556] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2906.717181][T27556] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2906.743521][T27556] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2906.743570][T27556] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2906.743594][T27556] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2906.743615][T27556] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2906.743635][T27556] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2906.797627][T27556] usb 5-1: string descriptor 0 read error: -22 [ 2906.797752][T27556] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2906.797774][T27556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2906.848901][T27556] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2908.055234][T27556] usb 5-1: USB disconnect, device number 72 [ 2909.227248][ T8773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2909.887029][ T8778] 8021q: VLANs not supported on ip6tnl0 [ 2909.999389][ T8780] overlayfs: overlapping lowerdir path [ 2911.086366][ T3691] Bluetooth: hci2: unexpected event for opcode 0x203d [ 2911.174201][ T3691] Bluetooth: Unexpected continuation frame (len 16) [ 2911.408059][ T8798] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10040'. [ 2911.524907][T25721] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2911.854899][T27556] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2912.224976][T25721] usb 4-1: Using ep0 maxpacket: 8 [ 2912.244002][T25721] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2912.253582][T25721] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2912.277110][T25721] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2912.315145][T27556] usb 5-1: Using ep0 maxpacket: 16 [ 2912.335839][T27556] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2912.355119][T27556] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2912.366343][T27556] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2912.375507][T27556] usb 5-1: config 1 has no interface number 1 [ 2912.381783][T27556] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2912.395199][T27556] usb 5-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2912.408366][T27556] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2912.427564][T27556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2912.451046][T27556] usb 5-1: Product: syz [ 2912.455508][T27556] usb 5-1: Manufacturer: syz [ 2912.467461][T27556] usb 5-1: SerialNumber: syz [ 2912.467903][T25721] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2912.505100][T25721] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2912.517923][T25721] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2912.525580][T25721] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2912.552144][T25721] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2912.574801][T25721] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2912.604976][T25721] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2912.631775][ T8805] netlink: 'syz.1.10044': attribute type 27 has an invalid length. [ 2912.732332][T25721] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2912.744949][T25721] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2912.763886][T25721] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2912.838035][T25721] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2912.855512][T25721] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2912.870356][T25721] usb 4-1: string descriptor 0 read error: -22 [ 2912.886124][T25721] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2912.895883][T25721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2912.928688][T25721] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2913.047542][ T3691] Bluetooth: Frame is too long (len 16, expected len 4) [ 2913.261078][T25721] usb 4-1: USB disconnect, device number 101 [ 2914.235921][T27556] usb 5-1: USB disconnect, device number 73 [ 2914.743639][ T8534] udevd[8534]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2914.795053][ T8805] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2914.808737][ T8805] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2914.827030][ T8805] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2914.836636][ T8805] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2915.106723][ T3691] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2915.117396][ T3691] Bluetooth: hci2: Injecting HCI hardware error event [ 2915.131194][T20492] Bluetooth: hci2: hardware error 0x00 [ 2915.464113][ T8805] vlan2: left promiscuous mode [ 2915.484671][ T8805] bridge0: left promiscuous mode [ 2915.509682][ T8805] vlan2: left allmulticast mode [ 2915.514662][ T8805] bridge0: left allmulticast mode [ 2915.530461][ T8805] veth0_macvtap: left allmulticast mode [ 2915.545730][ T8805] macvtap1: left allmulticast mode [ 2915.584218][ T8822] 8021q: VLANs not supported on ip6tnl0 [ 2916.224363][ T8845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2916.945088][T25721] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2917.201259][T25721] usb 5-1: config 0 has no interfaces? [ 2917.239281][T25721] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2917.370448][T20492] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2917.393636][T25721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2917.407215][T25721] usb 5-1: Product: syz [ 2917.415768][T25721] usb 5-1: Manufacturer: syz [ 2917.423494][T25721] usb 5-1: SerialNumber: syz [ 2917.468311][T25721] usb 5-1: config 0 descriptor?? [ 2917.713611][ T8846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2920.083598][T27556] usb 5-1: USB disconnect, device number 74 [ 2920.195063][T25721] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2920.230225][ T8875] 8021q: VLANs not supported on ip6tnl0 [ 2920.321270][ T8876] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2920.435138][ T6749] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2920.505126][T25721] usb 1-1: Using ep0 maxpacket: 8 [ 2920.512166][T25721] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2920.520043][T25721] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2920.532329][T25721] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2920.544367][T25721] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2920.556309][T25721] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2920.569929][T25721] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2920.577520][T25721] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2920.589824][T25721] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2920.602697][T25721] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2920.614710][T25721] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2920.747668][T25721] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2920.846238][T25721] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2920.979600][T25721] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2921.049167][ T6749] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2921.068668][ T6749] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2921.082106][ T6749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2921.090173][T25721] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2921.102306][T25721] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2921.106081][ T6749] usb 3-1: config 0 descriptor?? [ 2921.130096][T25721] usb 1-1: string descriptor 0 read error: -22 [ 2921.142449][ T6749] pwc: Askey VC010 type 2 USB webcam detected. [ 2921.142897][T25721] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2921.166920][T25721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2921.260817][T25721] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2921.544994][ T6749] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2921.566873][ T6749] pwc: recv_control_msg error -32 req 02 val 2700 [ 2922.163152][ T6749] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2922.235010][T14986] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2922.243351][ T6749] pwc: recv_control_msg error -32 req 04 val 1000 [ 2922.306224][ T6749] pwc: recv_control_msg error -32 req 04 val 1300 [ 2922.356962][ T6749] pwc: recv_control_msg error -32 req 04 val 1400 [ 2922.452789][ T6749] pwc: recv_control_msg error -32 req 02 val 2000 [ 2922.471677][ T6749] pwc: recv_control_msg error -32 req 02 val 2100 [ 2922.482149][ T6749] pwc: recv_control_msg error -32 req 04 val 1500 [ 2922.490269][ T6749] pwc: recv_control_msg error -32 req 02 val 2500 [ 2922.498070][ T6749] pwc: recv_control_msg error -32 req 02 val 2400 [ 2922.705667][T27556] usb 1-1: USB disconnect, device number 92 [ 2922.717887][ T6749] pwc: recv_control_msg error -71 req 02 val 2900 [ 2922.733363][T14986] usb 4-1: config 0 has no interfaces? [ 2922.741683][T14986] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2922.755516][ T6749] pwc: recv_control_msg error -71 req 02 val 2800 [ 2922.768133][T14986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2922.785726][ T6749] pwc: recv_control_msg error -71 req 04 val 1100 [ 2922.796651][ T6749] pwc: recv_control_msg error -71 req 04 val 1200 [ 2922.807193][T14986] usb 4-1: config 0 descriptor?? [ 2922.818730][ T6749] pwc: Registered as video103. [ 2922.837120][ T6749] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input75 [ 2922.885804][ T6749] usb 3-1: USB disconnect, device number 84 [ 2923.032272][T20492] Bluetooth: hci1: unexpected event for opcode 0x203d [ 2923.459911][T27556] usb 4-1: USB disconnect, device number 102 [ 2923.935073][T25721] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2923.970170][ T8917] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2924.615031][T25721] usb 5-1: config 0 has no interfaces? [ 2924.661624][T25721] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2924.703470][T25721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2924.728228][T25721] usb 5-1: Product: syz [ 2924.741311][T25721] usb 5-1: Manufacturer: syz [ 2924.755391][T25721] usb 5-1: SerialNumber: syz [ 2924.788800][T25721] usb 5-1: config 0 descriptor?? [ 2924.884011][ T8925] block device autoloading is deprecated and will be removed. [ 2924.925004][T27556] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 2925.424015][T27556] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 2925.511901][ T8911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2925.529392][T27556] usb 4-1: config 0 has no interface number 0 [ 2925.536664][ T6749] libceph: connect (1)[c::]:6789 error -101 [ 2925.543484][ T6749] libceph: mon0 (1)[c::]:6789 connect error [ 2925.573770][ T8927] ceph: No mds server is up or the cluster is laggy [ 2925.587119][T27556] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2925.605732][T27556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2925.749977][ T8936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2925.831573][T27556] usb 4-1: Product: syz [ 2925.966035][T27556] usb 4-1: Manufacturer: syz [ 2925.972147][T27556] usb 4-1: SerialNumber: syz [ 2926.083849][T27556] usb 4-1: config 0 descriptor?? [ 2927.096082][ T8943] blktrace: Concurrent blktraces are not allowed on loop4 [ 2927.122604][T20492] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2927.184783][T20492] Bluetooth: hci1: Injecting HCI hardware error event [ 2927.227676][T20492] Bluetooth: hci1: hardware error 0x00 [ 2927.406547][T27556] usb 4-1: Firmware version (0.0) predates our first public release. [ 2927.458203][T27556] usb 4-1: Please update to version 0.2 or newer [ 2927.559103][T27556] usb 4-1: USB disconnect, device number 103 [ 2927.695260][ T6749] usb 5-1: USB disconnect, device number 75 [ 2927.795152][ T8944] Bluetooth: hci4: unexpected event for opcode 0x203d [ 2928.889082][ T8968] overlayfs: overlapping lowerdir path [ 2929.534897][T20492] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2929.616699][ T8958] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2931.355149][ T6749] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2931.826913][T20492] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2931.837217][T20492] Bluetooth: hci4: Injecting HCI hardware error event [ 2931.851528][T20492] Bluetooth: hci4: hardware error 0x00 [ 2932.287881][ T6749] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2932.350453][ T6749] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2932.359602][ T6749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2932.375426][ T6749] usb 4-1: config 0 descriptor?? [ 2932.396305][ T6749] pwc: Askey VC010 type 2 USB webcam detected. [ 2932.829956][ T6749] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2932.868555][ T6749] pwc: recv_control_msg error -32 req 02 val 2700 [ 2933.270006][ T6749] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2933.290682][ T6749] pwc: recv_control_msg error -32 req 04 val 1000 [ 2933.310798][ T6749] pwc: recv_control_msg error -32 req 04 val 1300 [ 2933.395363][T25721] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2933.490535][ T9007] overlayfs: overlapping lowerdir path [ 2933.795000][ T6749] pwc: recv_control_msg error -32 req 04 val 1400 [ 2933.927627][ T6749] pwc: recv_control_msg error -32 req 02 val 2000 [ 2933.990265][ T6749] pwc: recv_control_msg error -32 req 02 val 2100 [ 2934.036187][ T6749] pwc: recv_control_msg error -32 req 04 val 1500 [ 2934.036594][T25721] usb 3-1: config 0 has no interfaces? [ 2934.096681][ T6749] pwc: recv_control_msg error -32 req 02 val 2500 [ 2934.100886][T25721] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2934.139636][ T9016] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2934.207476][T25721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2934.301198][T25721] usb 3-1: Product: syz [ 2934.310932][T25721] usb 3-1: Manufacturer: syz [ 2934.317715][ T6749] pwc: recv_control_msg error -32 req 02 val 2400 [ 2934.319662][T25721] usb 3-1: SerialNumber: syz [ 2934.343122][T25721] usb 3-1: config 0 descriptor?? [ 2934.394988][ T5889] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2934.545645][T20492] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2934.547216][ T6749] pwc: recv_control_msg error -71 req 02 val 2900 [ 2934.588082][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2934.602129][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2934.604907][ T6749] pwc: recv_control_msg error -71 req 02 val 2800 [ 2934.612231][ T5889] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2934.635141][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2934.651662][ T5889] usb 5-1: config 0 descriptor?? [ 2934.677682][ T6749] pwc: recv_control_msg error -71 req 04 val 1100 [ 2934.824090][ T6749] pwc: recv_control_msg error -71 req 04 val 1200 [ 2934.848542][ T6749] pwc: Registered as video103. [ 2934.884161][ T6749] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input76 [ 2934.995437][ T6749] usb 4-1: USB disconnect, device number 104 [ 2935.006126][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10100'. [ 2935.049337][ T9000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2936.170012][ T5889] hid-led 0003:0FC5:B080.004C: item fetching failed at offset 1/3 [ 2936.832064][ T5889] hid-led 0003:0FC5:B080.004C: probe with driver hid-led failed with error -22 [ 2937.275937][ T6749] usb 3-1: USB disconnect, device number 85 [ 2937.341283][T25721] usb 5-1: USB disconnect, device number 76 [ 2937.815987][ T9043] block device autoloading is deprecated and will be removed. [ 2937.829573][ T6458] libceph: connect (1)[c::]:6789 error -101 [ 2937.854642][ T6458] libceph: mon0 (1)[c::]:6789 connect error [ 2937.950010][ T9042] ceph: No mds server is up or the cluster is laggy [ 2938.497267][ T9062] overlayfs: overlapping lowerdir path [ 2939.854284][T25721] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 2939.999191][ T9075] blktrace: Concurrent blktraces are not