last executing test programs: 7.498935788s ago: executing program 0 (id=4879): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000440)=[{0x711c, 0xeab0d9885b179549, 0x37, &(0x7f0000000340)="17b826e837707c1721eb18f14aef78d3a4ba69ef31bce78232eaabb22d1e738700ccd539afc33b8530dc5552dca3127c6984c829299214"}, {0x4, 0xe001, 0x0, 0x0}], 0x2}) 7.068664039s ago: executing program 3 (id=4881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 6.973766394s ago: executing program 1 (id=4883): openat$nvram(0xffffff9c, 0x0, 0x101400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x8001af85, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) 6.892219985s ago: executing program 3 (id=4884): syz_usb_connect$midi(0x5, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0xc974134031c523a0, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x2, 0xad05a0f0c4afa3f5, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x9, [], [{{0x9, 0x5, 0x9, 0x3, 0x10, 0x9, 0x2, 0x5, {0x14, 0x25, 0x1, 0x10, "bb203ebbd558c33ae1f56e32914d3af8"}}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x3, 0x2, 0x0, {0x10, 0x25, 0x1, 0xc, "8eb3e5eb01a390904e838885"}}}]}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 6.696883524s ago: executing program 1 (id=4887): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) 6.49635338s ago: executing program 1 (id=4888): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 5.299862781s ago: executing program 3 (id=4891): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000340)="a8", 0xfe56}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x0, 0x0, 0x0, 0x130, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@ip={@private, @local, 0x0, 0x0, 'vcan0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x4}}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) getsockname$packet(r8, 0x0, &(0x7f0000000380)) r9 = socket$nl_route(0x10, 0x3, 0x0) kexec_load(0x4, 0xfffffe1a, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x1, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5735, 0x3}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e20, @empty}, {0x6, @multicast}, 0x0, {0x2, 0x4e21, @broadcast}, 'pim6reg\x00'}) 5.289645338s ago: executing program 4 (id=4892): syz_usb_connect(0x0, 0x2d, &(0x7f00000024c0)={{0x12, 0x1, 0x201, 0xe4, 0xb8, 0xf0, 0x8, 0x157e, 0x3205, 0xc9b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0xa, 0x20, 0x0, "", [{{0x9, 0x4, 0x12, 0x1, 0x1, 0x20, 0xb8, 0xb8, 0x3, [], [{{0x9, 0x5, 0x1, 0x18, 0x10, 0x6, 0x6, 0x21}}]}}]}}]}}, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0}) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000000c0)=ANY=[], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 4.760014529s ago: executing program 2 (id=4894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 4.688519128s ago: executing program 2 (id=4895): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x3030c1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x64c546c48307211d) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004800) io_submit(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, 0x0, 0x400c084) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f0000000240)=@keyring={'key_or_keyring:', r5, 0x30}) request_key(0x0, 0x0, &(0x7f0000000140)='mptcp_pm\x00', r5) r6 = socket(0x2, 0x3, 0xfc) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x400000038a, 0x7) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ptrace$pokeuser(0x6, r7, 0x358, 0x1000) sendfile(r6, r0, 0x0, 0xffba83) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc0100001800110100000000000000000a001000fd040006000000000c001680060006000008000093000880f0ed8d2f299e3b8b9ed89eed74cf7015eb5b8f25d65a1bce0da80ea3a57f58ed386eb8449c5bb40e13a26b7409a46b97bf55602cd36a29322d529783348b7636e1f33a272faa1ffae03ddb6ff0253a3f5582f9dbf50a256d91bd99f8d82feb4c4204b6443eeb152a7e041e81dd67fd94c0d99287c190e8737cfbd53aed05b53007ee1e0580b84ab75f8584f641be2b000800060006000000080010008d000000080017"], 0x1bc}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="19c0e4a8b5dfcc5fdbf4fa1790b1f10f0e33eda23f62eaec5504c63f39870a22b378bf6ab81c8cec1e0e30efe559c988c40954a34333e35a07", @ANYRESHEX=r4, @ANYBLOB="f3f72786318c9a6cf9fe56396f9c577be61b84db14fff0a32c5f2dc7e56309e4d08347a1112742da4efce53d4d7133a089d8041e8c89b5da173efd950a882ea13234f2e8fb525322188a87f6b65953a47fd43a24e23b389eabbd6d20934dd88a690edf5bb4cea0388525", @ANYRESHEX=r4, @ANYRES16, @ANYRESHEX=r5], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x20004084) 4.144499893s ago: executing program 0 (id=4896): r0 = socket(0x2, 0x3, 0xff) sendto$inet(r0, &(0x7f0000000680)="d23da88862bc62a50357f955e3a91ebb1da5761c", 0x14, 0x80d4, 0x0, 0x0) 3.864392484s ago: executing program 3 (id=4897): openat$nvram(0xffffff9c, 0x0, 0x101400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x8001af85, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) 3.799223507s ago: executing program 0 (id=4898): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3.596154104s ago: executing program 0 (id=4899): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x0, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, r2, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) statfs(&(0x7f00000000c0)='./file0/../file0/file0\x00', 0x0) 3.528944684s ago: executing program 3 (id=4900): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x0, 0x3, 0x8, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x240280d1) 3.420994853s ago: executing program 1 (id=4901): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x73, 0x0, 0xee00}, {0x8, 0x9, 0x81, 0x3a4, 0x4, 0x8, 0x6, 0x1}, {0x0, 0xffffffffffff98c9, 0x3ff, 0xffff}, 0x0, 0x6e6bc0, 0x2, 0x0, 0x6, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0xa, @in=@multicast2, 0x3500, 0x2, 0x1, 0x6, 0x0, 0x1, 0x5}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x0, {0x1, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0x5, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 3.096705726s ago: executing program 2 (id=4902): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) bind$packet(r3, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) getpeername$packet(r3, 0x0, 0x0) sendmsg$netlink(r3, 0x0, 0x4000) socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 2.749019361s ago: executing program 4 (id=4903): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x10003, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x4, 0x9c4b, 0x1, 0x3ec7, 0x3, 0x8, 0x0, 0x8}, 0x20) write(r2, &(0x7f0000000140)="04", 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.544716339s ago: executing program 0 (id=4904): socket$packet(0x11, 0xa, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x4, 0x2, &(0x7f0000000100)={0x1d, "14a6c63d876ff44271f19ca6e4482707dab704ed00000034000000507cca4b4ce3"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(0xffffffffffffffff, 0x8b22, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f00000000c0)={0x4, 0x0, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x6, @local}}, 0x10000, 0x37, 0x0, 0x400, 0x80, 0x0, 0x3}, 0x9c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.363181177s ago: executing program 3 (id=4905): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x5, 0x0, 0x10001}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x3, 0x43b6, 0x0, r0}) r4 = socket(0x1d, 0x5, 0x9) ppoll(&(0x7f0000000040)=[{r3, 0x4014}, {r0, 0x118}, {r0, 0x2000}, {r0, 0x24}, {r2, 0x2400}, {r4, 0x200}], 0x6, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0xaa]}, 0x8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r5, 0x0, 0x0, 0x3}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(0x0, r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_buf(r6, 0x0, 0x27, &(0x7f0000005e40)="1700719a0000020001000003d68c5ee17688a2003208420300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2fff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf", 0xad) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000100)=0x8008, 0x4) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x12, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRESDEC]) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000240)={0x4, 0x3, {}, {0xee00}, 0x0, 0x1}) 1.435838068s ago: executing program 4 (id=4906): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)="ea77", 0x2}], 0x1}}], 0x1, 0x119e75c40673edef) 1.128921653s ago: executing program 2 (id=4907): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) 1.065478736s ago: executing program 4 (id=4908): r0 = socket(0x2, 0x3, 0xff) sendto$inet(r0, &(0x7f0000000680)="d23da88862bc62a50357f955e3a91ebb1da5761c", 0x14, 0x80d4, 0x0, 0x0) 867.350182ms ago: executing program 2 (id=4909): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 768.397898ms ago: executing program 1 (id=4910): openat$nvram(0xffffff9c, 0x0, 0x101400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x8001af85, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) 768.036859ms ago: executing program 4 (id=4911): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) 700.292098ms ago: executing program 2 (id=4912): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x3030c1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x64c546c48307211d) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004800) io_submit(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, 0x0, 0x400c084) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f0000000240)=@keyring={'key_or_keyring:', r5, 0x30}) request_key(0x0, 0x0, &(0x7f0000000140)='mptcp_pm\x00', r5) r6 = socket(0x2, 0x3, 0xfc) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x400000038a, 0x7) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ptrace$pokeuser(0x6, r7, 0x358, 0x1000) sendfile(r6, r0, 0x0, 0xffba83) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc0100001800110100000000000000000a001000fd040006000000000c001680060006000008000093000880f0ed8d2f299e3b8b9ed89eed74cf7015eb5b8f25d65a1bce0da80ea3a57f58ed386eb8449c5bb40e13a26b7409a46b97bf55602cd36a29322d529783348b7636e1f33a272faa1ffae03ddb6ff0253a3f5582f9dbf50a256d91bd99f8d82feb4c4204b6443eeb152a7e041e81dd67fd94c0d99287c190e8737cfbd53aed05b53007ee1e0580b84ab75f8584f641be2b000800060006000000080010008d000000080017"], 0x1bc}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="19c0e4a8b5dfcc5fdbf4fa1790b1f10f0e33eda23f62eaec5504c63f39870a22b378bf6ab81c8cec1e0e30efe559c988c40954a34333e35a07", @ANYRESHEX=r4, @ANYBLOB="f3f72786318c9a6cf9fe56396f9c577be61b84db14fff0a32c5f2dc7e56309e4d08347a1112742da4efce53d4d7133a089d8041e8c89b5da173efd950a882ea13234f2e8fb525322188a87f6b65953a47fd43a24e23b389eabbd6d20934dd88a690edf5bb4cea0388525", @ANYRESHEX=r4, @ANYRES16, @ANYRESHEX=r5], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x20004084) 588.473794ms ago: executing program 4 (id=4913): syz_usb_connect(0x0, 0x2d, &(0x7f00000024c0)={{0x12, 0x1, 0x201, 0xe4, 0xb8, 0xf0, 0x8, 0x157e, 0x3205, 0xc9b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0xa, 0x20, 0x0, "", [{{0x9, 0x4, 0x12, 0x1, 0x1, 0x20, 0xb8, 0xb8, 0x3, [], [{{0x9, 0x5, 0x1, 0x18, 0x10, 0x6, 0x6, 0x21}}]}}]}}]}}, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0}) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000000c0)=ANY=[], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 380.548758ms ago: executing program 1 (id=4914): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x1) openat(r1, &(0x7f0000000080)='./file1\x00', 0x2141, 0x24) 0s ago: executing program 0 (id=4915): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x0, 0x3, 0x8, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x240280d1) kernel console output (not intermixed with test programs): setting power OFF [ 841.756457][T16816] dvb-usb: bulk message failed: -22 (2/0) [ 841.763631][T16816] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 841.974164][T16816] (NULL device *): no alternate interface [ 843.013968][T16928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3225'. [ 843.581087][T16816] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 843.596634][T16936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3229'. [ 843.616780][T16816] usb 5-1: USB disconnect, device number 37 [ 844.678157][T16948] syzkaller0: entered promiscuous mode [ 844.707247][T16948] syzkaller0: entered allmulticast mode [ 846.999004][T16983] misc userio: No port type given on /dev/userio [ 847.197430][ T5907] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 847.367832][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 847.378891][ T5907] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 847.408734][ T5907] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 847.463482][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.499027][ T5907] usb 2-1: Product: syz [ 847.512923][ T5907] usb 2-1: Manufacturer: syz [ 847.587483][ T5907] usb 2-1: SerialNumber: syz [ 847.666875][ T5907] usb 2-1: config 0 descriptor?? [ 847.690583][ T5907] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 847.715593][ T5907] usb 2-1: setting power ON [ 847.730900][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 847.748385][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 847.775029][ T5907] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 847.783990][ T5907] usb 2-1: media controller created [ 847.796199][T16989] syzkaller0: entered promiscuous mode [ 847.816522][T16989] syzkaller0: entered allmulticast mode [ 847.851049][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 847.888779][T16978] dvb-usb: bulk message failed: -22 (3/0) [ 847.918503][ T5907] usb 2-1: selecting invalid altsetting 6 [ 847.940021][ T5907] usb 2-1: digital interface selection failed (-22) [ 847.955855][ T5907] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 847.997215][ T5907] usb 2-1: setting power OFF [ 848.009984][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 848.046746][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 848.099853][ T5907] (NULL device *): no alternate interface [ 849.317723][T13838] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 849.490149][T13838] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 849.533647][T13838] usb 4-1: config 0 has no interface number 0 [ 849.556619][T13838] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 849.599767][T13838] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 849.626546][T13838] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 849.659030][T13838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.725820][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3255'. [ 849.739896][T17018] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3255'. [ 849.824349][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 849.891423][T13838] usb 4-1: config 0 descriptor?? [ 849.908060][T17010] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 849.958419][T13838] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 850.128526][T13838] usb 4-1: USB disconnect, device number 40 [ 850.193270][ T5907] usb 2-1: USB disconnect, device number 43 [ 851.636651][ T5907] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 851.914536][T17053] syzkaller0: entered promiscuous mode [ 851.929763][T17053] syzkaller0: entered allmulticast mode [ 851.997443][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 852.004617][ T5907] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 852.015778][ T5907] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 852.025033][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.033338][ T5907] usb 4-1: Product: syz [ 852.082763][ T5907] usb 4-1: Manufacturer: syz [ 852.107140][ T5907] usb 4-1: SerialNumber: syz [ 852.128046][ T5907] usb 4-1: config 0 descriptor?? [ 852.144114][ T5907] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 852.188086][ T5907] usb 4-1: setting power ON [ 852.192662][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 852.218402][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 852.238114][ T5907] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 852.246729][ T5907] usb 4-1: media controller created [ 852.314220][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 852.343004][T17047] dvb-usb: bulk message failed: -22 (3/0) [ 852.435403][ T5907] usb 4-1: selecting invalid altsetting 6 [ 852.448225][ T5907] usb 4-1: digital interface selection failed (-22) [ 852.557711][ T5907] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 852.575224][ T5907] usb 4-1: setting power OFF [ 852.580588][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 852.709365][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 852.720105][ T5907] (NULL device *): no alternate interface [ 854.244910][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3279'. [ 854.314352][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 854.350188][ T5907] usb 4-1: USB disconnect, device number 41 [ 854.675077][T17087] syzkaller0: entered promiscuous mode [ 854.683924][T17087] syzkaller0: entered allmulticast mode [ 855.272649][T17098] fuse: Bad value for 'group_id' [ 855.292538][T17098] fuse: Bad value