last executing test programs: 20.219408274s ago: executing program 4 (id=1808): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 19.091329159s ago: executing program 0 (id=1812): openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x40810) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(0x0, 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x6, &(0x7f0000000080)={0x13, 0x5, 0x28}) mq_open(&(0x7f0000000100)='-+\x00', 0x40, 0x0, &(0x7f0000000180)={0xa2, 0x0, 0x3, 0xf4}) 18.87983081s ago: executing program 4 (id=1813): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x41, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 17.547211256s ago: executing program 3 (id=1815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = timerfd_create(0x0, 0x80000) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000040)=0x8004) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c000280040010"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 17.525704886s ago: executing program 0 (id=1816): socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000030000000400000000000000", @ANYRES32=r1, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = semget(0x0, 0x4, 0x39c) semop(r2, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x3) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 17.380907103s ago: executing program 3 (id=1818): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(r1, 0x8, &(0x7f0000001040)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x12, 0x0}}], 0x2, 0x400c010) eventfd2(0x0, 0x1) io_setup(0x3, &(0x7f00000010c0)) io_submit(0x0, 0x0, &(0x7f0000000140)) dup(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r3, 0x1) ppoll(&(0x7f0000000080)=[{r3, 0x9085}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 15.070078298s ago: executing program 3 (id=1822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x0, 'veth1_to_bridge\x00', {}, 0xf43}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 14.953983673s ago: executing program 3 (id=1823): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006e80), 0x7a, 0x181080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}}, 0x20000084) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, 0x0) r7 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r7, 0x409, 0xc) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, &(0x7f0000000240)=ANY=[]) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) 12.918895303s ago: executing program 0 (id=1826): openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x40810) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(0x0, 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x6, &(0x7f0000000080)={0x13, 0x5, 0x28}) mq_open(&(0x7f0000000100)='-+\x00', 0x40, 0x0, &(0x7f0000000180)={0xa2, 0x0, 0x3, 0xf4}) 11.499207923s ago: executing program 0 (id=1828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = timerfd_create(0x0, 0x80000) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000040)=0x8004) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c000280040010"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 11.350445871s ago: executing program 3 (id=1829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x2, 0x0, 0x1, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x7, 0x2}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0xf, [{@broadcast, 0xfffffff0}, {@local, 0x8001}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120141014813442024040075ee690102030109021b0001000010000904"], 0x0) 11.202622328s ago: executing program 4 (id=1832): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(r1, 0x8, &(0x7f0000001040)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x12, 0x0}}], 0x2, 0x400c010) eventfd2(0x0, 0x1) io_setup(0x3, &(0x7f00000010c0)) io_submit(0x0, 0x0, &(0x7f0000000140)) dup(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r3, 0x1) ppoll(&(0x7f0000000080)=[{r3, 0x9085}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 9.137956719s ago: executing program 1 (id=1835): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) r1 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x110, 0x0) mq_timedsend(r1, 0x0, 0xff7f, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000032, @multicast2, 0x0, 0x0, 'dh\x00', 0x0, 0x5, 0x3a}, 0x2c) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000040)="5089bf46b00ec0d7649eec5b508bf68310f61cb3ea0ef847a9378031baff6a37d92c69a6112be602ac9909e2e102154cf47f2d01a24229", 0x37) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = geteuid() mount$binderfs(0x0, 0x0, 0x0, 0x2076c10, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT=r6]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) lseek(0xffffffffffffffff, 0x10001, 0x0) 8.027647434s ago: executing program 2 (id=1836): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0xb, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r3, 0x0, 0x10002) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) timerfd_create(0x0, 0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x401, 0x3f) socket$kcm(0x10, 0x400000002, 