allowed on loop4 [ 2941.180611][T25721] usb 4-1: config 0 has no interfaces? [ 2941.194235][T25721] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2941.835205][T25721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2941.972651][T25721] usb 4-1: Product: syz [ 2941.983878][T25721] usb 4-1: Manufacturer: syz [ 2941.996292][T25721] usb 4-1: SerialNumber: syz [ 2942.011939][T25721] usb 4-1: config 0 descriptor?? [ 2942.215081][ T5889] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2942.676218][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 2942.720430][ T5889] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2942.749616][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2942.773364][ T5889] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2942.791249][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2942.802700][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2943.076354][ T5889] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2943.114896][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2943.184981][ T5889] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2943.356518][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2943.368479][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2943.385996][ T5889] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2943.397990][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2943.416277][ T5889] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2943.938595][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2943.973889][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2944.006776][ T5889] usb 3-1: string descriptor 0 read error: -22 [ 2944.018458][ T5889] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2944.114880][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2944.141209][ T5889] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2944.255650][ T5889] usb 3-1: USB disconnect, device number 86 [ 2944.303080][T25721] usb 4-1: can't set config #0, error -71 [ 2944.336275][T25721] usb 4-1: USB disconnect, device number 105 [ 2946.939350][ T9127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2948.653634][ T9141] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10131'. [ 2948.964907][ T6749] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2949.905536][ T6749] usb 4-1: Using ep0 maxpacket: 16 [ 2949.954370][ T6749] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2949.963321][ T6749] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2949.987333][ T6749] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2950.004971][ T6749] usb 4-1: config 1 has no interface number 1 [ 2950.011270][ T6749] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2950.024291][ T6749] usb 4-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2950.072634][ T6749] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2950.104144][ T6749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2950.126884][ T6749] usb 4-1: Product: syz [ 2950.131089][ T6749] usb 4-1: Manufacturer: syz [ 2950.152683][ T6749] usb 4-1: SerialNumber: syz [ 2950.394909][ T5889] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 2951.502982][ T5889] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2951.512955][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2951.570067][ T5889] usb 5-1: config 0 descriptor?? [ 2951.945012][ T6749] usb 4-1: USB disconnect, device number 106 [ 2952.045299][ T5889] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 2952.054446][ T5889] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2952.101568][ T9162] block device autoloading is deprecated and will be removed. [ 2952.818579][ T8534] udevd[8534]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2952.856454][ T5889] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 2952.863178][ T5889] [drm] Initialized udl on minor 2 [ 2952.873720][ T5889] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 2952.889443][ T5889] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2952.914518][T20492] Bluetooth: Frame is too long (len 16, expected len 4) [ 2952.954845][ T9153] block nbd0: server does not support multiple connections per device. [ 2952.963604][ T9153] block nbd0: shutting down sockets [ 2953.107059][ T6749] usb 5-1: USB disconnect, device number 77 [ 2953.109845][ T6458] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2953.249739][ T9180] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2953.502145][ T6458] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2955.440427][ T9189] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2956.046788][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10148'. [ 2958.136820][T27556] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2958.516942][T27556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2958.530181][T27556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2958.554478][T27556] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2958.625881][T27556] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2958.704810][T27556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2958.756894][T27556] usb 3-1: config 0 descriptor?? [ 2959.109632][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2960.718024][T27556] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 2960.816901][T27556] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2961.715016][T14986] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2962.718390][T14986] usb 4-1: config 0 has no interfaces? [ 2962.755279][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10163'. [ 2962.813765][T14986] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2962.896782][T14986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2962.990701][T14986] usb 4-1: Product: syz [ 2963.033787][T14986] usb 4-1: Manufacturer: syz [ 2963.205970][T14986] usb 4-1: SerialNumber: syz [ 2963.479986][T14986] usb 4-1: config 0 descriptor?? [ 2963.957338][T25721] usb 3-1: USB disconnect, device number 87 [ 2963.981888][ T9245] team0: Port device gtp0 removed [ 2968.100577][T14986] usb 4-1: can't set config #0, error -71 [ 2968.120296][T14986] usb 4-1: USB disconnect, device number 107 [ 2970.952537][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10175'. [ 2971.590094][ T9297] netlink: 'syz.2.10175': attribute type 27 has an invalid length. [ 2972.385766][ T9297] macvtap1: left allmulticast mode [ 2972.920300][ T9297] macvtap2: left allmulticast mode [ 2973.011751][ T9314] blktrace: Concurrent blktraces are not allowed on loop6 [ 2973.306272][ T9297] macvtap3: left allmulticast mode [ 2973.313074][ T9297] macvtap4: left allmulticast mode [ 2973.762766][ T9297] veth0_macvtap: left allmulticast mode [ 2973.954885][ T9297] macvtap5: left allmulticast mode [ 2974.372302][ T9328] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2976.548198][T20492] Bluetooth: Frame is too long (len 16, expected len 4) [ 2976.688153][ T9346] blktrace: Concurrent blktraces are not allowed on loop6 [ 2977.036354][ T9348] 8021q: VLANs not supported on ip6tnl0 [ 2977.126154][T27556] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2977.499837][T27556] usb 5-1: config 0 has no interfaces? [ 2977.511524][T27556] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2977.720248][T27556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2977.846304][T27556] usb 5-1: Product: syz [ 2977.853247][T27556] usb 5-1: Manufacturer: syz [ 2977.860217][T27556] usb 5-1: SerialNumber: syz [ 2977.883585][T27556] usb 5-1: config 0 descriptor?? [ 2978.020669][ T9356] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10192'. [ 2978.264934][ T6458] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2978.415151][ T6458] usb 1-1: Using ep0 maxpacket: 16 [ 2978.429584][ T6458] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2978.447037][ T6458] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2978.503000][ T6458] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2978.532431][ T6458] usb 1-1: config 1 has no interface number 1 [ 2978.534906][ T5872] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2978.546194][ T6458] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2978.546234][ T6458] usb 1-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2978.572777][ T6458] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2978.606712][ T6458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2978.628960][T27556] usb 5-1: can't set config #0, error -71 [ 2978.644688][T27556] usb 5-1: USB disconnect, device number 78 [ 2979.514841][ T6458] usb 1-1: Product: syz [ 2979.519103][ T6458] usb 1-1: Manufacturer: syz [ 2979.524585][ T6458] usb 1-1: SerialNumber: syz [ 2979.686266][ T9370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2979.755077][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 2980.333208][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2980.492928][ T5872] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2980.549659][ T5872] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 2980.591030][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2980.619784][ T5872] usb 4-1: Product: syz [ 2980.624142][ T5872] usb 4-1: Manufacturer: syz [ 2980.629651][ T5872] usb 4-1: SerialNumber: syz [ 2980.645521][ T5872] usb 4-1: config 0 descriptor?? [ 2981.549236][ T6458] usb 1-1: USB disconnect, device number 93 [ 2981.955998][ T9385] 8021q: VLANs not supported on ip6tnl0 [ 2982.045131][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10202'. [ 2982.070287][ T8534] udevd[8534]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2982.106551][ T5872] usb 4-1: USB disconnect, device number 108 [ 2982.345737][ T9394] afs: Unknown parameter '' [ 2982.356716][ T9394] overlayfs: overlapping lowerdir path [ 2983.392755][ T9386] netlink: 'syz.0.10202': attribute type 27 has an invalid length. [ 2984.044860][ T5872] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2984.883752][ T5872] usb 3-1: config 0 has no interfaces? [ 2984.944520][ T5872] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2984.954463][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2984.970249][ T5872] usb 3-1: Product: syz [ 2984.974421][ T5872] usb 3-1: Manufacturer: syz [ 2984.979995][ T5872] usb 3-1: SerialNumber: syz [ 2984.994656][ T5872] usb 3-1: config 0 descriptor?? [ 2985.973796][ T5889] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 2986.238178][ T5889] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 2986.280709][ T5889] usb 1-1: config 0 has no interface number 0 [ 2986.409792][ T5889] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2986.434060][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2986.450947][ T5889] usb 1-1: Product: syz [ 2986.454865][ T5872] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2986.475444][ T5889] usb 1-1: Manufacturer: syz [ 2986.492353][ T5889] usb 1-1: SerialNumber: syz [ 2986.576055][ T5889] usb 1-1: config 0 descriptor?? [ 2986.645003][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 2986.663433][ T5872] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2986.677479][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2986.760419][ T5872] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2986.958923][ T5872] usb 5-1: config 1 has no interface number 1 [ 2986.979202][ T5872] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2987.050304][ T5872] usb 5-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2987.130439][T25721] usb 3-1: USB disconnect, device number 88 [ 2987.207816][ T5872] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2987.228624][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2987.241131][ T5872] usb 5-1: Product: syz [ 2987.259839][ T5872] usb 5-1: Manufacturer: syz [ 2987.271814][ T5872] usb 5-1: SerialNumber: syz [ 2987.337638][ T5889] usb 1-1: Firmware version (0.0) predates our first public release. [ 2987.526457][ T5889] usb 1-1: Please update to version 0.2 or newer [ 2988.206247][ T5889] usb 1-1: USB disconnect, device number 94 [ 2988.779143][ T9439] 8021q: VLANs not supported on ip6tnl0 [ 2988.892208][ T9444] afs: Unknown parameter '' [ 2988.902644][ T9444] overlayfs: overlapping lowerdir path [ 2989.822602][ T5872] usb 5-1: USB disconnect, device number 79 [ 2989.968294][ T9453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2990.371476][ T8534] udevd[8534]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2991.165958][ T9459] blktrace: Concurrent blktraces are not allowed on loop6 [ 2991.675534][ T5872] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 2992.546937][ T5872] usb 5-1: config 0 has no interfaces? [ 2992.564482][ T5872] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2993.158922][ T9473] blktrace: Concurrent blktraces are not allowed on loop6 [ 2993.319803][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2993.496913][ T5872] usb 5-1: Product: syz [ 2993.603834][ T5872] usb 5-1: Manufacturer: syz [ 2993.608608][ T5872] usb 5-1: SerialNumber: syz [ 2993.645602][ T5872] usb 5-1: config 0 descriptor?? [ 2996.278318][ T5872] usb 5-1: can't set config #0, error -71 [ 2996.339518][ T5872] usb 5-1: USB disconnect, device number 80 [ 2996.437608][ T9492] 8021q: VLANs not supported on ip6tnl0 [ 2996.545782][ T9493] afs: Unknown parameter '' [ 2996.558045][ T9493] overlayfs: overlapping lowerdir path [ 2997.475078][ T5889] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2997.796509][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2997.823874][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2997.858133][ T5889] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2998.065167][ T9508] overlayfs: missing 'lowerdir' [ 2998.465871][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2998.555979][ T5889] usb 3-1: config 0 descriptor?? [ 3000.106102][ T9522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10235'. [ 3000.366528][ T9527] macvtap2: entered allmulticast mode [ 3000.371989][ T9527] veth0_macvtap: entered allmulticast mode [ 3001.293821][ T9540] 8021q: VLANs not supported on ip6tnl0 [ 3001.656005][ T5889] hid-led 0003:0FC5:B080.004E: probe with driver hid-led failed with error -32 [ 3001.944121][ T9546] afs: Unknown parameter 'dy' [ 3001.949910][ T9546] overlayfs: overlapping lowerdir path [ 3003.790580][ T5872] usb 3-1: USB disconnect, device number 89 [ 3007.324030][ T9585] macvtap6: entered allmulticast mode [ 3007.329714][ T9585] veth0_macvtap: entered allmulticast mode [ 3007.667260][ T9588] block device autoloading is deprecated and will be removed. [ 3008.576696][ T9603] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 3008.860349][ T9604] blktrace: Concurrent blktraces are not allowed on loop6 [ 3009.299946][ T9613] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 3009.722178][ T9618] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3012.355103][T27556] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 3012.934533][ T9644] afs: Unknown parameter 'dy' [ 3012.940625][ T9644] overlayfs: overlapping lowerdir path [ 3013.350278][ T9643] macvtap7: entered allmulticast mode [ 3013.885739][T27556] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3013.928036][T27556] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3013.943827][T27556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3013.985409][T27556] usb 5-1: config 0 descriptor?? [ 3015.096308][T27556] pwc: Askey VC010 type 2 USB webcam detected. [ 3015.689031][T20492] Bluetooth: hci5: unknown advertising packet type: 0x70 [ 3015.750166][T27556] pwc: send_video_command error -71 [ 3015.796186][ T9661] kernel read not supported for file /eth0 (pid: 9661 comm: syz.0.10279) [ 3015.814988][T27556] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 3015.822607][T27556] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 3015.869857][ T9658] macvtap7: entered allmulticast mode [ 3015.878405][ T30] audit: type=1800 audit(1745999206.487:7962): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.10279" name="eth0" dev="mqueue" ino=192916 res=0 errno=0 [ 3015.952476][T27556] usb 5-1: USB disconnect, device number 81 [ 3015.991405][ T9663] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10280'. [ 3017.536519][ T9688] macvtap8: entered allmulticast mode [ 3018.185148][ T5869] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 3018.447809][ T9695] afs: Unknown parameter 'dy' [ 3018.461166][ T9695] overlayfs: overlapping lowerdir path [ 3019.172292][ T5869] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3019.190565][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3019.209882][ T5869] usb 5-1: config 0 descriptor?? [ 3020.002369][ T5869] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 3020.235252][ T5869] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 3020.287601][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10291'. [ 3020.329436][ T5869] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 3020.367007][ T5869] [drm] Initialized udl on minor 2 [ 3020.441089][ T9707] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 3020.668507][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3021.453251][ T5869] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3021.473270][ T5869] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 3021.487882][T25721] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3021.558831][ T5869] usb 5-1: USB disconnect, device number 82 [ 3021.571560][T25721] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3021.609065][T25721] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 3021.742933][ T9713] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10294'. [ 3023.887273][ T9734] overlay: Unknown parameter '//file0' [ 3024.420122][ T9738] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 3026.060610][ T9759] macvtap9: entered allmulticast mode [ 3026.188580][T20492] Bluetooth: hci5: unknown advertising packet type: 0x70 [ 3027.160674][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10308'. [ 3027.552288][ T9768] macvtap10: entered allmulticast mode [ 3027.565671][T20492] Bluetooth: hci5: unknown advertising packet type: 0x70 [ 3028.107502][T20492] Bluetooth: hci5: unexpected event for opcode 0x203d [ 3028.958444][ T9786] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 3029.017882][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10313'. [ 3029.419937][ T70] Bluetooth: hci3: Frame reassembly failed (-84) [ 3029.608685][ T9793] blktrace: Concurrent blktraces are not allowed on loop4 [ 3030.155073][T14986] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 3030.188201][ T9803] 9pnet_virtio: no channels available for device vcan0 [ 3031.042756][T14986] usb 4-1: config 0 has no interfaces? [ 3031.063871][T14986] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3031.110398][T14986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3031.346881][ T9812] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 3031.444072][ T8944] Bluetooth: hci3: command 0x1003 tx timeout [ 3031.452396][T20492] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 3031.508946][T14986] usb 4-1: Product: syz [ 3031.704849][T14986] usb 4-1: Manufacturer: syz [ 3031.712599][ T9813] virtio-fs: tag not found [ 3031.718315][T14986] usb 4-1: SerialNumber: syz [ 3031.789746][T14986] usb 4-1: config 0 descriptor?? [ 3032.145164][T20492] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 3032.153971][T20492] Bluetooth: hci5: Injecting HCI hardware error event [ 3032.164679][T20492] Bluetooth: hci5: hardware error 0x00 [ 3032.235249][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10322'. [ 3033.632980][T27556] usb 4-1: USB disconnect, device number 109 [ 3033.719370][ T9832] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10323'. [ 3033.798307][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10326'. [ 3034.332792][T20492] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 3034.687204][ T9847] 9pnet_virtio: no channels available for device vcan0 [ 3035.534991][ T5869] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 3036.220043][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3036.233521][ T9856] blktrace: Concurrent blktraces are not allowed on loop6 [ 3036.563107][ T5869] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3036.584277][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3036.620861][ T5869] usb 1-1: config 0 descriptor?? [ 3036.657714][ T5869] pwc: Askey VC010 type 2 USB webcam detected. [ 3037.283483][ T5869] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3037.308253][ T5869] pwc: recv_control_msg error -32 req 02 val 2700 [ 3037.324967][ T5869] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3037.335528][ T5869] pwc: recv_control_msg error -32 req 04 val 1000 [ 3037.444904][ T5869] pwc: recv_control_msg error -32 req 04 val 1300 [ 3037.455234][ T5869] pwc: recv_control_msg error -32 req 04 val 1400 [ 3037.502687][ T5869] pwc: recv_control_msg error -32 req 02 val 2000 [ 3037.523602][ T5869] pwc: recv_control_msg error -32 req 02 val 2100 [ 3037.559863][ T5869] pwc: recv_control_msg error -32 req 04 val 1500 [ 3037.578071][ T5869] pwc: recv_control_msg error -32 req 02 val 2500 [ 3037.605750][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10337'. [ 3037.622205][ T5869] pwc: recv_control_msg error -32 req 02 val 2400 [ 3037.644985][ T5869] pwc: recv_control_msg error -32 req 02 val 2600 [ 3037.893836][ T5869] pwc: recv_control_msg error -71 req 02 val 2800 [ 3037.908919][ T5869] pwc: recv_control_msg error -71 req 04 val 1100 [ 3037.921535][ T5869] pwc: recv_control_msg error -71 req 04 val 1200 [ 3037.962704][ T5869] pwc: Registered as video103. [ 3038.085231][ T5869] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input77 [ 3038.173223][ T5869] usb 1-1: USB disconnect, device number 95 [ 3038.205016][T14986] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 3038.432092][T14986] usb 5-1: config 0 has no interfaces? [ 3038.443950][T14986] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3038.462581][T14986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3038.476482][T14986] usb 5-1: Product: syz [ 3038.484340][T14986] usb 5-1: Manufacturer: syz [ 3038.496076][T32336] Bluetooth: hci3: Frame reassembly failed (-84) [ 3038.520734][T14986] usb 5-1: SerialNumber: syz [ 3038.692373][T14986] usb 5-1: config 0 descriptor?? [ 3039.453379][ T9881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3040.552030][ T8944] Bluetooth: hci3: command 0x1003 tx timeout [ 3040.559509][T20492] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 3040.773747][T25721] usb 5-1: USB disconnect, device number 83 [ 3041.700982][ T9906] block device autoloading is deprecated and will be removed. [ 3042.133762][ T9916] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 3042.594270][ T9917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10346'. [ 3043.847731][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10353'. [ 3043.911834][ T9932] netlink: 'syz.3.10353': attribute type 27 has an invalid length. [ 3044.815443][ T9932] macvtap3: left allmulticast mode [ 3045.094935][ T9932] macvtap4: left allmulticast mode [ 3046.329326][ T9932] macvtap5: left allmulticast mode [ 3046.390949][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10358'. [ 3046.406096][ T9932] macvtap6: left allmulticast mode [ 3046.468214][ T9932] veth0_macvtap: left allmulticast mode [ 3046.484358][ T9932] macvtap7: left allmulticast mode [ 3046.556736][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10359'. [ 3046.624943][T14986] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 3046.838957][T14986] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3046.875036][T14986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3047.135000][T14986] usb 5-1: config 0 descriptor?? [ 