for 'group_id' [ 855.623524][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3293'. [ 855.908138][ T5907] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 856.087433][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 856.094980][ T5907] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 856.107627][ T5907] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 856.125113][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.154832][ T5907] usb 3-1: Product: syz [ 856.164760][ T5907] usb 3-1: Manufacturer: syz [ 856.182461][ T5907] usb 3-1: SerialNumber: syz [ 856.210971][ T5907] usb 3-1: config 0 descriptor?? [ 856.240449][ T5907] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 856.515278][ T5907] usb 3-1: setting power ON [ 856.536382][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 856.576215][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 856.621776][ T5907] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 856.649065][ T5907] usb 3-1: media controller created [ 856.680487][T17123] syzkaller0: entered promiscuous mode [ 856.723111][T17123] syzkaller0: entered allmulticast mode [ 856.732575][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 856.800467][ T5907] usb 3-1: selecting invalid altsetting 6 [ 856.812313][ T5907] usb 3-1: digital interface selection failed (-22) [ 856.826292][ T5907] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 856.843681][ T5907] usb 3-1: setting power OFF [ 856.849075][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 856.877430][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 856.913679][ T5907] (NULL device *): no alternate interface [ 857.028184][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 857.151313][T16816] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 857.228481][T17133] fuse: Bad value for 'group_id' [ 857.242436][T17133] fuse: Bad value for 'group_id' [ 857.319722][T16816] usb 5-1: Using ep0 maxpacket: 32 [ 857.337521][T16816] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 857.360893][T16816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.395489][T16816] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 857.405495][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3304'. [ 857.414681][T16816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.423708][T16816] usb 5-1: Product: syz [ 857.427989][T16816] usb 5-1: Manufacturer: syz [ 857.432828][T16816] usb 5-1: SerialNumber: syz [ 857.441731][T16816] usb 5-1: config 0 descriptor?? [ 857.450604][T16816] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 857.459360][T16816] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 857.477195][T16816] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 857.505775][T16816] keyspan 5-1:0.0: unsupported endpoint type 0 [ 857.516231][T16816] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 857.525160][T16816] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 857.550713][T16816] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 857.567166][T16816] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 857.583986][T16816] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 857.698667][T16816] usb 5-1: USB disconnect, device number 38 [ 857.735142][T16816] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 857.765943][T16816] keyspan 5-1:0.0: device disconnected [ 857.818515][T17149] syzkaller0: entered promiscuous mode [ 857.824211][T17149] syzkaller0: entered allmulticast mode [ 858.187807][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3310'. [ 858.674987][ T9] usb 3-1: USB disconnect, device number 33 [ 859.115407][T17164] fuse: Bad value for 'group_id' [ 859.120644][T17164] fuse: Bad value for 'group_id' [ 859.677107][T17176] dummy0: entered promiscuous mode [ 859.701533][T17176] macsec1: entered promiscuous mode [ 859.817820][T17178] syzkaller0: entered promiscuous mode [ 859.823390][T17178] syzkaller0: entered allmulticast mode [ 860.641559][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3325'. [ 860.959143][T17199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3329'. [ 861.003019][T17199] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.012632][T17199] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.317254][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'. [ 861.374135][T17207] netlink: 'syz.4.3332': attribute type 11 has an invalid length. [ 861.440835][T17210] syzkaller0: entered promiscuous mode [ 861.446516][T17210] syzkaller0: entered allmulticast mode [ 861.589463][T17219] syzkaller1: entered allmulticast mode [ 863.963831][T17282] syzkaller0: entered promiscuous mode [ 863.972306][T17282] syzkaller0: entered allmulticast mode [ 864.531493][T17290] syzkaller1: entered allmulticast mode [ 865.890765][T17307] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3359'. [ 866.259876][T17317] syzkaller0: entered promiscuous mode [ 866.265455][T17317] syzkaller0: entered allmulticast mode [ 867.103190][T17346] syzkaller1: entered allmulticast mode [ 867.626270][T17360] syzkaller0: entered promiscuous mode [ 867.645098][T17360] syzkaller0: entered allmulticast mode [ 868.478685][T17379] syzkaller1: entered allmulticast mode [ 868.589680][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3393'. [ 868.862486][T17397] syzkaller0: entered promiscuous mode [ 868.886345][T17397] syzkaller0: entered allmulticast mode [ 868.921462][T17395] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3394'. [ 868.998534][T17395] IPv6: NLM_F_CREATE should be specified when creating new route [ 869.144075][T17395] IPv6: Can't replace route, no match found [ 869.965546][T17423] fuse: Unknown parameter 'grou00000000000000000000' [ 870.018058][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 870.056080][T17426] dummy0: entered promiscuous mode [ 870.081186][T17426] macsec1: entered promiscuous mode [ 870.207955][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.214568][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.610077][T17438] syzkaller0: entered promiscuous mode [ 870.615784][T17438] syzkaller0: entered allmulticast mode [ 871.439129][T17460] fuse: Unknown parameter 'grou00000000000000000000' [ 871.749552][T17463] netlink: 'syz.1.3420': attribute type 29 has an invalid length. [ 871.780803][T17465] netlink: 'syz.1.3420': attribute type 29 has an invalid length. [ 872.199974][T17472] syzkaller0: entered promiscuous mode [ 872.205541][T17472] syzkaller0: entered allmulticast mode [ 872.288201][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 872.440090][T17479] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3425'. [ 872.449379][T17479] IPv6: NLM_F_CREATE should be specified when creating new route [ 872.457510][T17479] IPv6: Can't replace route, no match found [ 872.906346][T17490] fuse: Unknown parameter 'grou00000000000000000000' [ 873.156828][T17497] netlink: 'syz.1.3432': attribute type 39 has an invalid length. [ 874.083286][T17522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3444'. [ 874.439549][T17530] fuse: Unknown parameter 'group_i00000000000000000000' [ 874.455996][T17529] tap0: tun_chr_ioctl cmd 2147767506 [ 874.955302][T17543] syzkaller0: entered promiscuous mode [ 874.971927][ T9] hid-generic 0004:0004:FFFF0001.0013: unknown main item tag 0x0 [ 874.987567][T17543] syzkaller0: entered allmulticast mode [ 875.033606][ T9] hid-generic 0004:0004:FFFF0001.0013: unknown main item tag 0x0 [ 875.064469][T17545] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3453'. [ 875.074187][T17545] IPv6: Can't replace route, no match found [ 875.106051][ T9] hid-generic 0004:0004:FFFF0001.0013: unknown main item tag 0x0 [ 875.135749][ T9] hid-generic 0004:0004:FFFF0001.0013: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 875.492529][ T13] bridge_slave_1: left allmulticast mode [ 875.505222][ T13] bridge_slave_1: left promiscuous mode [ 875.523341][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.796432][ T13] bridge_slave_0: left allmulticast mode [ 875.838655][T17550] fido_id[17550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 875.892920][T17561] fuse: Unknown parameter 'group_i00000000000000000000' [ 875.903551][ T13] bridge_slave_0: left promiscuous mode [ 875.933430][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.041285][ T13] veth0_to_bond: left allmulticast mode [ 876.053237][ T13] veth0_to_bond: left promiscuous mode [ 876.075248][ T13] bridge1: port 1(veth0_to_bond) entered disabled state [ 876.412950][ T13] ip6gretap0 (unregistering): left promiscuous mode [ 876.719807][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3463'. [ 877.278174][ T13] bridge0 (unregistering): left promiscuous mode [ 877.445495][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.460916][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.483080][ T13] bond0 (unregistering): Released all slaves [ 877.560824][T17581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3464'. [ 877.755082][ T1219] hid-generic 0004:0004:FFFF0001.0014: unknown main item tag 0x0 [ 877.807457][ T1219] hid-generic 0004:0004:FFFF0001.0014: unknown main item tag 0x0 [ 877.841372][ T1219] hid-generic 0004:0004:FFFF0001.0014: unknown main item tag 0x0 [ 877.947739][ T1219] hid-generic 0004:0004:FFFF0001.0014: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 877.961745][T17587] openvswitch: netlink: EtherType 0 is less than min 600 [ 878.282175][ T13] hsr_slave_0: left promiscuous mode [ 878.301350][ T13] hsr_slave_1: left promiscuous mode [ 878.348307][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.622753][T17589] fido_id[17589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 878.967092][T17611] fuse: Unknown parameter 'group_i00000000000000000000' [ 879.062288][ T13] team0 (unregistering): Port device team_slave_1 removed [ 879.094310][ T13] team0 (unregistering): Port device team_slave_0 removed [ 879.236438][T17613] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3473'. [ 879.818446][T17618] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3474'. [ 879.828034][T17618] IPv6: Can't replace route, no match found [ 879.927658][T17621] syz_tun: entered allmulticast mode [ 880.256459][T17620] syz_tun: left allmulticast mode [ 880.316730][T17623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3476'. [ 880.580721][ T13] IPVS: stop unused estimator thread 0... [ 880.704961][T16816] hid-generic 0004:0004:FFFF0001.0015: unknown main item tag 0x0 [ 880.764143][T16816] hid-generic 0004:0004:FFFF0001.0015: unknown main item tag 0x0 [ 880.783419][T16816] hid-generic 0004:0004:FFFF0001.0015: unknown main item tag 0x0 [ 881.039267][T16816] hid-generic 0004:0004:FFFF0001.0015: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 881.659753][T17636] fido_id[17636]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 882.048372][T17656] syz_tun: entered allmulticast mode [ 882.063015][T17655] syz_tun: left allmulticast mode [ 882.466916][ T9] hid-generic 0004:0004:FFFF0001.0016: unknown main item tag 0x0 [ 882.484530][ T9] hid-generic 0004:0004:FFFF0001.0016: unknown main item tag 0x0 [ 882.630920][ T9] hid-generic 0004:0004:FFFF0001.0016: unknown main item tag 0x0 [ 882.742587][ T9] hid-generic 0004:0004:FFFF0001.0016: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 883.132910][T17674] fido_id[17674]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 883.672346][T17681] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3493'. [ 883.918214][T17681] IPv6: Can't replace route, no match found [ 883.945915][T17689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3497'. [ 884.895608][ T5907] hid-generic 0004:0004:FFFF0001.0017: unknown main item tag 0x0 [ 884.903751][ T5907] hid-generic 0004:0004:FFFF0001.0017: unknown main item tag 0x0 [ 884.912033][ T5907] hid-generic 0004:0004:FFFF0001.0017: unknown main item tag 0x0 [ 885.006804][ T5907] hid-generic 0004:0004:FFFF0001.0017: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 885.243052][T17719] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3505'. [ 885.314474][T17715] fido_id[17715]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 885.775621][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3508'. [ 886.648385][T17735] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3512'. [ 886.827912][T17735] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 887.312076][ T9] hid-generic 0004:0004:FFFF0001.0018: unknown main item tag 0x0 [ 887.320510][ T9] hid-generic 0004:0004:FFFF0001.0018: unknown main item tag 0x0 [ 887.337456][ T9] hid-generic 0004:0004:FFFF0001.0018: unknown main item tag 0x0 [ 887.355345][ T9] hid-generic 0004:0004:FFFF0001.0018: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 887.367411][ T5907] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 887.522386][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 887.557423][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 887.600041][T17747] fido_id[17747]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 887.614346][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 887.648423][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 887.695670][ T5907] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 887.735677][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.781859][ T5907] usb 4-1: config 0 descriptor?? [ 888.217464][ T5907] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 888.452601][T17764] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3520'. [ 888.463544][T17764] IPv6: NLM_F_CREATE should be specified when creating new route [ 888.471644][T17764] IPv6: Can't replace route, no match found [ 889.513601][T17786] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3527'. [ 889.531737][ T5907] hid-generic 0004:0004:FFFF0001.001A: unknown main item tag 0x0 [ 889.541259][ T5907] hid-generic 0004:0004:FFFF0001.001A: unknown main item tag 0x0 [ 889.551983][T17786] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3527'. [ 889.565789][ T5907] hid-generic 0004:0004:FFFF0001.001A: unknown main item tag 0x0 [ 889.575953][T16816] usb 4-1: USB disconnect, device number 42 [ 889.625627][ T5907] hid-generic 0004:0004:FFFF0001.001A: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 889.943237][T17798] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3531'. [ 889.958714][T17790] fido_id[17790]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 890.532115][T17817] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3539'. [ 890.541530][T17817] IPv6: NLM_F_CREATE should be specified when creating new route [ 890.549649][T17817] IPv6: Can't replace route, no match found [ 890.716356][T16816] hid-generic 0004:0004:FFFF0001.001B: unknown main item tag 0x0 [ 890.766683][T16816] hid-generic 0004:0004:FFFF0001.001B: unknown main item tag 0x0 [ 890.807192][T16816] hid-generic 0004:0004:FFFF0001.001B: unknown main item tag 0x0 [ 890.845450][T16816] hid-generic 0004:0004:FFFF0001.001B: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 891.063053][T17822] fido_id[17822]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 891.092748][ T5907] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 891.283058][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.297389][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 891.335222][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 891.348115][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 891.372864][ T5907] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 891.388327][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.426493][ T5907] usb 3-1: config 0 descriptor?? [ 891.908892][ T5907] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 892.335195][T17864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3559'. [ 892.837769][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 893.477837][T13838] usb 3-1: USB disconnect, device number 34 [ 893.595460][T17878] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3562'. [ 893.744712][T17878] IPv6: Can't replace route, no match found [ 893.902712][T17889] fuse: Bad value for 'fd' [ 894.219256][T17898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3571'. [ 894.447639][T17906] netlink: 'syz.4.3575': attribute type 3 has an invalid length. [ 894.747532][T13838] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 894.909529][T13838] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 894.922512][T13838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 895.013822][T13838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 895.036871][T13838] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 895.078233][T13838] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 895.095191][T13838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.112832][T17921] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3580'. [ 895.215242][T13838] usb 1-1: config 0 descriptor?? [ 895.891689][T17926] fuse: Bad value for 'fd' [ 895.999623][T13838] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 896.509612][T17942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3586'. [ 