0x0) 8.002842425s ago: executing program 4 (id=1837): socket(0x2, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, 0x0, &(0x7f0000001500)=@tcp}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4"], 0x8a) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000008085", @ANYRES32, @ANYBLOB="00000000010000801801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600b70300000d000000850000000600"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.747153947s ago: executing program 4 (id=1838): openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x40810) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(0x0, 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x6, &(0x7f0000000080)={0x13, 0x5, 0x28}) mq_open(&(0x7f0000000100)='-+\x00', 0x40, 0x0, &(0x7f0000000180)={0xa2, 0x0, 0x3, 0xf4}) 6.718170679s ago: executing program 2 (id=1839): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 5.504761369s ago: executing program 1 (id=1840): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)={0x2, 0x0, [{0x0, 0x19, &(0x7f0000000000)=""/25}, {0x0, 0xfef, &(0x7f0000001d80)=""/4079}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 5.47351772s ago: executing program 0 (id=1841): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x12) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x4000250) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000001600000000000000", @ANYRES32, @ANYBLOB="fdffffff0000000000000000bf00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x2e76be}], 0x1}, 0x3) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b0905, 0x8000, '\x00', @string=&(0x7f0000000180)=0x81}}) 5.386118974s ago: executing program 1 (id=1842): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) setresuid(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ff", 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff00002003"], 0xb0}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r6, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1={0xfc, 0x1, '\x00', 0x2}, 0x9}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x0, 0x101}, 0x800, 0xff, 0xfffffffffffffff8, 0x5, r0, r0, 0x3ff}) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r7, 0x0, 0x4000000) 4.354683885s ago: executing program 1 (id=1843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f0000000940)=ANY=[], 0x120) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0) sendmsg$nl_generic(r3, 0x0, 0x20008080) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = syz_io_uring_setup(0x2e06, &(0x7f00000002c0)={0x0, 0x2667, 0x40, 0x3, 0x217}, &(0x7f0000000240), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, 0x0, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) ioctl$FIBMAP(r7, 0x5381, 0x0) 4.353157445s ago: executing program 3 (id=1844): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 4.305553917s ago: executing program 4 (id=1845): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'caif0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1001000, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffff25, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x10) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000380)={0x1796, 0x30, '\x00', 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = dup(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f00000003c0)=""/234, 0x0, 0xe000}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.414866211s ago: executing program 1 (id=1846): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYBLOB="3126e0dd9db049f4f81b9b14996e83b8f5665c5ecd61ee1064bc1a5917b3fcba93e20280dac03fd5d71515a12d02fbe9aad92cc1a4de96c10c038f1205b15b5d8599e1e5266b98682642ccf67db4b69a2713c9f4a6528b94a7621bc18099293d75ae7f98e6a2e2eca50a5bf2031e847d4f294918ff928b2ab955290722749558b988c7ca010ab6ba701fa29ffd5d408191376a2643385046fe22da8f2b4316a6995724d88bb46fab8413fa76be0726672b7aca7ff764c1fe13542a467fa9bdf817ecefaf", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setresuid(0xffffffffffffffff, 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000030000000400000000000000", @ANYRES32, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = semget(0x0, 0x4, 0x39c) semop(r2, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x3) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="24f101c5bf369a17a809b951fec464d9b7cfc7bccbd7f767a872a50bde9c1d2aa825e830fde502ec460d38555339c7e62142e26f7aba304888ec9dbb4e5720ecc16f6304d26eaece48e2d28ce66b4d7cb0d43cfa091de8b9da1bd7ae3307b81990cd97113b072a9de2f4f739b1fca7f7fb0a00000000000000", @ANYRES16, @ANYBLOB="080000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="080005000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000ffff02110840000802110000001000000002000000"], 0x1e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{0x0, 0x2, 0xe0, 0x4}, {0x1, 0xb, 0x9e, 0x5}, {0x9, 0x40, 0x5, 0xffffffff}]}, 0x10) 2.886470857s ago: executing program 2 (id=1847): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(r1, 0x8, &(0x7f0000001040)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x12, 0x0}}], 0x2, 