3047.142635][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10359'. [ 3047.418992][T14986] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 3047.434558][T14986] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 3047.878835][T14986] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 3047.908369][T14986] [drm] Initialized udl on minor 2 [ 3048.123691][T14986] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3048.736372][ T9971] netlink: 'syz.3.10364': attribute type 16 has an invalid length. [ 3048.753063][T14986] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 3048.840005][T27556] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3048.852139][T27556] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 3048.865388][T14986] usb 5-1: USB disconnect, device number 84 [ 3049.065336][ T9980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10363'. [ 3049.314913][ T5889] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 3050.039237][ T9991] blktrace: Concurrent blktraces are not allowed on loop8 [ 3050.248528][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3050.382276][ T5889] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3050.587773][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3050.647492][ T5889] usb 3-1: config 0 descriptor?? [ 3050.837703][ T9995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3050.897115][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 3051.060397][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10371'. [ 3051.203509][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3051.273898][ T5889] pwc: recv_control_msg error -32 req 02 val 2700 [ 3051.410807][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3051.507712][ T5889] pwc: recv_control_msg error -32 req 04 val 1000 [ 3051.545629][ T5889] pwc: recv_control_msg error -32 req 04 val 1300 [ 3051.556292][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10373'. [ 3051.568810][ T5889] pwc: recv_control_msg error -32 req 04 val 1400 [ 3051.622748][ T5889] pwc: recv_control_msg error -32 req 02 val 2000 [ 3051.644029][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10373'. [ 3051.647722][ T5889] pwc: recv_control_msg error -32 req 02 val 2100 [ 3051.876052][ T5889] pwc: recv_control_msg error -32 req 04 val 1500 [ 3051.978991][ T5889] pwc: recv_control_msg error -32 req 02 val 2500 [ 3052.085963][ T5889] pwc: recv_control_msg error -32 req 02 val 2400 [ 3053.293260][ T5889] pwc: recv_control_msg error -71 req 02 val 2900 [ 3053.295927][T10016] 8021q: VLANs not supported on ip6tnl0 [ 3053.305430][ T5889] pwc: recv_control_msg error -71 req 02 val 2800 [ 3053.310909][ T5889] pwc: recv_control_msg error -71 req 04 val 1100 [ 3053.335443][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 3053.423760][ T5889] pwc: Registered as video103. [ 3053.839583][T10024] netlink: 'syz.2.10379': attribute type 16 has an invalid length. [ 3053.863385][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input78 [ 3054.028530][T10028] blktrace: Concurrent blktraces are not allowed on loop2 [ 3055.594112][ T5889] usb 3-1: USB disconnect, device number 90 [ 3056.036493][T10041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3056.422398][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10384'. [ 3056.526947][T10046] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10383'. [ 3057.200250][T10053] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 3060.564887][T14986] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 3060.857415][T14986] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3061.065672][T14986] usb 1-1: config 0 has no interfaces? [ 3061.099418][T14986] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3061.844847][T14986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3061.885049][T14986] usb 1-1: config 0 descriptor?? [ 3062.970629][T25721] usb 1-1: USB disconnect, device number 96 [ 3063.053773][T10083] netlink: 'syz.2.10395': attribute type 16 has an invalid length. [ 3063.248585][T10087] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 3064.249309][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10397'. [ 3066.412414][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10403'. [ 3068.441452][T10127] macvtap2: entered allmulticast mode [ 3068.585344][ T5889] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 3068.591444][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10411'. [ 3068.982889][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3069.019053][ T5889] usb 1-1: config 0 has no interfaces? [ 3069.024618][ T5889] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3069.075040][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3069.106098][ T5889] usb 1-1: config 0 descriptor?? [ 3069.420125][T10142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3070.873325][T14986] usb 1-1: USB disconnect, device number 97 [ 3071.035652][T10161] blktrace: Concurrent blktraces are not allowed on loop6 [ 3071.084972][ T5869] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 3071.526024][T10164] blktrace: Concurrent blktraces are not allowed on loop8 [ 3071.579261][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3071.622411][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3071.743206][ T5869] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 3071.862568][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3071.915036][ T5869] usb 3-1: config 0 descriptor?? [ 3073.423634][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10416'. [ 3074.768263][T10197] macvtap8: entered allmulticast mode [ 3074.773695][T10197] veth0_macvtap: entered allmulticast mode [ 3076.495531][ T5869] usbhid 3-1:0.0: can't add hid device: -71 [ 3076.501693][ T5869] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3076.515843][ T5869] usb 3-1: USB disconnect, device number 91 [ 3077.432335][T27556] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 3078.657343][T27556] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3078.667904][T27556] usb 3-1: config 0 has no interfaces? [ 3078.683976][T27556] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3078.702560][T27556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3078.721788][T27556] usb 3-1: config 0 descriptor?? [ 3078.885147][ T59] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 3079.081747][ T5869] usb 3-1: USB disconnect, device number 92 [ 3079.086888][ T59] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3079.117117][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3079.161016][ T59] usb 1-1: config 0 descriptor?? [ 3079.383638][ T59] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 3079.409855][ T59] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 3079.464232][ T59] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 3079.484779][ T59] [drm] Initialized udl on minor 2 [ 3079.720985][T10238] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 3079.847100][ T59] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3080.017960][ T59] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 3080.026259][T27556] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3080.057406][ T59] usb 1-1: USB disconnect, device number 98 [ 3080.075548][T27556] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 3080.123087][T27556] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 3080.902636][T10249] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 3081.998118][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.314970][T10261] macvtap11: entered allmulticast mode [ 3085.986427][T10273] macvtap3: entered allmulticast mode [ 3087.469538][T27556] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 3087.676687][T27556] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3087.824847][T27556] usb 4-1: config 0 has no interfaces? [ 3087.834919][T27556] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3087.859896][T27556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3088.145814][T27556] usb 