896.998231][T17949] syzkaller0: entered promiscuous mode [ 897.043033][T17949] syzkaller0: entered allmulticast mode [ 897.234392][ T5825] usb 1-1: USB disconnect, device number 43 [ 897.371966][T17956] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3590'. [ 897.381430][T17956] IPv6: Can't replace route, no match found [ 897.506768][T17963] fuse: Bad value for 'fd' [ 897.761130][T17972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3597'. [ 899.002213][T17992] syzkaller0: entered promiscuous mode [ 899.074013][T17992] syzkaller0: entered allmulticast mode [ 899.348464][ T5825] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 899.530604][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 899.562948][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 899.595489][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 899.638230][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 899.686891][ T5907] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 899.704812][ T5825] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 899.724703][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.734755][ T5907] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 899.803390][ T5825] usb 4-1: config 0 descriptor?? [ 900.001321][T18016] fido_id[18016]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 900.059162][T18018] warning: `syz.2.3608' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 900.170950][T18021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3610'. [ 900.246553][ T5825] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 900.475678][T18033] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3613'. [ 900.485349][T18033] IPv6: Can't replace route, no match found [ 900.685279][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3616'. [ 900.760879][T18041] syzkaller0: entered promiscuous mode [ 900.766620][T18041] syzkaller0: entered allmulticast mode [ 901.947529][ T29] usb 4-1: reset high-speed USB device number 43 using dummy_hcd [ 902.449849][T18065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3624'. [ 902.992492][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3628'. [ 903.091684][T16816] usb 4-1: USB disconnect, device number 43 [ 903.568777][T18083] syzkaller0: entered promiscuous mode [ 903.576426][T18083] syzkaller0: entered allmulticast mode [ 904.001934][T18090] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3633'. [ 904.011503][T18090] IPv6: Can't replace route, no match found [ 904.427371][T16816] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 904.533866][T18101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3637'. [ 904.590423][T16816] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 905.175590][T16816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 905.191780][T16816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 905.203991][T16816] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 905.217078][T16816] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 905.227167][T16816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.260336][T16816] usb 2-1: config 0 descriptor?? [ 905.710447][T16816] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 905.770624][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3640'. [ 906.797422][T18121] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3643'. [ 907.145525][T18123] syzkaller0: entered promiscuous mode [ 907.154626][T18123] syzkaller0: entered allmulticast mode [ 907.660820][T18138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3648'. [ 908.239767][ T5825] usb 2-1: USB disconnect, device number 44 [ 909.028129][T18155] syzkaller0: entered promiscuous mode [ 909.033704][T18155] syzkaller0: entered allmulticast mode [ 909.407397][ T5825] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 909.611845][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 909.644101][T18168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3662'. [ 909.647927][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 909.690025][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 909.764955][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 909.789736][ T5825] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 909.807548][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.815772][T18166] program syz.3.3655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 909.963364][ T5825] usb 1-1: config 0 descriptor?? [ 910.454081][ T5825] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 911.538209][T18194] syzkaller0: entered promiscuous mode [ 911.579447][T18194] syzkaller0: entered allmulticast mode [ 912.043983][T18200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3673'. [ 912.918186][T18214] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3677'. [ 912.927603][T18214] IPv6: NLM_F_CREATE should be specified when creating new route [ 912.935553][T18214] IPv6: Can't replace route, no match found [ 913.108764][ T5825] usb 1-1: USB disconnect, device number 44 [ 913.297656][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 913.637942][T18229] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3683'. [ 913.794941][T18233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3685'. [ 914.397407][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 914.569381][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.581632][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 914.593028][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 914.603838][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 914.617220][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 914.629386][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.642496][ T9] usb 3-1: config 0 descriptor?? [ 914.700287][T18251] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3692'. [ 915.175825][ T9] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 916.622700][T16816] usb 3-1: USB disconnect, device number 35 [ 916.809097][T18308] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3708'. [ 917.074136][T18312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3711'. [ 917.677458][T16816] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 917.717691][ T1219] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 917.777459][ T29] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 917.840060][T16816] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 917.852034][T16816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 917.864048][T16816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 917.875162][T16816] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 917.889092][T16816] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 917.901739][T16816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.910508][ T1219] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.923158][ T1219] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 917.933793][T16816] usb 1-1: config 0 descriptor?? [ 917.940381][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 917.954392][ T1219] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 917.966868][ T29] usb 2-1: config 8 has an invalid interface number: 188 but max is 0 [ 917.975595][ T1219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 917.984666][ T29] usb 2-1: config 8 has no interface number 0 [ 917.992946][ T1219] usb 5-1: SerialNumber: syz [ 917.998400][ T29] usb 2-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 918.032347][ T29] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 918.041825][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.050560][ T29] usb 2-1: Product: syz [ 918.054909][ T29] usb 2-1: Manufacturer: syz [ 918.061417][ T29] usb 2-1: SerialNumber: syz [ 918.077493][T18334] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3721'. [ 918.162068][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'. [ 918.234069][ T1219] usb 5-1: USB disconnect, device number 39 [ 918.308576][ T29] vmk80xx 2-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 918.335783][ T29] usb 2-1: USB disconnect, device number 45 [ 918.409350][T16816] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 919.315717][T18351] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3725'. [ 919.335996][T18351] IPv6: Can't replace route, no match found [ 919.738702][T16816] usb 1-1: USB disconnect, device number 45 [ 919.949165][T18367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3733'. [ 920.077450][ T29] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 920.227441][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 920.242026][ T29] usb 4-1: config index 0 descriptor too short (expected 17170, got 18) [ 920.267391][ T29] usb 4-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 920.358491][ T29] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 920.385394][ T29] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 920.395212][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.404429][ T29] usb 4-1: Product: syz [ 920.419305][ T29] usb 4-1: Manufacturer: syz [ 920.427174][ T29] usb 4-1: SerialNumber: syz [ 920.453116][ T29] usb 4-1: config 0 descriptor?? [ 920.487792][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 920.508935][ T29] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 920.689670][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 920.713873][ T29] usb 4-1: USB disconnect, device number 44 [ 920.888414][ T9] usb 1-1: no configurations [ 920.893194][ T9] usb 1-1: can't read configurations, error -22 [ 921.087432][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 921.250341][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 921.270663][ T9] usb 1-1: no configurations [ 921.285612][ T9] usb 1-1: can't read configurations, error -22 [ 921.304180][ T9] usb usb1-port1: attempt power cycle [ 921.351610][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3742'. [ 921.632524][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3745'. [ 921.677423][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 921.708259][ T5825] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 921.722061][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 921.731555][ T9] usb 1-1: no configurations [ 921.736249][ T9] usb 1-1: can't read configurations, error -22 [ 921.879649][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 921.892083][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.909626][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 921.921432][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 921.921710][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 921.937194][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 921.950854][ T5825] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 921.960816][ T9] usb 1-1: no configurations [ 921.965647][ T9] usb 1-1: can't read configurations, error -22 [ 921.973443][ T9] usb usb1-port1: unable to enumerate USB device [ 921.980628][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.992358][ T5825] usb 4-1: config 0 descriptor?? [ 922.097438][T18411] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3750'. [ 922.326729][T18415] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3749'. [ 922.340306][T18417] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 922.348478][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3752'. [ 922.367883][T18415] IPv6: Can't replace route, no match found [ 922.426020][ T5825] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 922.872322][T18423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3753'. [ 923.243561][T18428] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3754'. [ 923.253387][T18428] IPv6: Can't replace route, no match found [ 923.450657][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3756'. [ 923.653420][T18437] netlink: 'syz.4.3757': attribute type 3 has an invalid length. [ 923.662778][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3757'. [ 923.672664][T18437] netlink: 'syz.4.3757': attribute type 3 has an invalid length. [ 923.684967][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3757'. [ 923.722808][T18437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3757'. [ 923.773924][T13838] usb 4-1: USB disconnect, device number 45 [ 924.155043][T18441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3759'. [ 924.671093][T18453] fuse: Unknown parameter '0x0000000000000003' [ 925.032411][T18461] IPv6: Can't replace route, no match found [ 925.387687][T13838] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 925.607708][T13838] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 925.694360][T13838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 925.859493][T13838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 925.876184][T13838] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 926.051258][T18477] IPv6: Can't replace route, no match found [ 926.259773][T13838] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 926.276977][T13838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.306886][T13838] usb 1-1: config 0 descriptor?? [ 926.776995][T13838] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 927.282179][T18495] __nla_validate_parse: 4 callbacks suppressed [ 927.282200][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3779'. [ 927.652623][T13838] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 927.682586][T13838] hid-generic 0000:0000:0000.0026: hidraw1: HID v0.00 Device [syz1] on syz0 [ 928.089211][T13838] usb 1-1: USB disconnect, device number 50 [ 928.147354][ T29] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 928.220556][ T5833] Bluetooth: hci4: adv larger than maximum supported [ 928.220623][ T5833] Bluetooth: hci4: Malformed LE Event: 0x0d [ 928.319715][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 928.347503][ T29] usb 5-1: config 0 has no interface number 0 [ 928.353738][ T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 928.365008][ T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 928.374870][ T29] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 928.527668][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.540456][ T29] usb 5-1: config 0 descriptor?? [ 928.565990][ T29] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 928.602760][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 928.623657][T18534] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3793'. [ 928.667748][ T29] hid-generic 0004:0004:FFFF0001.0027: unknown main item tag 0x0 [ 928.675875][ T29] hid-generic 0004:0004:FFFF0001.0027: unknown main item tag 0x0 [ 928.700195][ T29] hid-generic 0004:0004:FFFF0001.0027: unknown main item tag 0x0 [ 928.714570][ T29] hid-generic 0004:0004:FFFF0001.0027: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 928.768002][T18518] iowarrior 5-1:0.1: Error -90 while submitting URB [ 928.801139][T13838] usb 5-1: USB disconnect, device number 40 [ 928.929024][T18539] fido_id[18539]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 929.512312][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3801'. [ 929.597409][ T5825] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 929.757572][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 929.777386][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 929.794330][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 929.805278][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 929.818922][ T5825] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 929.828404][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.845479][ T5825] usb 5-1: config 0 descriptor?? [ 930.223167][ T1219] hid-generic 0004:0004:FFFF0001.0028: unknown main item tag 0x0 [ 930.231614][ T1219] hid-generic 0004:0004:FFFF0001.0028: unknown main item tag 0x0 [ 930.246485][ T1219] hid-generic 0004:0004:FFFF0001.0028: unknown main item tag 0x0 [ 930.258199][ T1219] hid-generic 0004:0004:FFFF0001.0028: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 930.293301][ T5825] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 930.378443][T18574] fido_id[18574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 930.588616][T18583] netlink: 'syz.3.3812': attribute type 27 has an invalid length. [ 930.642833][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.650501][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.793009][T18583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.812566][T18583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.935039][T18583] hsr1: left allmulticast mode [ 930.947161][T18583] dummy0: left allmulticast mode [ 931.092839][T18583] ip6gretap0: left allmulticast mode [ 931.133026][ T1144] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.145460][ T1144] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.156882][ T1144] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.171382][ T1144] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.592971][T13838] usb 5-1: USB disconnect, device number 41 [ 