0x400c010) eventfd2(0x0, 0x1) io_setup(0x3, &(0x7f00000010c0)) io_submit(0x0, 0x0, &(0x7f0000000140)) dup(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r3, 0x1) ppoll(&(0x7f0000000080)=[{r3, 0x9085}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 2.169946783s ago: executing program 2 (id=1848): socket(0x2, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, 0x0, &(0x7f0000001500)=@tcp}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4"], 0x8a) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000008085", @ANYRES32, @ANYBLOB="00000000010000801801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600b70300000d000000850000000600"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.984569842s ago: executing program 2 (id=1849): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0xb, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r4, 0x0, 0x10002) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) timerfd_create(0x0, 0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x401, 0x3f) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 1.975318252s ago: executing program 1 (id=1850): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="9a", 0x1, 0x800, 0x0, 0x0) 934.648463ms ago: executing program 2 (id=1851): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="9344485a4f6c11af068733b3b0f198b22d5ae59bcb233b83e46d3e330b0f79", 0x1f}], 0x1}}], 0x1, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x240003, 0x0) 0s ago: executing program 0 (id=1852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xf}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0xfff5}, {0x6, 0x80, 0xf, 0x4, 0xd, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e", 0x1}], 0x1}, 0x4c00c) kernel console output (not intermixed with test programs): .206': attribute type 1 has an invalid length. [ 165.170165][ T5253] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 165.349759][ T5253] overlayfs: failed to look up (tracing) for ino (-66) [ 167.970915][ T4317] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 168.180692][ T4317] usb 2-1: Using ep0 maxpacket: 32 [ 168.188885][ T4317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.202315][ T4317] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 168.211657][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.219824][ T4317] usb 2-1: Product: syz [ 168.224689][ T4317] usb 2-1: Manufacturer: syz [ 168.230024][ T4317] usb 2-1: SerialNumber: syz [ 168.252204][ T4317] usb 2-1: config 0 descriptor?? [ 168.261082][ T4317] smsc75xx v1.0.0 [ 168.264816][ T4317] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 168.275085][ T4317] smsc75xx: probe of 2-1:0.0 failed with error -22 [ 168.841141][ T5271] device syzkaller0 entered promiscuous mode [ 169.842800][ T7] usb 2-1: USB disconnect, device number 7 [ 170.497071][ T5290] overlayfs: missing 'lowerdir' [ 170.629133][ T5291] netlink: 'syz.2.220': attribute type 1 has an invalid length. [ 171.563207][ T5301] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 171.706915][ T5298] overlayfs: failed to look up (tracing) for ino (-66) [ 173.929746][ T5318] device syzkaller0 entered promiscuous mode [ 176.781004][ T4315] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.000746][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 177.011496][ T4315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.052732][ T4315] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 177.062430][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.070537][ T4315] usb 5-1: Product: syz [ 177.074949][ T4315] usb 5-1: Manufacturer: syz [ 177.079652][ T4315] usb 5-1: SerialNumber: syz [ 177.098140][ T4315] usb 5-1: config 0 descriptor?? [ 177.245146][ T4269] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.258701][ T5354] overlayfs: missing 'lowerdir' [ 177.294374][ T4315] smsc75xx v1.0.0 [ 177.298194][ T4315] smsc75xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 177.309223][ T4315] smsc75xx: probe of 5-1:0.0 failed with error -22 [ 177.369059][ T5354] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 177.495226][ T4269] usb 1-1: Using ep0 maxpacket: 16 [ 177.519877][ T4269] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 177.566892][ T4269] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 177.588482][ T4269] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 177.605515][ T4269] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 177.639271][ T4269] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 177.766231][ T4269] usb 1-1: config 1 interface 0 has no altsetting 0 [ 177.775521][ T4269] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 177.788481][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.810306][ T4269] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 178.009603][ T4269] scsi host1: usb-storage 1-1:1.0 [ 178.100437][ T5363] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 178.168407][ T5363] overlayfs: failed to look up (tracing) for ino (-66) [ 179.096232][ T4310] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 