4-1: config 0 descriptor?? [ 3088.529527][T10309] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 3089.103458][ T5869] usb 4-1: USB disconnect, device number 110 [ 3089.597713][T10318] macvtap4: entered allmulticast mode [ 3089.603182][T10318] veth0_macvtap: entered allmulticast mode [ 3095.078305][T10365] macvtap3: entered allmulticast mode [ 3095.825322][ T5872] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 3096.007767][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3096.025748][ T5872] usb 1-1: config 0 has no interfaces? [ 3096.031372][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3096.048168][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3096.064352][ T5872] usb 1-1: config 0 descriptor?? [ 3096.872928][ T5869] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 3096.961294][ T5889] usb 1-1: USB disconnect, device number 99 [ 3097.055016][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 3098.282239][T10401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3098.341013][ T5869] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3098.378602][ T5869] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3098.443401][ T5869] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3098.471961][ T5869] usb 3-1: config 1 has no interface number 1 [ 3098.504148][ T5869] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3098.545614][ T5869] usb 3-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 3098.571268][ T5869] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3098.694464][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3098.704066][ T5869] usb 3-1: Product: syz [ 3098.708701][ T5869] usb 3-1: Manufacturer: syz [ 3098.713324][ T5869] usb 3-1: SerialNumber: syz [ 3099.487221][T10410] macvtap4: entered allmulticast mode [ 3100.066697][ T5869] usb 3-1: can't set config #1, error -71 [ 3100.094900][ T5869] usb 3-1: USB disconnect, device number 93 [ 3100.820524][T10424] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 3102.319850][T10444] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 3102.379373][T17709] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 3102.634798][T17709] usb 1-1: device descriptor read/64, error -71 [ 3102.875039][T17709] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 3102.900654][T10448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10493'. [ 3103.174067][T17709] usb 1-1: device descriptor read/64, error -71 [ 3103.392948][T10455] macvtap9: entered allmulticast mode [ 3103.865561][T17709] usb usb1-port1: attempt power cycle [ 3104.119122][T10464] xt_TPROXY: Can be used only with -p tcp or -p udp [ 3106.133633][T10482] macvtap10: entered allmulticast mode [ 3109.257873][ T194] Bluetooth: hci3: Frame reassembly failed (-84) [ 3111.265283][T20492] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 3111.270786][ T8944] Bluetooth: hci3: command 0x1003 tx timeout [ 3111.574974][ T5872] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 3111.816615][ T5872] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3111.832342][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3111.882354][ T5872] usb 4-1: config 0 descriptor?? [ 3112.020048][T10524] 8021q: VLANs not supported on ip6gre0 [ 3112.119977][ T5872] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 3112.155967][ T5872] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 3112.184908][ T5872] [drm:udl_init] *ERROR* Selecting channel failed [ 3113.074360][ T5872] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 3113.082754][ T5872] [drm] Initialized udl on minor 2 [ 3113.093362][ T5872] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3113.103477][ T5872] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 3113.116875][T27556] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3113.125819][ T5872] usb 4-1: USB disconnect, device number 111 [ 3113.136407][T27556] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 3113.994800][T27556] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 3114.595562][T27556] usb 1-1: Using ep0 maxpacket: 16 [ 3114.653156][T27556] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3114.664958][T27556] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3114.734795][T27556] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3114.752735][T27556] usb 1-1: config 1 has no interface number 1 [ 3114.773534][T27556] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3114.917228][T27556] usb 1-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 3115.004975][T27556] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3115.039509][T10556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3115.058490][T27556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3115.094899][T27556] usb 1-1: Product: syz [ 3115.126076][T27556] usb 1-1: Manufacturer: syz [ 3115.155401][T27556] usb 1-1: SerialNumber: syz [ 3115.194905][T27556] usb 1-1: can't set config #1, error -71 [ 3115.682704][T27556] usb 1-1: USB disconnect, device number 103 [ 3115.850743][T10568] 8021q: VLANs not supported on ip6gre0 [ 3116.089760][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10527'. [ 3117.833933][T10591] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 3119.518525][T10602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3119.582168][T10606] 8021q: VLANs not supported on ip6gre0 [ 3119.908456][T10610] blktrace: Concurrent blktraces are not allowed on loop2 [ 3120.227328][T10608] ------------[ cut here ]------------ [ 3120.227435][T10608] WARNING: CPU: 1 PID: 10608 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 3120.227478][T10608] Modules linked in: [ 3120.227545][T10608] CPU: 1 UID: 0 PID: 10608 Comm: syz.3.10534 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 3120.227570][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 3120.227584][T10608] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 3120.227608][T10608] Code: 42 80 3c 28 00 74 08 48 89 df e8 c4 52 42 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 5a 82 e2 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 3120.227626][T10608] RSP: 0018:ffffc9000bb5f2c8 EFLAGS: 00010283 [ 3120.227646][T10608] RAX: ffffffff85dd3b86 RBX: ffffc9000bb5f440 RCX: 0000000000080000 [ 3120.227662][T10608] RDX: ffffc90011154000 RSI: 0000000000001dd9 RDI: 0000000000001dda [ 3120.227677][T10608] RBP: 1ffff9200176be88 R08: ffffffff8f7d9f77 R09: 1ffffffff1efb3ee [ 3120.227693][T10608] R10: dffffc0000000000 R11: ffffffff85dd3a50 R12: 000002d6795b31e2 [ 3120.227709][T10608] R13: dffffc0000000000 R14: ffff8880203c4028 R15: 000002d6795b31e2 [ 3120.227725][T10608] FS: 00007f2a8e3b06c0(0000) GS:ffff888126203000(0000) knlGS:0000000000000000 [ 3120.227744][T10608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3120.227759][T10608] CR2: 0000200000032000 CR3: 0000000059ace000 CR4: 00000000003526f0 [ 3120.227776][T10608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3120.227789][T10608] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3120.227803][T10608] Call Trace: [ 3120.227812][T10608] [ 3120.227822][T10608] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 3120.227848][T10608] drm_crtc_next_vblank_start+0x223/0x470 [ 3120.227870][T10608] ? ktime_get+0x3e/0x1f0 [ 3120.227894][T10608] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 3120.227924][T10608] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 3120.227945][T10608] ? lockdep_hardirqs_on+0x9c/0x150 [ 3120.227988][T10608] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 3120.228019][T10608] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 3120.228046][T10608] ? read_tsc+0x9/0x20 [ 3120.228071][T10608] ? ktime_get+0x1cb/0x1f0 [ 3120.228093][T10608] commit_tail+0x79/0x3a0 [ 3120.228123][T10608] drm_atomic_helper_commit+0xa6b/0xb10 [ 3120.228152][T10608] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 3120.228172][T10608] drm_atomic_commit+0x25f/0x2c0 [ 3120.228197][T10608] ? __pfx_drm_atomic_commit+0x10/0x10 [ 3120.228214][T10608] ? __pfx___drm_printfn_info+0x10/0x10 [ 3120.228243][T10608] ? drm_client_rotation+0x29c/0x560 [ 3120.228280][T10608] drm_client_modeset_commit_atomic+0x620/0x760 [ 3120.228321][T10608] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 3120.228345][T10608] ? trace_contention_end+0x39/0x120 [ 3120.228409][T10608] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 3120.228442][T10608] drm_client_modeset_commit+0x4a/0x70 [ 3120.228467][T10608] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 3120.228495][T10608] drm_fb_helper_set_par+0xaf/0x100 [ 3120.228519][T10608] fb_set_var+0x818/0xf60 [ 3120.228554][T10608] ? __pfx_fb_set_var+0x10/0x10 [ 3120.228581][T10608] ? trace_irq_disable+0x37/0x110 [ 3120.228601][T10608] ? preempt_schedule_irq+0xde/0x150 [ 3120.228629][T10608] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 3120.228672][T10608] ? irqentry_exit+0x74/0x90 [ 3120.228691][T10608] ? lockdep_hardirqs_on+0x9c/0x150 [ 3120.228757][T10608] do_fb_ioctl+0x63b/0x750 [ 3120.228785][T10608] ? __pfx_do_fb_ioctl+0x10/0x10 [ 3120.228830][T10608] ? smack_file_ioctl+0x240/0x340 [ 3120.228871][T10608] ? __pfx_smack_file_ioctl+0x10/0x10 [ 3120.228912][T10608] ? __fget_files+0x3a0/0x420 [ 3120.228937][T10608] ? __fget_files+0x2a/0x420 [ 3120.228975][T10608] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3120.228997][T10608] ? __pfx_fb_ioctl+0x10/0x10 [ 3120.229022][T10608] __se_sys_ioctl+0xf9/0x170 [ 3120.229049][T10608] do_syscall_64+0xf6/0x210 [ 3120.229071][T10608] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3120.229091][T10608] ? clear_bhb_loop+0x45/0xa0 [ 3120.229115][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3120.229134][T10608] RIP: 0033:0x7f2a8d58e969 [ 3120.229154][T10608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3120.229172][T10608] RSP: 002b:00007f2a8e3b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3120.229194][T10608] RAX: ffffffffffffffda RBX: 00007f2a8d7b6160 RCX: 00007f2a8d58e969 [ 3120.229208][T10608] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000006 [ 3120.229221][T10608] RBP: 00007f2a8d610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3120.229235][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3120.229247][T10608] R13: 0000000000000000 R14: 00007f2a8d7b6160 R15: 00007fff4ccd4978 [ 3120.229282][T10608] [ 3120.229304][T10608] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3120.229319][T10608] CPU: 1 UID: 0 PID: 10608 Comm: syz.3.10534 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 3120.229341][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 3120.229352][T10608] Call Trace: [ 3120.229361][T10608] [ 3120.229370][T10608] dump_stack_lvl+0x99/0x250 [ 3120.229395][T10608] ? __asan_memcpy+0x40/0x70 [ 3120.229419][T10608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3120.229443][T10608] ? __pfx__printk+0x10/0x10 [ 3120.229486][T10608] panic+0x2db/0x790 [ 3120.229522][T10608] ? __pfx_panic+0x10/0x10 [ 3120.229543][T10608] ? show_trace_log_lvl+0x4fb/0x550 [ 3120.229590][T10608] __warn+0x31b/0x4b0 [ 3120.229612][T10608] ? vkms_get_vblank_timestamp+0x137/0x160 [ 3120.229636][T10608] ? vkms_get_vblank_timestamp+0x137/0x160 [ 3120.229657][T10608] report_bug+0x2be/0x4f0 [ 3120.229684][T10608] ? vkms_get_vblank_timestamp+0x137/0x160 [ 3120.229705][T10608] ? vkms_get_vblank_timestamp+0x137/0x160 [ 3120.229726][T10608] ? vkms_get_vblank_timestamp+0x139/0x160 [ 3120.229746][T10608] handle_bug+0x84/0x160 [ 3120.229767][T10608] exc_invalid_op+0x1a/0x50 [ 3120.229787][T10608] asm_exc_invalid_op+0x1a/0x20 [ 3120.229804][T10608] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 3120.229825][T10608] Code: 42 80 3c 28 00 74 08 48 89 df e8 c4 52 42 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 5a 82 e2 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 3120.229840][T10608] RSP: 0018:ffffc9000bb5f2c8 EFLAGS: 00010283 [ 3120.229857][T10608] RAX: ffffffff85dd3b86 RBX: ffffc9000bb5f440 RCX: 0000000000080000 [ 3120.229871][T10608] RDX: ffffc90011154000 RSI: 0000000000001dd9 RDI: 0000000000001dda [ 3120.229884][T10608] RBP: 1ffff9200176be88 R08: ffffffff8f7d9f77 R09: 1ffffffff1efb3ee [ 3120.229898][T10608] R10: dffffc0000000000 R11: ffffffff85dd3a50 R12: 000002d6795b31e2 [ 3120.229912][T10608] R13: dffffc0000000000 R14: ffff8880203c4028 R15: 000002d6795b31e2 [ 3120.229932][T10608] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 3120.229963][T10608] ? vkms_get_vblank_timestamp+0x136/0x160 [ 3120.229992][T10608] ? vkms_get_vblank_timestamp+0x136/0x160 [ 3120.230011][T10608] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 3120.230035][T10608] drm_crtc_next_vblank_start+0x223/0x470 [ 3120.230055][T10608] ? ktime_get+0x3e/0x1f0 [ 3120.230077][T10608] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 3120.230106][T10608] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 3120.230125][T10608] ? lockdep_hardirqs_on+0x9c/0x150 [ 3120.230158][T10608] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 3120.230187][T10608] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 3120.230210][T10608] ? read_tsc+0x9/0x20 [ 3120.230232][T10608] ? ktime_get+0x1cb/0x1f0 [ 3120.230253][T10608] commit_tail+0x79/0x3a0 [ 3120.230282][T10608] drm_atomic_helper_commit+0xa6b/0xb10 [ 3120.230308][T10608] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 3120.230328][T10608] drm_atomic_commit+0x25f/0x2c0 [ 3120.230351][T10608] ? __pfx_drm_atomic_commit+0x10/0x10 [ 3120.230368][T10608] ? __pfx___drm_printfn_info+0x10/0x10 [ 3120.230396][T10608] ? drm_client_rotation+0x29c/0x560 [ 3120.230432][T10608] drm_client_modeset_commit_atomic+0x620/0x760 [ 3120.230471][T10608] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 3120.230494][T10608] ? trace_contention_end+0x39/0x120 [ 3120.230550][T10608] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 3120.230581][T10608] drm_client_modeset_commit+0x4a/0x70 [ 3120.230605][T10608] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 3120.230630][T10608] drm_fb_helper_set_par+0xaf/0x100 [ 3120.230652][T10608] fb_set_var+0x818/0xf60 [ 3120.230685][T10608] ? __pfx_fb_set_var+0x10/0x10 [ 3120.230709][T10608] ? trace_irq_disable+0x37/0x110 [ 3120.230729][T10608] ? preempt_schedule_irq+0xde/0x150 [ 3120.230755][T10608] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 3120.230788][T10608] ? irqentry_exit+0x74/0x90 [ 3120.230805][T10608] ? lockdep_hardirqs_on+0x9c/0x150 [ 3120.230869][T10608] do_fb_ioctl+0x63b/0x750 [ 3120.230898][T10608] ? __pfx_do_fb_ioctl+0x10/0x10 [ 3120.230933][T10608] ? smack_file_ioctl+0x240/0x340 [ 3120.230979][T10608] ? __pfx_smack_file_ioctl+0x10/0x10 [ 3120.231017][T10608] ? __fget_files+0x3a0/0x420 [ 3120.231040][T10608] ? __fget_files+0x2a/0x420 [ 3120.231067][T10608] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3120.231088][T10608] ? __pfx_fb_ioctl+0x10/0x10 [ 3120.231108][T10608] __se_sys_ioctl+0xf9/0x170 [ 3120.231133][T10608] do_syscall_64+0xf6/0x210 [ 3120.231151][T10608] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3120.231170][T10608] ? clear_bhb_loop+0x45/0xa0 [ 3120.231192][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3120.231210][T10608] RIP: 0033:0x7f2a8d58e969 [ 3120.231225][T10608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3120.231240][T10608] RSP: 002b:00007f2a8e3b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3120.231257][T10608] RAX: ffffffffffffffda RBX: 00007f2a8d7b6160 RCX: 00007f2a8d58e969 [ 3120.231270][T10608] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000006 [ 3120.231281][T10608] RBP: 00007f2a8d610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3120.231291][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3120.231303][T10608] R13: 0000000000000000 R14: 00007f2a8d7b6160 R15: 00007fff4ccd4978 [ 3120.231334][T10608] [ 3120.231585][T10608] Kernel Offset: disabled