931.683828][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.690620][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.644636][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3831'. [ 932.757850][ T5891] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 932.812713][T18641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3835'. [ 932.878523][T13838] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 932.929465][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 932.942040][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 932.954858][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 932.973212][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 932.986706][ T5891] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 932.996514][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.008491][ T5891] usb 1-1: config 0 descriptor?? [ 933.049642][T13838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.062115][T13838] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 933.072031][T13838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.091840][T13838] usb 3-1: config 0 descriptor?? [ 933.122718][T13838] pwc: Askey VC010 type 2 USB webcam detected. [ 933.459439][ T5891] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 933.527469][T13838] pwc: recv_control_msg error -32 req 02 val 2b00 [ 933.735792][T13838] pwc: recv_control_msg error -71 req 02 val 2c00 [ 933.743978][T13838] pwc: recv_control_msg error -71 req 04 val 1000 [ 933.758326][T13838] pwc: recv_control_msg error -71 req 04 val 1300 [ 933.765709][T13838] pwc: recv_control_msg error -71 req 04 val 1400 [ 933.775722][T13838] pwc: recv_control_msg error -71 req 02 val 2000 [ 933.783440][T13838] pwc: recv_control_msg error -71 req 02 val 2100 [ 933.793417][T13838] pwc: recv_control_msg error -71 req 04 val 1500 [ 933.800892][T13838] pwc: recv_control_msg error -71 req 02 val 2500 [ 933.813108][T13838] pwc: recv_control_msg error -71 req 02 val 2400 [ 933.820789][T13838] pwc: recv_control_msg error -71 req 02 val 2600 [ 933.828582][T13838] pwc: recv_control_msg error -71 req 02 val 2900 [ 933.835639][T13838] pwc: recv_control_msg error -71 req 02 val 2800 [ 933.843509][T13838] pwc: recv_control_msg error -71 req 04 val 1100 [ 933.851913][T13838] pwc: recv_control_msg error -71 req 04 val 1200 [ 933.871316][T13838] pwc: Registered as video103. [ 933.889956][T13838] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input88 [ 933.941669][T13838] usb 3-1: USB disconnect, device number 36 [ 934.042572][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3843'. [ 934.775825][T13838] usb 1-1: USB disconnect, device number 51 [ 935.043442][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3855'. [ 935.757711][ T5825] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 935.909444][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 935.931829][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 935.952292][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 935.962645][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 935.975780][ T5825] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 935.984980][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.998035][ T5825] usb 4-1: config 0 descriptor?? [ 936.460364][ T5825] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 936.755124][T18751] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3881'. [ 937.774790][ T1219] usb 4-1: USB disconnect, device number 46 [ 938.541928][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3898'. [ 938.837774][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 938.917553][ T1219] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 939.176097][ T1219] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 939.219909][ T1219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 939.241905][ T1219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 939.261690][ T1219] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 939.294519][ T1219] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 939.336307][ T1219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.358541][ T1219] usb 2-1: config 0 descriptor?? [ 939.682313][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3916'. [ 939.823366][ T1219] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 939.986333][T18838] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3915'. [ 939.995706][T18838] IPv6: Can't replace route, no match found [ 940.256702][T18845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3917'. [ 941.283665][ T1219] usb 2-1: USB disconnect, device number 46 [ 941.307489][ T5907] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 941.472485][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 941.507660][ T5907] usb 1-1: config 255 has an invalid interface number: 100 but max is 1 [ 941.516187][ T5907] usb 1-1: config 255 has an invalid interface number: 100 but max is 1 [ 941.537350][ T5907] usb 1-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 941.546491][ T5907] usb 1-1: config 255 has no interface number 0 [ 941.566646][ T5907] usb 1-1: config 255 interface 100 altsetting 25 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 941.583443][ T5907] usb 1-1: config 255 interface 100 has no altsetting 0 [ 941.591678][ T5907] usb 1-1: config 255 interface 100 has no altsetting 1 [ 941.613928][ T5907] usb 1-1: string descriptor 0 read error: -22 [ 941.620836][ T5907] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=7b.81 [ 941.630715][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.871307][ T1219] usb 1-1: USB disconnect, device number 52 [ 942.527919][ T5825] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 942.690932][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 942.706226][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 942.739881][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 942.766710][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 942.779947][ T5825] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 942.791753][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.823808][ T5825] usb 3-1: config 0 descriptor?? [ 942.887644][ T1219] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 943.037407][ T1219] usb 5-1: Using ep0 maxpacket: 32 [ 943.068078][ T1219] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 943.090808][ T1219] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 943.113613][ T1219] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 943.136773][ T1219] usb 5-1: config 1 interface 1 has no altsetting 0 [ 943.210648][ T1219] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 943.248162][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.277355][ T1219] usb 5-1: Product: syz [ 943.281613][ T1219] usb 5-1: Manufacturer: syz [ 943.286253][ T1219] usb 5-1: SerialNumber: syz [ 943.334179][T18924] syzkaller0: entered promiscuous mode [ 943.343143][ T5825] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 943.348520][T18926] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3953'. [ 943.367670][T18924] syzkaller0: entered allmulticast mode [ 943.377001][ T1219] usb 5-1: interface 2 not found [ 943.395843][ T1219] usb 5-1: selecting invalid altsetting 0 [ 943.449578][ T1219] usb 5-1: selecting invalid altsetting 0 [ 943.455920][ T1219] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 943.476806][ T1219] usb 5-1: selecting invalid altsetting 0 [ 943.516507][ T1219] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 943.551666][ T1219] usb 5-1: selecting invalid altsetting 0 [ 943.568356][ T1219] snd-ua101 5-1:1.1: probe with driver snd-ua101 failed with error -22 [ 943.586310][ T1219] usb 5-1: USB disconnect, device number 42 [ 943.678247][T18933] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3956'. [ 943.773615][T18937] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3958'. [ 944.616362][ T29] usb 3-1: USB disconnect, device number 37 [ 944.731725][T18961] syzkaller0: entered promiscuous mode [ 944.737848][T18961] syzkaller0: entered allmulticast mode [ 945.060716][T18988] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3970'. [ 948.388996][ T5825] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 948.554084][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 948.566171][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 948.578017][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 948.588401][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.602078][ T5825] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.611824][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.625065][ T5825] usb 1-1: config 0 descriptor?? [ 948.750780][T18976] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 949.100540][ T5825] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 950.481932][ T5825] usb 1-1: USB disconnect, device number 53 [ 950.807639][T19069] syzkaller0: entered promiscuous mode [ 950.815771][T19069] syzkaller0: entered allmulticast mode [ 951.114370][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4000'. [ 951.289226][ T29] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 951.447421][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 951.454670][ T29] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 951.464484][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 951.474530][T16816] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 951.484888][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 951.496381][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 951.508431][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.527145][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 951.608780][ T5825] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 951.729861][T16816] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 951.750412][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.765472][T16816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 951.780697][T16816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 951.800653][T16816] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 951.830641][T16816] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 951.850955][T16816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.872640][ T5825] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 951.882721][T16816] usb 1-1: config 0 descriptor?? [ 951.899154][ T5825] usb 4-1: config 0 has no interface number 0 [ 951.914597][ T5825] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 951.930475][ T5825] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 951.954439][ T5825] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 951.966606][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.005619][ T5825] usb 4-1: config 0 descriptor?? [ 952.014691][T19092] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 952.034354][ T5825] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 952.071332][ T29] usb 3-1: usb_control_msg returned -32 [ 952.077129][ T29] usbtmc 3-1:16.0: can't read capabilities [ 952.237497][ T29] usb 4-1: USB disconnect, device number 47 [ 952.351516][T16816] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 952.510185][T19110] syzkaller0: entered promiscuous mode [ 952.532332][T19110] syzkaller0: entered allmulticast mode [ 953.107576][ T5891] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 953.257360][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 953.264614][ T5891] usb 5-1: config 0 has no interfaces? [ 953.273121][ T5891] usb 5-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 953.282514][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.290828][ T5891] usb 5-1: Product: syz [ 953.295179][ T5891] usb 5-1: Manufacturer: syz [ 953.300337][ T5891] usb 5-1: SerialNumber: syz [ 953.307786][ T5891] usb 5-1: config 0 descriptor?? [ 953.524726][ T5825] usb 5-1: USB disconnect, device number 43 [ 953.961597][T19141] syzkaller0: entered promiscuous mode [ 953.967149][T19141] syzkaller0: entered allmulticast mode [ 954.035996][ T1219] usb 3-1: USB disconnect, device number 38 [ 954.329195][T19155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 954.336574][T19155] IPv6: NLM_F_CREATE should be set when creating new route [ 954.490220][T19165] netlink: 'syz.1.4032': attribute type 14 has an invalid length. [ 954.595196][T19168] syzkaller0: entered promiscuous mode [ 954.601243][T19168] syzkaller0: entered allmulticast mode [ 954.664340][T16816] usb 1-1: reset high-speed USB device number 54 using dummy_hcd [ 954.822969][T19172] macvlan2: entered allmulticast mode [ 954.829279][T19172] bridge0: entered allmulticast mode [ 954.835608][T19172] bridge0: port 3(macvlan2) entered blocking state [ 954.859030][T19172] bridge0: port 3(macvlan2) entered disabled state [ 954.890318][T19172] bridge0: left allmulticast mode [ 955.111590][T19181] vlan2: entered allmulticast mode [ 955.117015][T19181] bond0: entered allmulticast mode [ 955.124181][T19181] bond_slave_0: entered allmulticast mode [ 955.131904][T19181] bond_slave_1: entered allmulticast mode [ 955.154652][T19181] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4038'. [ 955.192223][T19181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.213699][T19181] bond_slave_0: left allmulticast mode [ 955.234134][T19181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.257866][T19181] bond_slave_1: left allmulticast mode [ 955.274092][T19181] bond0 (unregistering): Released all slaves [ 955.543250][T19198] syzkaller0: entered promiscuous mode [ 955.549921][T19198] syzkaller0: entered allmulticast mode [ 956.070728][T16816] usb 1-1: USB disconnect, device number 54 [ 956.364697][T19210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 956.405215][T19212] program syz.2.4051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 956.698469][T19229] syzkaller0: entered promiscuous mode [ 956.704261][T19229] syzkaller0: entered allmulticast mode [ 957.017866][T16816] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 957.179765][T16816] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 957.191886][T16816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 957.203123][T16816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 957.213063][T16816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 957.227867][T16816] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 957.236978][T16816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.251557][T16816] usb 4-1: config 0 descriptor?? [ 957.703563][T19255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4069'. [ 957.710445][T16816] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 957.819786][T19255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.934631][T19261] syzkaller0: entered promiscuous mode [ 957.976409][T19261] syzkaller0: entered allmulticast mode [ 958.531840][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4082'. [ 958.542073][T19286] bond0: option mode: unable to set because the bond device is up [ 958.999545][T16816] usb 4-1: USB disconnect, device number 48 [ 959.379621][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4093'. [ 960.057567][T16816] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 960.138996][ T29] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 960.230756][T16816] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 960.248968][T16816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 960.268171][T16816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 960.305253][T16816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 960.332940][ T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 960.342768][T16816] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 960.352543][ T29] usb 3-1: config 0 has no interface number 0 [ 960.367569][ T29] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 960.383571][T16816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.413239][ T29] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 960.427087][T16816] usb 4-1: config 0 descriptor?? [ 960.458556][ T29] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 960.475738][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.501262][ T29] usb 3-1: config 0 descriptor?? [ 960.520075][T19332] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 960.545772][ T29] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 960.750347][T13838] usb 3-1: USB disconnect, device number 39 [ 960.935340][T16816] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 962.286436][ T5891] usb 4-1: USB disconnect, device number 49 [ 963.267496][T13838] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 963.287924][T19431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4141'. [ 963.524517][T13838] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 963.573541][T13838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 963.766345][T13838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 963.806002][T13838] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 963.840390][T13838] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 963.884561][T13838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.929780][T13838] usb 