179.134397][ T4310] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 179.742447][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.751244][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.001123][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 181.001625][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 181.007378][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 181.013567][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 181.025925][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 184.520037][ T4323] usb 5-1: USB disconnect, device number 8 [ 186.019955][ T5407] overlayfs: missing 'lowerdir' [ 186.074436][ T5409] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 186.309859][ T5425] tipc: Started in network mode [ 186.315386][ T5425] tipc: Node identity 2, cluster identity 4711 [ 186.321897][ T5425] tipc: Node number set to 2 [ 186.932449][ T5424] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 186.952244][ T5424] overlayfs: failed to look up (tracing) for ino (-66) [ 187.463629][ T5433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.472524][ T5433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.842459][ T5437] device syzkaller0 entered promiscuous mode [ 188.140936][ T4323] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 188.690696][ T4323] usb 2-1: Using ep0 maxpacket: 16 [ 188.699834][ T4323] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 188.759966][ T4323] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 188.795809][ T4323] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 188.825387][ T5444] device syzkaller0 entered promiscuous mode [ 188.840844][ T4323] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 188.853419][ T4323] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 188.870841][ T4323] usb 2-1: config 1 interface 0 has no altsetting 0 [ 188.882379][ T4323] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 188.898784][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.925333][ T4323] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 189.190537][ T4323] scsi host2: usb-storage 2-1:1.0 [ 190.536087][ T4337] scsi 2:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 190.695275][ T4337] sd 2:0:0:0: Attached scsi generic sg2 type 0 [ 191.294840][ T5481] overlayfs: missing 'lowerdir' [ 191.456525][ T5481] netlink: 'syz.0.256': attribute type 1 has an invalid length. [ 192.422454][ T5495] trusted_key: encrypted_key: insufficient parameters specified [ 193.970093][ T5501] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 193.990422][ T5501] overlayfs: failed to look up (tracing) for ino (-66) [ 194.289888][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.297603][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.511724][ T5511] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 198.691216][ T5536] overlayfs: missing 'lowerdir' [ 198.760995][ T4340] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 198.840325][ T5536] netlink: 'syz.4.268': attribute type 1 has an invalid length. [ 199.335300][ T4340] usb 3-1: Using ep0 maxpacket: 16 [ 199.350435][ T4340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 199.359847][ T4340] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 199.374722][ T4340] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 199.420871][ T4340] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 199.438983][ T4340] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 199.451730][ T4340] usb 3-1: config 1 interface 0 has no altsetting 0 [ 199.458694][ T4340] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 199.473227][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.781854][ T4340] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 199.860119][ T4340] scsi host3: usb-storage 3-1:1.0 [ 200.167514][ T5541] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 200.338736][ T5541] overlayfs: failed to look up (tracing) for ino (-66) [ 200.983510][ T75] scsi 3:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 201.074049][ T5556] device syzkaller0 entered promiscuous mode [ 201.158137][ T75] sd 3:0:0:0: Attached scsi generic sg3 type 0 [ 204.191124][ T4340] usb 3-1: USB disconnect, device number 6 [ 204.224701][ T4356] sd 3:0:0:0: [sdd] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 204.236740][ T4356] sd 3:0:0:0: [sdd] Sense not available. [ 204.244279][ T4356] sd 3:0:0:0: [sdd] 0 512-byte logical blocks: (0 B/0 B) [ 204.251964][ T4356] sd 3:0:0:0: [sdd] 0-byte physical blocks [ 204.258381][ T4356] sd 3:0:0:0: [sdd] Write Protect is off [ 204.271456][ T4356] sd 3:0:0:0: [sdd] Asking for cache data failed [ 204.278379][ T4356] sd 3:0:0:0: [sdd] Assuming drive cache: write through [ 204.387653][ T4356] sd 3:0:0:0: [sdd] Attached SCSI removable disk [ 204.876617][ T4688] udevd[4688]: inotify_add_watch(7, /dev/sdd, 10) failed: No such file or directory [ 205.181837][ T4519] udevd[4519]: inotify_add_watch(7, /dev/sdd, 10) failed: No such file or directory [ 205.350999][ T5613] overlayfs: missing 'lowerdir' [ 