2-1: config 0 descriptor?? [ 964.493326][T13838] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 965.808922][T13838] usb 2-1: USB disconnect, device number 47 [ 965.991617][T19508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4176'. [ 966.435851][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4184'. [ 966.485915][T19525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 966.637777][T13838] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 966.811721][T13838] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 966.831455][T13838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 966.859671][T13838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 966.876614][T13838] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 966.907517][T13838] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 966.916661][T13838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.956774][T13838] usb 2-1: config 0 descriptor?? [ 967.102397][T19550] netlink: 'syz.4.4194': attribute type 4 has an invalid length. [ 967.404179][T13838] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 967.452019][T19565] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.459999][T19565] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.359969][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4215'. [ 969.465183][T13838] usb 2-1: USB disconnect, device number 48 [ 970.633024][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4229'. [ 971.893790][T19691] syzkaller0: entered promiscuous mode [ 971.902776][T19691] syzkaller0: entered allmulticast mode [ 972.151957][T19697] netlink: 'syz.1.4255': attribute type 6 has an invalid length. [ 972.162768][T19694] netlink: 'syz.1.4255': attribute type 6 has an invalid length. [ 973.964342][T19752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4282'. [ 978.415117][T19865] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 981.707938][T19926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4349'. [ 983.027312][T19969] sch_tbf: peakrate 6 is lower than or equals to rate 9 ! [ 983.161670][T19975] netlink: 'syz.1.4363': attribute type 22 has an invalid length. [ 983.182742][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4363'. [ 983.192241][T19977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4364'. [ 983.203198][T19975] bond0: option ad_select: unable to set because the bond device is up [ 983.235088][T19981] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4366'. [ 983.881039][T20002] GUP no longer grows the stack in syz.2.4375 (20002): 80009000-80018000 (80006000) [ 983.901625][T20002] CPU: 0 UID: 0 PID: 20002 Comm: syz.2.4375 Tainted: G L syzkaller #0 PREEMPT(full) [ 983.901667][T20002] Tainted: [L]=SOFTLOCKUP [ 983.901675][T20002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 983.901698][T20002] Call Trace: [ 983.901706][T20002] [ 983.901718][T20002] dump_stack_lvl+0xe8/0x150 [ 983.901759][T20002] __get_user_pages+0x2453/0x29d0 [ 983.901823][T20002] __gup_longterm_locked+0x3db/0x1630 [ 983.901862][T20002] ? try_get_folio+0x623/0x650 [ 983.901897][T20002] gup_fast_fallback+0x1d82/0x22e0 [ 983.901964][T20002] ? __pfx_gup_fast_fallback+0x10/0x10 [ 983.902004][T20002] ? is_valid_gup_args+0x11f/0x200 [ 983.902042][T20002] ? pin_user_pages_fast+0x4d/0xb0 [ 983.902080][T20002] io_pin_pages+0xba/0x1b0 [ 983.902268][T20002] io_sqe_buffer_register+0x268/0x1c90 [ 983.902364][T20002] ? futex_unqueue+0x22/0x240 [ 983.902392][T20002] ? futex_unqueue+0x22/0x240 [ 983.902430][T20002] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 983.902485][T20002] __io_register_rsrc_update+0x4a8/0x10c0 [ 983.902538][T20002] ? __pfx___io_register_rsrc_update+0x10/0x10 [ 983.902594][T20002] io_register_rsrc_update+0x1b1/0x1c0 [ 983.902637][T20002] ? __pfx_io_register_rsrc_update+0x10/0x10 [ 983.902675][T20002] ? __fget_files+0x2a/0x420 [ 983.902702][T20002] ? io_is_uring_fops+0xd/0x50 [ 983.902731][T20002] __se_sys_io_uring_register+0xfe2/0x19a0 [ 983.902777][T20002] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 983.902818][T20002] ? rcu_is_watching+0x15/0xb0 [ 983.902867][T20002] __do_fast_syscall_32+0x20d/0x640 [ 983.902974][T20002] ? lockdep_hardirqs_on+0x7a/0x110 [ 983.903006][T20002] ? do_fast_syscall_32+0x33/0x70 [ 983.903038][T20002] ? irqentry_exit+0x10e/0x620 [ 983.903068][T20002] ? trace_irq_disable+0x3b/0x150 [ 983.903093][T20002] do_fast_syscall_32+0x33/0x70 [ 983.903128][T20002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 983.903165][T20002] RIP: 0023:0xf705ef6c [ 983.903194][T20002] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 983.903216][T20002] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 983.903252][T20002] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000010 [ 983.903268][T20002] RDX: 0000000080000600 RSI: 0000000000000020 RDI: 0000000000000000 [ 983.903284][T20002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 983.903297][T20002] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 983.903312][T20002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.903345][T20002] [ 984.518618][T20009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4378'. [ 984.548853][T20012] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4379'. [ 984.712918][T20015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4380'. [ 984.919919][T20021] syzkaller0: entered promiscuous mode [ 984.933559][T20021] syzkaller0: entered allmulticast mode [ 985.596550][T20042] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4390'. [ 985.839510][T20052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4394'. [ 986.963776][T20074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'. [ 987.181361][T20076] syzkaller0: entered promiscuous mode [ 987.201001][T20076] syzkaller0: entered allmulticast mode [ 987.813809][T20102] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4416'. [ 988.721888][T20127] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 988.762020][T20127] bond2 (unregistering): Released all slaves [ 988.799092][ T5891] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 988.979418][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 988.993953][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 989.010257][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 989.027125][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 989.069384][ T5891] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 989.104319][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.150678][ T5891] usb 2-1: config 0 descriptor?? [ 989.348684][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4434'. [ 989.472860][T20147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 989.622547][ T5891] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 989.638991][T20157] syzkaller0: entered promiscuous mode [ 989.644545][T20157] syzkaller0: entered allmulticast mode [ 989.874183][T20168] fuse: Invalid uid '00000000000000000000003' [ 991.017705][T13838] usb 2-1: reset high-speed USB device number 49 using dummy_hcd [ 991.167646][T13838] usb 2-1: device descriptor read/64, error -32 [ 991.429799][T13838] usb 2-1: reset high-speed USB device number 49 using dummy_hcd [ 991.462725][T20196] bond2: Unable to set up delay as MII monitoring is disabled [ 991.494785][T20196] bond2 (unregistering): Released all slaves [ 991.599750][T20198] syzkaller0: entered promiscuous mode [ 991.607410][T20198] syzkaller0: entered allmulticast mode [ 992.240013][ T5825] usb 2-1: USB disconnect, device number 49 [ 992.777371][ T24] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 993.025273][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 993.044816][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 993.076148][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 993.088895][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.095274][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.237355][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 993.277353][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 993.302497][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.323750][ T24] usb 1-1: config 0 descriptor?? [ 994.332746][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 994.339412][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 994.403802][ T24] usb 1-1: USB disconnect, device number 55 [ 994.433514][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4481'. [ 994.948608][T20281] syzkaller0: entered promiscuous mode [ 994.954172][T20281] syzkaller0: entered allmulticast mode [ 995.447386][T16816] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 995.613322][T16816] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 995.626795][T16816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 995.649923][T16816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 995.668190][T16816] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 995.705345][T16816] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 995.737998][T16816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.778734][T16816] usb 3-1: config 0 descriptor?? [ 996.768910][T16816] usbhid 3-1:0.0: can't add hid device: -71 [ 996.775135][T16816] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 996.795726][T16816] usb 3-1: USB disconnect, device number 40 [ 997.042629][T20326] syzkaller0: entered promiscuous mode [ 997.067883][T20326] syzkaller0: entered allmulticast mode [ 997.647398][ T9] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 997.714760][ T9] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 997.864155][T20347] fido_id[20347]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 998.027587][ T5825] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 998.199380][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 998.206888][ T5825] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 7 [ 998.227046][ T5825] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 42942, setting to 1024 [ 998.261559][ T5825] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 998.273302][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.292197][ T5825] usb 4-1: Product: syz [ 998.296451][ T5825] usb 4-1: Manufacturer: syz [ 998.302016][ T5825] usb 4-1: SerialNumber: syz [ 998.594079][ T5825] usb 4-1: unit 206 not found! [ 998.671871][T20364] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4520'. [ 998.687818][T20364] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4520'. [ 998.747742][ T5825] usb 4-1: USB disconnect, device number 50 [ 998.928082][T15277] udevd[15277]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 999.008603][T20372] syzkaller0: entered promiscuous mode [ 999.014458][T20372] syzkaller0: entered allmulticast mode [ 999.047488][T13838] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 999.227397][T13838] usb 3-1: Using ep0 maxpacket: 32 [ 999.236218][T13838] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 999.247193][T13838] usb 3-1: config 0 has no interface number 0 [ 999.254345][T13838] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 999.291741][T13838] usb 3-1: config 0 interface 85 has no altsetting 0 [ 999.309893][T13838] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 999.319676][T13838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.328214][T13838] usb 3-1: Product: syz [ 999.333758][T13838] usb 3-1: Manufacturer: syz [ 999.343315][T13838] usb 3-1: SerialNumber: syz [ 999.358908][T13838] usb 3-1: config 0 descriptor?? [ 999.690550][ T5836] Bluetooth: hci5: unexpected event for opcode 0x2027 [ 999.986638][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1000.019671][ T24] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1000.029272][T13838] appletouch 3-1:0.85: Geyser mode initialized. [ 1000.071094][T13838] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input99 [ 1000.233569][T20385] fido_id[20385]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1000.333443][T13838] usb 3-1: USB disconnect, device number 41 [ 1000.333525][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1000.462269][T13838] appletouch 3-1:0.85: input: appletouch disconnected [ 1000.841188][T20396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4532'. [ 1000.898422][T20399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4532'. [ 1001.053118][T20404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'. [ 1001.064824][T20404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'. [ 1001.100085][T20402] syzkaller0: entered promiscuous mode [ 1001.105690][T20402] syzkaller0: entered allmulticast mode [ 1002.345173][T20426] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4541'. [ 1002.558684][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4543'. [ 1002.569737][T20430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1002.719608][T20435] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1002.726217][T20435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1002.858888][T20435] vhci_hcd vhci_hcd.0: Device attached [ 1002.895167][T20441] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4545'. [ 1002.906090][T20441] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4545'. [ 1002.948007][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1003.117936][ T5825] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1003.168252][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1003.178821][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.187351][ T24] usb 2-1: Product: syz [ 1003.191802][ T24] usb 2-1: Manufacturer: syz [ 1003.196559][ T24] usb 2-1: SerialNumber: syz [ 1003.466869][T20436] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 1003.489344][ T7543] vhci_hcd vhci_hcd.1: stop threads [ 1003.512623][ T7543] vhci_hcd vhci_hcd.1: release socket [ 1003.537762][ T7543] vhci_hcd vhci_hcd.1: disconnect device [ 1003.566740][ T24] rtl8150 2-1:1.0: couldn't reset the device [ 1003.602190][T20452] syzkaller0: entered promiscuous mode [ 1003.609193][T20452] syzkaller0: entered allmulticast mode [ 1003.615573][ T24] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1003.670431][ T24] usb 2-1: USB disconnect, device number 50 [ 1003.849694][T13838] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1003.931520][T20460] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4553'. [ 1004.117486][T13838] usb 5-1: Using ep0 maxpacket: 32 [ 1004.126009][T13838] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1004.140923][T13838] usb 5-1: config 0 has no interface number 0 [ 1004.150774][T13838] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1004.165680][T13838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.183984][T13838] usb 5-1: Product: syz [ 1004.196392][T13838] usb 5-1: Manufacturer: syz [ 1004.202483][T13838] usb 5-1: SerialNumber: syz [ 1004.218190][T13838] usb 5-1: config 0 descriptor?? [ 1004.232776][T13838] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1004.457138][T13838] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1004.661149][T13838] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1004.786424][T20473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4556'. [ 1004.842461][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1004.852025][T13838] usb 5-1: USB disconnect, device number 44 [ 1004.862323][T13838] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1004.877900][T13838] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1004.899784][T13838] quatech2 5-1:0.51: device disconnected [ 1005.046808][T20473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1005.697001][T20487] syzkaller0: entered promiscuous mode [ 1005.705488][T20487] syzkaller0: entered allmulticast mode [ 1007.097795][T20506] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1008.028081][T20515] __nla_validate_parse: 4 callbacks suppressed [ 1008.028101][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4570'. [ 1008.070415][T20515] bond1: option mode: unable to set because the bond device is up [ 1008.217585][T20516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1008.244660][T20516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1008.267508][ T5825] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1010.094283][T20528] syzkaller0: entered promiscuous mode [ 1010.112991][T20528] syzkaller0: entered allmulticast mode [ 1010.131766][ T5825] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1010.351996][ T5825] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1010.668772][T20536] fido_id[20536]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1010.729237][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1010.918740][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1010.936390][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1010.953460][ T24] usb 2-1: config 5 has an invalid interface number: 18 but max is 0 [ 1010.966994][ T24] usb 2-1: config 5 has no interface number 0 [ 1010.983601][ T24] usb 2-1: config 5 interface 18 has no altsetting 0 [ 1011.011790][ T24] usb 2-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 1011.023534][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.087395][ T24] usb 2-1: Product: syz [ 1011.097953][ T24] usb 2-1: Manufacturer: syz [ 1011.128058][ T24] usb 2-1: SerialNumber: syz [ 1011.235055][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4581'. [ 1011.245656][T20545] bond2: option mode: unable to set because the bond device is up [ 1011.257411][ T5825] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1011.412747][T20537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.428024][T20537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.436002][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 1011.461832][ T5825] usb 3-1: config 4 has an invalid interface number: 97 but max is 2 [ 1011.496121][ T5825] usb 3-1: config 4 has an invalid descriptor of length 97, skipping remainder of the config [ 1011.520231][ T5825] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 1011.544691][ T5825] usb 3-1: config 4 has no interface number 0 [ 1011.557614][ T5825] usb 3-1: too many endpoints for config 4 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1011.587420][ T5825] usb 3-1: config 4 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1011.617418][ T5825] usb 3-1: config 4 interface 97 has no altsetting 0 [ 1011.645820][T20548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4582'. [ 1011.651751][ T5825] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=9a.c8 [ 1011.684594][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.713924][ T5825] usb 3-1: Product: syz [ 1011.724057][ T5825] usb 3-1: Manufacturer: syz [ 1011.744462][ T5825] usb 3-1: SerialNumber: syz [ 1012.045775][ T5825] usb 3-1: USB disconnect, device number 42 [ 1012.569092][ T5825] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1012.749437][ T5825] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1012.758036][ T5825] usb 5-1: config 0 has no interface number 0 [ 1012.766618][ T5825] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1012.776122][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.787024][ T5825] usb 5-1: Product: syz [ 1012.812524][ T5825] usb 5-1: Manufacturer: syz [ 1012.825843][ T5825] usb 5-1: SerialNumber: syz [ 1012.845669][ T5825] usb 5-1: config 0 descriptor?? [ 1012.871178][ T5825] usb 5-1: selecting invalid altsetting 1 [ 1012.896195][ T5825] dvb_ttusb_budget: ttusb_init_controller: error [ 1012.927424][ T5825] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1013.397678][ T5825] DVB: Unable to find symbol stv0299_attach() [ 1013.650505][T20570] kernel profiling enabled (shift: 27) [ 1013.685541][ T5825] DVB: Unable to find symbol tda8083_attach() [ 1013.727396][ T5825] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1013.748931][ T5825] usb 5-1: USB disconnect, device number 45 [ 1014.204651][T20573] syzkaller0: entered promiscuous mode [ 1014.211534][T20573] syzkaller0: entered allmulticast mode [ 1014.366736][ T29] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1014.391922][ T29] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1014.710452][ T24] usb 2-1: Could not find all expected endpoints [ 1014.753383][ T24] usb 2-1: USB disconnect, device number 51 [ 1014.763822][T20576] fido_id[20576]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1014.818496][T20580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4593'. [ 1014.858911][T20580] bond0: option mode: unable to set because the bond device is up [ 1015.177494][ T29] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1015.590537][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.611362][ T29] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1015.620958][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.637332][ T29] usb 5-1: config 0 descriptor?? [ 1016.092503][ T29] ath6kl: Unsupported hardware version: 0x0 [ 1016.119603][ T29] ath6kl: Failed to init ath6kl core: -22 [ 1016.126015][ T29] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1016.301713][ T5825] usb 5-1: USB disconnect, device number 46 [ 1016.522268][T20609] syzkaller0: entered promiscuous mode [ 1016.563385][T20609] syzkaller0: entered allmulticast mode [ 1017.118450][ T5891] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1017.435200][ T5891] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 1017.445176][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.457145][ T5891] usb 4-1: Product: syz [ 1017.463345][ T5891] usb 4-1: Manufacturer: syz [ 1017.469554][ T5891] usb 4-1: SerialNumber: syz [ 1017.530945][ T5891] usb 4-1: config 0 descriptor?? [ 1018.010673][ T5825] usb 4-1: USB disconnect, device number 51 [ 1018.051578][ T29] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1018.163730][ T29] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1018.364400][T20620] fido_id[20620]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1018.990452][T20635] fuse: Bad value for 'fd' [ 1019.567390][ T5825] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1019.737499][ T5825] usb 4-1: Using ep0 maxpacket: 8 [ 1019.807794][ T5825] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1019.816108][ T5825] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1019.826623][ T5825] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1019.847301][ T5825] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1019.857737][ T5825] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1019.880150][ T5825] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1019.907306][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.131693][ T5825] usb 4-1: usb_control_msg returned -32 [ 1020.150889][ T5825] usbtmc 4-1:16.0: can't read capabilities [ 1020.606031][ T5825] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1020.799114][ T5825] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1020.807606][ T5825] usb 3-1: config 0 has no interface number 0 [ 1020.822303][ T5825] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1020.834056][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.852810][ T5825] usb 3-1: Product: syz [ 1020.859972][ T5825] usb 3-1: Manufacturer: syz [ 1020.869989][ T5825] usb 3-1: SerialNumber: syz [ 1020.886899][ T5825] usb 3-1: config 0 descriptor?? [ 1020.906704][ T5825] usb 3-1: selecting invalid altsetting 1 [ 1020.919722][ T5825] dvb_ttusb_budget: ttusb_init_controller: error [ 1020.934176][ T5825] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1021.039214][ T5825] DVB: Unable to find symbol stv0299_attach() [ 1021.087128][ T5825] DVB: Unable to find symbol tda8083_attach() [ 1021.096406][ T5825] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1021.126871][ T5825] usb 3-1: USB disconnect, device number 43 [ 1021.389937][T20664] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4617'. [ 1021.401592][T20664] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4617'. [ 1021.576701][T20668] loop5: detected capacity change from 0 to 4095 [ 1022.304334][T20677] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4622'. [ 1022.363751][ T5825] usb 4-1: USB disconnect, device number 52 [ 1022.502021][T20680] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4622'. [ 1022.675960][T20677] IPv6: Can't replace route, no match found [ 1023.451097][T20695] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4628'. [ 1023.476123][T20695] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4628'. [ 1023.738789][ T5836] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 1023.999069][ T24] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1024.092413][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1024.239750][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1024.248045][ T24] usb 5-1: config 0 has no interface number 0 [ 1024.259534][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1024.272103][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1024.272103][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.272134][ T24] usb 5-1: Product: syz [ 1024.311782][ T24] usb 5-1: Manufacturer: syz [ 1024.321985][ T24] usb 5-1: SerialNumber: syz [ 1024.341297][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1024.357843][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1024.379619][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1024.390578][ T24] usb 5-1: config 0 descriptor?? [ 1024.426098][ T24] usb 5-1: selecting invalid altsetting 1 [ 1024.432331][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1024.453192][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 1024.462325][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1024.469898][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1024.525403][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1024.632864][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.647859][ T24] DVB: Unable to find symbol stv0299_attach() [ 1024.843508][ T24] DVB: Unable to find symbol tda8083_attach() [ 1024.887436][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1024.893616][ T9] usb 3-1: usb_control_msg returned -32 [ 1024.912970][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1024.913530][ T24] usb 5-1: USB disconnect, device number 47 [ 1025.157606][ T5836] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 1026.054084][T20734] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4640'. [ 1026.063699][T20734] IPv6: Can't replace route, no match found [ 1026.074988][T20734] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4640'. [ 1026.830937][ T1219] usb 3-1: USB disconnect, device number 44 [ 1027.547890][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4646'. [ 1028.139313][T20775] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4656'. [ 1028.148637][T20775] IPv6: Can't replace route, no match found [ 1028.155745][ T1219] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1028.229510][T20775] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4656'. [ 1028.297528][ T24] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1028.317411][ T1219] usb 2-1: Using ep0 maxpacket: 8 [ 1028.324896][ T1219] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1028.333829][ T1219] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1028.344155][ T1219] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1028.354625][ T1219] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1028.497494][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1028.505566][ T24] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1028.534503][ T24] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1028.551424][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1028.563026][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1028.698043][ T1219] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.721780][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1028.736987][ T1219] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1028.753166][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1028.772970][ T1219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.789683][ T24] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1028.947906][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.986287][ T24] usb 4-1: config 0 descriptor?? [ 1029.000306][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1029.132067][ T1219] usb 2-1: usb_control_msg returned -32 [ 1029.138722][ T1219] usbtmc 2-1:16.0: can't read capabilities [ 1029.220753][ T24] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1029.342682][T20786] loop5: detected capacity change from 0 to 4095 [ 1029.427472][ T24] usb 4-1: USB disconnect, device number 53 [ 1029.477029][ T24] usblp1: removed [ 1030.165002][T20802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4668'. [ 1030.530621][T20813] loop5: detected capacity change from 0 to 4095 [ 1030.923814][ T9] usb 2-1: USB disconnect, device number 52 [ 1031.959402][T20841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4681'. [ 1032.299205][T20844] loop5: detected capacity change from 0 to 4095 [ 1032.667503][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1032.817371][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1032.835067][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1032.849016][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1032.872361][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1032.911839][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1032.943344][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1032.979052][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1033.001045][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.239079][ T9] usb 4-1: usb_control_msg returned -32 [ 1033.250752][ T9] usbtmc 4-1:16.0: can't read capabilities [ 1033.437417][ T1219] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1033.597687][ T1219] usb 1-1: Using ep0 maxpacket: 8 [ 1033.614074][ T1219] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1033.627364][ T1219] usb 1-1: config 0 has no interface number 0 [ 1033.643829][ T1219] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1033.675725][ T1219] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1033.693981][ T1219] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1033.708800][ T1219] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1033.726855][ T1219] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1033.756067][ T1219] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1033.767743][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.797561][ T1219] usb 1-1: Product: syz [ 1033.801936][ T1219] usb 1-1: Manufacturer: syz [ 1033.806587][ T1219] usb 1-1: SerialNumber: syz [ 1033.986335][ T1219] usb 1-1: config 0 descriptor?? [ 1034.061040][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4699'. [ 1034.177782][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1034.221487][ T1219] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 1034.338086][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1034.360269][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1034.407948][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.424689][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.467974][ T1219] usb 1-1: USB disconnect, device number 56 [ 1034.482323][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1034.507806][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1034.524626][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.551794][ T24] usb 2-1: config 0 descriptor?? [ 1035.017344][ T9] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1035.182484][ T9] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1035.197078][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.213837][ T9] usb 5-1: Product: syz [ 1035.220287][ T9] usb 5-1: Manufacturer: syz [ 1035.226627][ T9] usb 5-1: SerialNumber: syz [ 1035.265306][ T9] usb 5-1: config 0 descriptor?? [ 1035.293501][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1035.462339][ T1219] usb 4-1: USB disconnect, device number 54 [ 1035.478279][ T5825] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1035.689328][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 1035.699064][ T5825] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1035.711545][ T5825] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1035.746773][ T5825] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1035.786590][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1035.822913][ T5825] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1035.851670][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1035.894057][ T5825] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1035.922927][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.950043][ T5825] usb 1-1: config 0 descriptor?? [ 1036.191081][ T5825] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1036.236103][T20911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4712'. [ 1036.391682][ C0] usblp0: nonzero read bulk status received: -71 [ 1036.399281][ T5825] usb 1-1: USB disconnect, device number 57 [ 1036.420992][T20898] usblp0: removed [ 1036.591216][ T1219] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 1036.620453][ T1219] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1036.714967][ T9] gspca_stk1135: reg_w 0xf err -71 [ 1036.722074][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.730279][ T9] gspca_stk1135: Sensor write failed [ 1036.742775][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.772718][ T9] gspca_stk1135: Sensor write failed [ 1036.791355][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.809634][ T9] gspca_stk1135: Sensor read failed [ 1036.821384][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.836044][ T9] gspca_stk1135: Sensor read failed [ 1036.849586][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 1036.868333][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.889384][ T9] gspca_stk1135: Sensor read failed [ 1036.907747][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.919002][ T9] gspca_stk1135: Sensor read failed [ 1036.925237][T20922] fido_id[20922]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1036.936576][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.968603][ T9] gspca_stk1135: Sensor write failed [ 1036.974171][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.987325][ T9] gspca_stk1135: Sensor write failed [ 1037.006611][ T9] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1037.029939][ T9] usb 5-1: USB disconnect, device number 48 [ 1037.274268][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1037.283253][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1037.329658][ T24] usb 2-1: USB disconnect, device number 53 [ 1037.415805][T20937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4723'. [ 1037.942315][ T24] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1037.981933][ T24] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1038.124848][T20953] fido_id[20953]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1040.300675][ T5825] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1040.315062][ T5825] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1040.526793][T20993] fido_id[20993]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1042.287492][ T30] audit: type=1326 audit(1776065041.776:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21005 comm="syz.2.4747" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x0 [ 1042.355021][ T5825] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 1042.378463][ T5825] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1042.635637][T21028] fido_id[21028]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1043.657373][ T5825] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1043.807320][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 1043.820996][ T5825] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1043.837534][ T5825] usb 1-1: config 5 has an invalid interface number: 18 but max is 0 [ 1043.856614][ T5825] usb 1-1: config 5 has no interface number 0 [ 1043.877091][ T5825] usb 1-1: config 5 interface 18 has no altsetting 0 [ 1043.920384][ T5825] usb 1-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 1043.937195][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.967572][ T5825] usb 1-1: Product: syz [ 1043.975988][ T5825] usb 1-1: Manufacturer: syz [ 1043.983163][ T5825] usb 1-1: SerialNumber: syz [ 1044.103437][T21065] syzkaller0: entered promiscuous mode [ 1044.109292][T21065] syzkaller0: entered allmulticast mode [ 1044.148113][T21065] tc action pedit 'at' offset -255 out of bounds [ 1044.305210][T21049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.345818][T21049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.368386][T21074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4772'. [ 1044.739373][T21082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4774'. [ 1045.357375][T13838] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1045.605676][T13838] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1045.616798][T13838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.724392][T13838] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1045.756566][T13838] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1045.794868][T13838] usb 5-1: Manufacturer: syz [ 1045.812912][T13838] usb 5-1: config 0 descriptor?? [ 1046.057345][T13838] rc_core: IR keymap rc-hauppauge not found [ 1046.063364][T13838] Registered IR keymap rc-empty [ 1046.123731][T13838] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1046.147689][T13838] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input101 [ 1046.171229][T13838] usb 5-1: USB disconnect, device number 49 [ 1046.645804][ T5825] usb 1-1: Could not find all expected endpoints [ 1046.715155][ T5825] usb 1-1: USB disconnect, device number 58 [ 1046.784269][T21106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4782'. [ 1047.066771][T21112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4784'. [ 1047.285804][T21120] netlink: 'syz.1.4787': attribute type 2 has an invalid length. [ 1047.312447][T21120] ‚#{6c: entered promiscuous mode [ 1050.175897][T21156] netlink: 'syz.0.4798': attribute type 29 has an invalid length. [ 1050.252193][T21156] netlink: 'syz.0.4798': attribute type 29 has an invalid length. [ 1050.390238][T21159] netlink: 'syz.0.4798': attribute type 29 has an invalid length. [ 1050.410724][T21156] netlink: 'syz.0.4798': attribute type 29 has an invalid length. [ 1051.113946][T21177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4805'. [ 1051.552981][T21181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4807'. [ 1051.605576][T21183] binder: 21178:21183 ioctl c0306201 0 returned -14 [ 1052.444600][ T30] audit: type=1326 audit(1776065051.936:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21195 comm="syz.4.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1052.509076][T21198] netlink: 'syz.0.4812': attribute type 29 has an invalid length. [ 1052.545907][T21198] netlink: 'syz.0.4812': attribute type 29 has an invalid length. [ 1052.562071][T21198] netlink: 'syz.0.4812': attribute type 29 has an invalid length. [ 1052.577003][T21198] netlink: 'syz.0.4812': attribute type 29 has an invalid length. [ 1052.937372][ T30] audit: type=1326 audit(1776065051.936:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21195 comm="syz.4.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1053.115528][ T30] audit: type=1326 audit(1776065051.936:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21195 comm="syz.4.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1053.153025][T21211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1053.195018][ T30] audit: type=1326 audit(1776065051.946:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21195 comm="syz.4.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1053.301230][ T30] audit: type=1326 audit(1776065051.956:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21195 comm="syz.4.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1053.566975][ T30] audit: type=1326 audit(1776065051.956:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21195 comm="syz.4.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1053.597344][ T30] audit: type=1326 audit(1776065051.956:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21195 comm="syz.4.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1053.643729][ T30] audit: type=1326 audit(1776065051.956:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21195 comm="syz.4.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1053.693246][ T30] audit: type=1326 audit(1776065051.956:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21195 comm="syz.4.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1054.532305][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.539058][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.685556][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4825'. [ 1057.732054][T21287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4843'. [ 1059.216130][T21310] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4851'. [ 1059.288497][T21310] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4851'. [ 1059.546010][T21321] QAT: Device 9 not found [ 1060.528893][T21342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4864'. [ 1060.543242][T21342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4864'. [ 1060.737401][T13838] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1060.897835][T13838] usb 5-1: Using ep0 maxpacket: 8 [ 1060.918900][T13838] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1060.937952][T13838] usb 5-1: config 5 has an invalid interface number: 18 but max is 0 [ 1060.946132][T13838] usb 5-1: config 5 has no interface number 0 [ 1060.976761][T13838] usb 5-1: config 5 interface 18 has no altsetting 0 [ 1060.996209][T13838] usb 5-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 1061.021981][T13838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.040329][T13838] usb 5-1: Product: syz [ 1061.061923][T13838] usb 5-1: Manufacturer: syz [ 1061.066655][T13838] usb 5-1: SerialNumber: syz [ 1061.459387][T21341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.499339][T21341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.546938][T21357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4870'. [ 1061.587513][ T5825] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1061.788653][ T5825] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 1061.806347][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.828925][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.849008][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1061.881834][ T5825] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1061.913229][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.960074][ T5825] usb 1-1: config 0 descriptor?? [ 1062.258904][ T29] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1062.396965][ T5825] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x0 [ 1062.409834][ T5825] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x0 [ 1062.420377][ T5825] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x0 [ 1062.428725][ T5825] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x0 [ 1062.435904][ T5825] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x0 [ 1062.443759][ T5825] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x0 [ 1062.454132][ T5825] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x0 [ 1062.461995][ T5825] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x0 [ 1062.462302][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.482341][ T5825] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x0 [ 1062.491575][ T5825] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x0 [ 1062.499571][ T5825] corsair 0003:1B1C:1B3E.003E: item fetching failed at offset 74/235 [ 1062.510090][ T5825] corsair 0003:1B1C:1B3E.003E: parse failed [ 1062.516300][ T5825] corsair 0003:1B1C:1B3E.003E: probe with driver corsair failed with error -22 [ 1062.538940][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.577335][ T29] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1062.599411][ T5825] usb 1-1: USB disconnect, device number 59 [ 1062.624464][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.678710][ T29] usb 2-1: config 0 descriptor?? [ 1062.775819][T21371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4876'. [ 1062.786768][T21371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4876'. [ 1062.876047][T21372] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4875'. [ 1062.885811][T21372] IPv6: Can't replace route, no match found [ 1063.156057][ T29] arvo 0003:1E7D:30D4.003F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 1063.346312][ T29] arvo 0003:1E7D:30D4.003F: couldn't init struct arvo_device [ 1063.371694][ T29] arvo 0003:1E7D:30D4.003F: couldn't install keyboard [ 1063.416659][ T29] arvo 0003:1E7D:30D4.003F: probe with driver arvo failed with error -71 [ 1063.454179][ T29] usb 2-1: USB disconnect, device number 54 [ 1063.698275][T13838] usb 5-1: Could not find all expected endpoints [ 1063.733549][T13838] usb 5-1: USB disconnect, device number 50 [ 1063.987599][ T5891] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1064.129019][ T5891] usb 1-1: device descriptor read/64, error -71 [ 1064.367316][T13838] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1064.375236][ T5891] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1064.557842][ T5891] usb 1-1: device descriptor read/64, error -71 [ 1064.578030][T13838] usb 4-1: Using ep0 maxpacket: 8 [ 1064.693122][ T5891] usb usb1-port1: attempt power cycle [ 1064.718803][T13838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1064.739471][T13838] usb 4-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 1064.753506][T13838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.791533][T13838] usb 4-1: Product: syz [ 1064.795791][T13838] usb 4-1: Manufacturer: syz [ 1064.805117][T13838] usb 4-1: SerialNumber: syz [ 1064.827337][ T5825] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1064.978321][ T5825] usb 2-1: device descriptor read/64, error -71 [ 1065.037506][ T5891] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1065.143599][ T5891] usb 1-1: device descriptor read/8, error -71 [ 1065.151037][T13838] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1065.167552][T13838] usb 4-1: MIDIStreaming interface descriptor not found [ 1065.297316][ T5825] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1065.397683][ T5891] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1065.408061][T13838] usb 4-1: USB disconnect, device number 55 [ 1065.428254][ T5891] usb 1-1: device descriptor read/8, error -71 [ 1065.448160][ T5825] usb 2-1: device descriptor read/64, error -71 [ 1065.480608][T15294] udevd[15294]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1065.537764][ T5891] usb usb1-port1: unable to enumerate USB device [ 1065.557753][ T5825] usb usb2-port1: attempt power cycle [ 1065.910566][ T5825] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1065.950603][ T5825] usb 2-1: device descriptor read/8, error -71 [ 1065.987370][ T29] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1066.092246][T21415] vlan0: entered promiscuous mode [ 1066.192006][ T5825] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1066.242570][ T5825] usb 2-1: device descriptor read/8, error -71 [ 1066.297348][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 1066.307512][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1066.319490][ T29] usb 5-1: config 5 has an invalid interface number: 18 but max is 0 [ 1066.337287][ T29] usb 5-1: config 5 has no interface number 0 [ 1066.343867][ T29] usb 5-1: config 5 interface 18 has no altsetting 0 [ 1066.354755][ T29] usb 5-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 1066.364245][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.373812][ T29] usb 5-1: Product: syz [ 1066.378348][ T29] usb 5-1: Manufacturer: syz [ 1066.383972][ T29] usb 5-1: SerialNumber: syz [ 1066.427846][ T5825] usb usb2-port1: unable to enumerate USB device [ 1066.641276][T21412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.650624][T21412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.786818][T21423] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4895'. [ 1066.796790][T21423] IPv6: Can't replace route, no match found [ 1067.447942][ T29] usb 5-1: Could not find all expected endpoints [ 1067.476972][ T29] usb 5-1: USB disconnect, device number 51 [ 1067.591549][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4900'. [ 1067.756942][T21444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4901'. [ 1070.159943][ T5836] Bluetooth: hci4: Unknown advertising packet type: 0x73 [ 1070.159997][ T5836] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1070.215561][T21482] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4909'. [ 1071.031295][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4915'. [ 1071.069627][ T5825] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1071.124191][T21496] [ 1071.126615][T21496] ===================================================== [ 1071.133651][T21496] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1071.141146][T21496] syzkaller #0 Tainted: G L [ 1071.147138][T21496] ----------------------------------------------------- [ 1071.154145][T21496] syz.1.4914/21496 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1071.161886][T21496] ffff88802b72dca0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1071.170537][T21496] [ 1071.170537][T21496] and this task is already holding: [ 1071.177930][T21496] ffff888058a07948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1071.186692][T21496] which would create a new lock dependency: [ 1071.192609][T21496] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 1071.200263][T21496] [ 1071.200263][T21496] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1071.209727][T21496] (&dev->event_lock#2){..-.}-{3:3} [ 1071.209767][T21496] [ 1071.209767][T21496] ... which became SOFTIRQ-irq-safe at: [ 1071.222709][T21496] lock_acquire+0xf0/0x2e0 [ 1071.227248][T21496] _raw_spin_lock_irqsave+0x40/0x60 [ 1071.232702][T21496] input_event+0x76/0xe0 [ 1071.237199][T21496] atp_complete_geyser_3_4+0x114e/0x1d90 [ 1071.243058][T21496] __usb_hcd_giveback_urb+0x376/0x540 [ 1071.248629][T21496] dummy_timer+0xbbd/0x4650 [ 1071.253299][T21496] __hrtimer_run_queues+0x53a/0xcc0 [ 1071.258610][T21496] hrtimer_run_softirq+0x182/0x5a0 [ 1071.263858][T21496] handle_softirqs+0x22a/0x870 [ 1071.268864][T21496] __irq_exit_rcu+0x5f/0x150 [ 1071.273594][T21496] irq_exit_rcu+0x9/0x30 [ 1071.277958][T21496] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1071.283811][T21496] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1071.290012][T21496] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1071.295769][T21496] dummy_urb_enqueue+0x58a/0x780 [ 1071.300905][T21496] usb_hcd_submit_urb+0x328/0x1b70 [ 1071.306244][T21496] atp_open+0x60/0x90 [ 1071.310347][T21496] input_open_device+0x1f8/0x3b0 [ 1071.315399][T21496] mousedev_open_device+0xcc/0x150 [ 1071.320701][T21496] mousedev_open+0x2ef/0x4a0 [ 1071.325406][T21496] chrdev_open+0x4cd/0x5e0 [ 1071.329940][T21496] do_dentry_open+0x785/0x14e0 [ 1071.334814][T21496] vfs_open+0x3b/0x340 [ 1071.338987][T21496] path_openat+0x2e08/0x3860 [ 1071.343670][T21496] do_file_open+0x23e/0x4a0 [ 1071.348268][T21496] do_sys_openat2+0x113/0x200 [ 1071.353044][T21496] __x64_sys_openat+0x138/0x170 [ 1071.357993][T21496] do_syscall_64+0x14d/0xf80 [ 1071.362724][T21496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.368803][T21496] [ 1071.368803][T21496] to a SOFTIRQ-irq-unsafe lock: [ 1071.375823][T21496] (tasklist_lock){.+.+}-{3:3} [ 1071.375853][T21496] [ 1071.375853][T21496] ... which became SOFTIRQ-irq-unsafe at: [ 1071.388845][T21496] ... [ 1071.388855][T21496] lock_acquire+0xf0/0x2e0 [ 1071.395959][T21496] _raw_read_lock+0x36/0x50 [ 1071.400561][T21496] __do_wait+0xde/0x740 [ 1071.404817][T21496] do_wait+0x1e7/0x540 [ 1071.409071][T21496] kernel_wait+0xd6/0x1c0 [ 1071.413503][T21496] call_usermodehelper_exec_work+0xbe/0x230 [ 1071.419592][T21496] process_scheduled_works+0xb6e/0x18c0 [ 1071.425329][T21496] worker_thread+0xa53/0xfc0 [ 1071.430027][T21496] kthread+0x388/0x470 [ 1071.434191][T21496] ret_from_fork+0x51e/0xb90 [ 1071.438876][T21496] ret_from_fork_asm+0x1a/0x30 [ 1071.443746][T21496] [ 1071.443746][T21496] other info that might help us debug this: [ 1071.443746][T21496] [ 1071.453989][T21496] Chain exists of: [ 1071.453989][T21496] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1071.453989][T21496] [ 1071.466964][T21496] Possible interrupt unsafe locking scenario: [ 1071.466964][T21496] [ 1071.475291][T21496] CPU0 CPU1 [ 1071.480666][T21496] ---- ---- [ 1071.486076][T21496] lock(tasklist_lock); [ 1071.490376][T21496] local_irq_disable(); [ 1071.497150][T21496] lock(&dev->event_lock#2); [ 1071.504405][T21496] lock(&new->fa_lock); [ 1071.511204][T21496] [ 1071.514661][T21496] lock(&dev->event_lock#2); [ 1071.519527][T21496] [ 1071.519527][T21496] *** DEADLOCK *** [ 1071.519527][T21496] [ 1071.527682][T21496] 6 locks held by syz.1.4914/21496: [ 1071.532900][T21496] #0: ffff888055306420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1071.542089][T21496] #1: ffff888054273d00 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 1071.552745][T21496] #2: ffffffff8e900fb0 (file_rwsem){.+.+}-{0:0}, at: __break_lease+0x4de/0x1e80 [ 1071.561928][T21496] #3: ffff8880573cc178 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4e8/0x1e80 [ 1071.571451][T21496] #4: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1071.580544][T21496] #5: ffff888058a07948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1071.589727][T21496] [ 1071.589727][T21496] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1071.600239][T21496] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1071.605947][T21496] IN-SOFTIRQ-W at: [ 1071.610031][T21496] lock_acquire+0xf0/0x2e0 [ 1071.616288][T21496] _raw_spin_lock_irqsave+0x40/0x60 [ 1071.623332][T21496] input_event+0x76/0xe0 [ 1071.629499][T21496] atp_complete_geyser_3_4+0x114e/0x1d90 [ 1071.636967][T21496] __usb_hcd_giveback_urb+0x376/0x540 [ 1071.644171][T21496] dummy_timer+0xbbd/0x4650 [ 1071.650498][T21496] __hrtimer_run_queues+0x53a/0xcc0 [ 1071.657577][T21496] hrtimer_run_softirq+0x182/0x5a0 [ 1071.664524][T21496] handle_softirqs+0x22a/0x870 [ 1071.671132][T21496] __irq_exit_rcu+0x5f/0x150 [ 1071.677644][T21496] irq_exit_rcu+0x9/0x30 [ 1071.683834][T21496] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1071.691305][T21496] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1071.699121][T21496] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1071.706633][T21496] dummy_urb_enqueue+0x58a/0x780 [ 1071.713462][T21496] usb_hcd_submit_urb+0x328/0x1b70 [ 1071.720422][T21496] atp_open+0x60/0x90 [ 1071.726243][T21496] input_open_device+0x1f8/0x3b0 [ 1071.733030][T21496] mousedev_open_device+0xcc/0x150 [ 1071.740067][T21496] mousedev_open+0x2ef/0x4a0 [ 1071.746587][T21496] chrdev_open+0x4cd/0x5e0 [ 1071.752843][T21496] do_dentry_open+0x785/0x14e0 [ 1071.759438][T21496] vfs_open+0x3b/0x340 [ 1071.765365][T21496] path_openat+0x2e08/0x3860 [ 1071.771785][T21496] do_file_open+0x23e/0x4a0 [ 1071.778112][T21496] do_sys_openat2+0x113/0x200 [ 1071.784633][T21496] __x64_sys_openat+0x138/0x170 [ 1071.791315][T21496] do_syscall_64+0x14d/0xf80 [ 1071.797737][T21496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.805455][T21496] INITIAL USE at: [ 1071.809468][T21496] lock_acquire+0xf0/0x2e0 [ 1071.815650][T21496] _raw_spin_lock_irqsave+0x40/0x60 [ 1071.822604][T21496] input_inject_event+0xa5/0x340 [ 1071.829296][T21496] kbd_led_trigger_activate+0xbc/0x100 [ 1071.836579][T21496] led_trigger_set+0x535/0x960 [ 1071.843116][T21496] led_trigger_set_default+0x260/0x2a0 [ 1071.850334][T21496] led_classdev_register_ext+0x787/0x9c0 [ 1071.857712][T21496] input_leds_connect+0x517/0x790 [ 1071.864498][T21496] input_register_device+0xd00/0x1160 [ 1071.871618][T21496] atkbd_connect+0x731/0xa50 [ 1071.877951][T21496] serio_driver_probe+0x82/0xd0 [ 1071.884548][T21496] really_probe+0x267/0xaf0 [ 1071.891074][T21496] __driver_probe_device+0x18c/0x320 [ 1071.898124][T21496] driver_probe_device+0x4f/0x240 [ 1071.904982][T21496] __driver_attach+0x34c/0x640 [ 1071.911503][T21496] bus_for_each_dev+0x23b/0x2c0 [ 1071.918111][T21496] serio_handle_event+0x20a/0xdd0 [ 1071.924876][T21496] process_scheduled_works+0xb6e/0x18c0 [ 1071.932168][T21496] worker_thread+0xa53/0xfc0 [ 1071.938505][T21496] kthread+0x388/0x470 [ 1071.944324][T21496] ret_from_fork+0x51e/0xb90 [ 1071.950666][T21496] ret_from_fork_asm+0x1a/0x30 [ 1071.957201][T21496] } [ 1071.959790][T21496] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1071.969055][T21496] -> (&new->fa_lock){....}-{3:3} { [ 1071.974207][T21496] INITIAL USE at: [ 1071.978104][T21496] lock_acquire+0xf0/0x2e0 [ 1071.984103][T21496] _raw_write_lock_irq+0x3d/0x50 [ 1071.990612][T21496] fasync_remove_entry+0xf1/0x1c0 [ 1071.997304][T21496] lease_modify+0x4f7/0x6c0 [ 1072.003387][T21496] locks_remove_file+0x5f0/0xf70 [ 1072.009893][T21496] __fput+0x3ae/0xa70 [ 1072.015469][T21496] task_work_run+0x1d9/0x270 [ 1072.021651][T21496] exit_to_user_mode_loop+0xed/0x480 [ 1072.028627][T21496] __do_fast_syscall_32+0x415/0x640 [ 1072.035438][T21496] do_fast_syscall_32+0x33/0x70 [ 1072.041886][T21496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.049810][T21496] INITIAL READ USE at: [ 1072.054145][T21496] lock_acquire+0xf0/0x2e0 [ 1072.060569][T21496] _raw_read_lock_irqsave+0x48/0x60 [ 1072.067881][T21496] kill_fasync+0x199/0x4d0 [ 1072.074338][T21496] mousedev_notify_readers+0x6f1/0xc00 [ 1072.081834][T21496] mousedev_event+0x602/0x1320 [ 1072.088649][T21496] input_handle_events_default+0xd4/0x1a0 [ 1072.096393][T21496] input_pass_values+0x288/0x890 [ 1072.103354][T21496] input_event_dispose+0x330/0x6b0 [ 1072.110492][T21496] input_inject_event+0x1dd/0x340 [ 1072.117798][T21496] evdev_write+0x325/0x4c0 [ 1072.124233][T21496] vfs_write+0x29a/0xb90 [ 1072.130485][T21496] ksys_write+0x150/0x270 [ 1072.136913][T21496] __do_fast_syscall_32+0x20d/0x640 [ 1072.144131][T21496] do_fast_syscall_32+0x33/0x70 [ 1072.151173][T21496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.159517][T21496] } [ 1072.162022][T21496] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1072.170789][T21496] ... acquired at: [ 1072.174682][T21496] _raw_read_lock_irqsave+0x48/0x60 [ 1072.180086][T21496] kill_fasync+0x199/0x4d0 [ 1072.184699][T21496] mousedev_notify_readers+0x6f1/0xc00 [ 1072.190354][T21496] mousedev_event+0x602/0x1320 [ 1072.195322][T21496] input_handle_events_default+0xd4/0x1a0 [ 1072.201226][T21496] input_pass_values+0x288/0x890 [ 1072.206343][T21496] input_event_dispose+0x330/0x6b0 [ 1072.211653][T21496] input_inject_event+0x1dd/0x340 [ 1072.216890][T21496] evdev_write+0x325/0x4c0 [ 1072.221519][T21496] vfs_write+0x29a/0xb90 [ 1072.225955][T21496] ksys_write+0x150/0x270 [ 1072.230468][T21496] __do_fast_syscall_32+0x20d/0x640 [ 1072.235880][T21496] do_fast_syscall_32+0x33/0x70 [ 1072.240919][T21496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.247430][T21496] [ 1072.249865][T21496] [ 1072.249865][T21496] the dependencies between the lock to be acquired [ 1072.249876][T21496] and SOFTIRQ-irq-unsafe lock: [ 1072.263493][T21496] -> (tasklist_lock){.+.+}-{3:3} { [ 1072.268719][T21496] HARDIRQ-ON-R at: [ 1072.272795][T21496] lock_acquire+0xf0/0x2e0 [ 1072.279051][T21496] _raw_read_lock+0x36/0x50 [ 1072.285392][T21496] __do_wait+0xde/0x740 [ 1072.291394][T21496] do_wait+0x1e7/0x540 [ 1072.297320][T21496] kernel_wait+0xd6/0x1c0 [ 1072.303602][T21496] call_usermodehelper_exec_work+0xbe/0x230 [ 1072.311397][T21496] process_scheduled_works+0xb6e/0x18c0 [ 1072.318806][T21496] worker_thread+0xa53/0xfc0 [ 1072.325278][T21496] kthread+0x388/0x470 [ 1072.331205][T21496] ret_from_fork+0x51e/0xb90 [ 1072.337659][T21496] ret_from_fork_asm+0x1a/0x30 [ 1072.344269][T21496] SOFTIRQ-ON-R at: [ 1072.348346][T21496] lock_acquire+0xf0/0x2e0 [ 1072.354599][T21496] _raw_read_lock+0x36/0x50 [ 1072.360942][T21496] __do_wait+0xde/0x740 [ 1072.366971][T21496] do_wait+0x1e7/0x540 [ 1072.372867][T21496] kernel_wait+0xd6/0x1c0 [ 1072.379030][T21496] call_usermodehelper_exec_work+0xbe/0x230 [ 1072.386761][T21496] process_scheduled_works+0xb6e/0x18c0 [ 1072.394142][T21496] worker_thread+0xa53/0xfc0 [ 1072.400611][T21496] kthread+0x388/0x470 [ 1072.406561][T21496] ret_from_fork+0x51e/0xb90 [ 1072.413102][T21496] ret_from_fork_asm+0x1a/0x30 [ 1072.419714][T21496] INITIAL USE at: [ 1072.423705][T21496] lock_acquire+0xf0/0x2e0 [ 1072.429973][T21496] _raw_write_lock_irq+0x3d/0x50 [ 1072.436775][T21496] copy_process+0x247a/0x3cd0 [ 1072.443227][T21496] kernel_clone+0x248/0x8e0 [ 1072.449527][T21496] user_mode_thread+0x110/0x180 [ 1072.456180][T21496] rest_init+0x23/0x300 [ 1072.462090][T21496] start_kernel+0x385/0x3d0 [ 1072.468348][T21496] x86_64_start_reservations+0x24/0x30 [ 1072.475567][T21496] x86_64_start_kernel+0x143/0x1c0 [ 1072.482433][T21496] common_startup_64+0x13e/0x147 [ 1072.489121][T21496] INITIAL READ USE at: [ 1072.493545][T21496] lock_acquire+0xf0/0x2e0 [ 1072.500144][T21496] _raw_read_lock+0x36/0x50 [ 1072.506824][T21496] __do_wait+0xde/0x740 [ 1072.513187][T21496] do_wait+0x1e7/0x540 [ 1072.519521][T21496] kernel_wait+0xd6/0x1c0 [ 1072.526167][T21496] call_usermodehelper_exec_work+0xbe/0x230 [ 1072.534264][T21496] process_scheduled_works+0xb6e/0x18c0 [ 1072.542098][T21496] worker_thread+0xa53/0xfc0 [ 1072.548982][T21496] kthread+0x388/0x470 [ 1072.555248][T21496] ret_from_fork+0x51e/0xb90 [ 1072.562020][T21496] ret_from_fork_asm+0x1a/0x30 [ 1072.568970][T21496] } [ 1072.571559][T21496] ... key at: [] tasklist_lock+0x18/0x40 [ 1072.579397][T21496] ... acquired at: [ 1072.583303][T21496] _raw_read_lock+0x36/0x50 [ 1072.587989][T21496] send_sigio+0x101/0x370 [ 1072.592507][T21496] dnotify_handle_event+0x169/0x440 [ 1072.597888][T21496] fsnotify+0x1831/0x1ae0 [ 1072.602396][T21496] fsnotify_move+0x1d7/0x5b0 [ 1072.607171][T21496] vfs_rename+0xcdd/0xeb0 [ 1072.611734][T21496] filename_renameat2+0x539/0x9c0 [ 1072.616959][T21496] __se_sys_renameat2+0x5a/0x2c0 [ 1072.622082][T21496] __do_fast_syscall_32+0x20d/0x640 [ 1072.627560][T21496] do_fast_syscall_32+0x33/0x70 [ 1072.632608][T21496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.639117][T21496] [ 1072.641448][T21496] -> (&f_owner->lock){....}-{3:3} { [ 1072.646691][T21496] INITIAL USE at: [ 1072.650595][T21496] lock_acquire+0xf0/0x2e0 [ 1072.656598][T21496] _raw_write_lock_irq+0x3d/0x50 [ 1072.663134][T21496] __f_setown+0x67/0x370 [ 1072.669039][T21496] generic_setlease+0xacf/0xff0 [ 1072.675471][T21496] do_fcntl_add_lease+0x35e/0x470 [ 1072.682066][T21496] fcntl_setlease+0x123/0x180 [ 1072.688333][T21496] do_fcntl+0x8b3/0x1a20 [ 1072.694146][T21496] do_compat_fcntl64+0x51e/0x7e0 [ 1072.700666][T21496] __do_fast_syscall_32+0x20d/0x640 [ 1072.707442][T21496] do_fast_syscall_32+0x33/0x70 [ 1072.713865][T21496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.721771][T21496] INITIAL READ USE at: [ 1072.726104][T21496] lock_acquire+0xf0/0x2e0 [ 1072.732528][T21496] _raw_read_lock_irqsave+0x48/0x60 [ 1072.739741][T21496] send_sigio+0x38/0x370 [ 1072.745992][T21496] dnotify_handle_event+0x169/0x440 [ 1072.753312][T21496] fsnotify+0x1831/0x1ae0 [ 1072.759672][T21496] fsnotify_move+0x1d7/0x5b0 [ 1072.766282][T21496] vfs_rename+0xcdd/0xeb0 [ 1072.772625][T21496] filename_renameat2+0x539/0x9c0 [ 1072.779664][T21496] __se_sys_renameat2+0x5a/0x2c0 [ 1072.786617][T21496] __do_fast_syscall_32+0x20d/0x640 [ 1072.793840][T21496] do_fast_syscall_32+0x33/0x70 [ 1072.800748][T21496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.809192][T21496] } [ 1072.811793][T21496] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1072.820662][T21496] ... acquired at: [ 1072.824468][T21496] _raw_read_lock_irqsave+0x48/0x60 [ 1072.829857][T21496] send_sigio+0x38/0x370 [ 1072.834296][T21496] kill_fasync+0x24d/0x4d0 [ 1072.838902][T21496] lease_break_callback+0x26/0x30 [ 1072.844113][T21496] __break_lease+0x81c/0x1e80 [ 1072.848978][T21496] vfs_create+0x39c/0x460 [ 1072.853485][T21496] filename_mknodat+0x3e8/0x660 [ 1072.858604][T21496] __se_sys_mknodat+0x3b/0x150 [ 1072.863636][T21496] __do_fast_syscall_32+0x20d/0x640 [ 1072.869026][T21496] do_fast_syscall_32+0x33/0x70 [ 1072.874064][T21496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.880578][T21496] [ 1072.882907][T21496] [ 1072.882907][T21496] stack backtrace: [ 1072.888810][T21496] CPU: 0 UID: 0 PID: 21496 Comm: syz.1.4914 Tainted: G L syzkaller #0 PREEMPT(full) [ 1072.888834][T21496] Tainted: [L]=SOFTLOCKUP [ 1072.888841][T21496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1072.888853][T21496] Call Trace: [ 1072.888862][T21496] [ 1072.888870][T21496] dump_stack_lvl+0xe8/0x150 [ 1072.888897][T21496] __lock_acquire+0x2a94/0x2cf0 [ 1072.888928][T21496] lock_acquire+0xf0/0x2e0 [ 1072.888948][T21496] ? send_sigio+0x38/0x370 [ 1072.888968][T21496] ? lock_acquire+0xf0/0x2e0 [ 1072.888989][T21496] _raw_read_lock_irqsave+0x48/0x60 [ 1072.889011][T21496] ? send_sigio+0x38/0x370 [ 1072.889027][T21496] send_sigio+0x38/0x370 [ 1072.889046][T21496] kill_fasync+0x24d/0x4d0 [ 1072.889064][T21496] ? kill_fasync+0x53/0x4d0 [ 1072.889082][T21496] lease_break_callback+0x26/0x30 [ 1072.889101][T21496] __break_lease+0x81c/0x1e80 [ 1072.889133][T21496] ? __pfx___break_lease+0x10/0x10 [ 1072.889158][T21496] ? generic_permission+0x2e4/0x690 [ 1072.889185][T21496] ? inode_permission+0x346/0x5f0 [ 1072.889207][T21496] ? bpf_lsm_inode_create+0x9/0x20 [ 1072.889227][T21496] vfs_create+0x39c/0x460 [ 1072.889247][T21496] filename_mknodat+0x3e8/0x660 [ 1072.889268][T21496] ? __pfx_filename_mknodat+0x10/0x10 [ 1072.889286][T21496] ? strncpy_from_user+0x150/0x2b0 [ 1072.889403][T21496] ? do_getname+0x151/0x250 [ 1072.889425][T21496] __se_sys_mknodat+0x3b/0x150 [ 1072.889446][T21496] __do_fast_syscall_32+0x20d/0x640 [ 1072.889471][T21496] ? do_fast_syscall_32+0x33/0x70 [ 1072.889494][T21496] ? asm_int80_emulation+0x1a/0x20 [ 1072.889510][T21496] ? do_int80_emulation+0x274/0x4d0 [ 1072.889533][T21496] ? trace_irq_disable+0x3b/0x150 [ 1072.889549][T21496] do_fast_syscall_32+0x33/0x70 [ 1072.889578][T21496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.889600][T21496] RIP: 0023:0xf7fa6f6c [ 1072.889617][T21496] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1072.889632][T21496] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000129 [ 1072.889650][T21496] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 1072.889662][T21496] RDX: 0000000000000040 RSI: 0000000000000703 RDI: 0000000000000000 [ 1072.889672][T21496] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1072.889682][T21496] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1072.889691][T21496] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1072.889707][T21496] [ 1073.346014][T21492] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4912'. [ 1073.355191][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 1073.360742][T21492] IPv6: Can't replace route, no match found [ 1073.390623][ T5825] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1073.399293][ T5825] usb 5-1: config 5 has an invalid interface number: 18 but max is 0 [ 1073.427258][ T5825] usb 5-1: config 5 has no interface number 0 [ 1073.457503][ T5825] usb 5-1: config 5 interface 18 has no altsetting 0 [ 1073.466679][ T5825] usb 5-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 1073.559333][T21516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.692077][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.703812][T21516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.746455][ T5825] usb 5-1: Product: syz [ 1073.759040][ T5825] usb 5-1: Manufacturer: syz [ 1073.769853][ T5825] usb 5-1: SerialNumber: syz [ 1073.989687][ T5825] usb 5-1: Could not find all expected endpoints [ 1074.000278][ T5825] usb 5-1: USB disconnect, device number 52