205.406557][ T5613] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 207.543606][ T5574] device syzkaller0 entered promiscuous mode [ 207.944720][ T5631] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 208.021499][ T4315] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 208.047669][ T5631] overlayfs: failed to look up (tracing) for ino (-66) [ 208.710799][ T4315] usb 5-1: Using ep0 maxpacket: 16 [ 208.724824][ T4315] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 208.737758][ T4315] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 208.749900][ T4315] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 208.775805][ T4315] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 208.808078][ T4315] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 208.831937][ T4315] usb 5-1: config 1 interface 0 has no altsetting 0 [ 208.853024][ T4315] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 208.918327][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.006438][ T4315] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 209.193241][ T4315] scsi host3: usb-storage 5-1:1.0 [ 209.825828][ T5361] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 210.000691][ T5361] usb 1-1: device descriptor read/64, error -32 [ 210.283059][ T4356] scsi 3:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 210.300686][ T5361] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 210.415836][ T4356] sd 3:0:0:0: Attached scsi generic sg3 type 0 [ 210.490766][ T5361] usb 1-1: device descriptor read/64, error -32 [ 210.790723][ T5361] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 210.862351][ T5361] usb 1-1: device descriptor read/8, error -32 [ 211.150757][ T5361] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 211.181299][ T5361] usb 1-1: device descriptor read/8, error -32 [ 211.311618][ T2037] usb 1-1: USB disconnect, device number 6 [ 211.319856][ T11] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 211.378453][ T11] sd 1:0:0:0: [sdb] Sense not available. [ 211.411519][ T11] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 211.418654][ T11] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 211.470857][ T11] sd 1:0:0:0: [sdb] Write Protect is off [ 211.518608][ T11] sd 1:0:0:0: [sdb] Asking for cache data failed [ 211.553674][ T11] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 211.643204][ T11] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 211.980812][ T2037] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 212.180821][ T2037] usb 1-1: device descriptor read/64, error -32 [ 212.460928][ T2037] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 212.620825][ T2037] usb 1-1: device descriptor read/64, error -32 [ 212.746286][ T2037] usb usb1-port1: attempt power cycle [ 213.167080][ T2037] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 213.203926][ T2037] usb 1-1: device descriptor read/8, error -32 [ 213.482632][ T2037] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 213.530972][ T2037] usb 1-1: device descriptor read/8, error -32 [ 213.664821][ T2037] usb usb1-port1: unable to enumerate USB device [ 213.959899][ T4475] udevd[4475]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 214.138607][ T4553] udevd[4553]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 215.587070][ T5696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.671637][ T5696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.758755][ T5699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.767612][ T5699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.142918][ T5711] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 219.272892][ T5737] device syzkaller0 entered promiscuous mode [ 220.696374][ T5767] comedi comedi0: Minor 3 could not be opened [ 221.426964][ T5452] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 222.070854][ T4961] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 222.210722][ T5452] usb 2-1: device descriptor read/64, error -32 [ 222.260773][ T4961] usb 3-1: Using ep0 maxpacket: 32 [ 222.276751][ T4961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.312175][ T4961] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 222.345664][ T4961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.355377][ T4961] usb 3-1: Product: syz [ 222.359868][ T4961] usb 3-1: Manufacturer: syz [ 222.366403][ T4961] usb 3-1: SerialNumber: syz [ 222.382273][ T4961] usb 3-1: config 0 descriptor?? [ 222.401283][ T4961] smsc75xx v1.0.0 [ 222.405191][ T4961] smsc75xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 222.415892][ T4961] smsc75xx: probe of 3-1:0.0 failed with error -22 [ 222.491618][ T5452] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 222.668303][ T5452] usb 2-1: device descriptor read/64, error -32 [ 222.941714][ T5452] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 222.993052][ T5452] usb 2-1: device descriptor read/8, error -32 [ 223.272873][ T5452] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 223.318393][ T5452] usb 2-1: device descriptor read/8, error -32 [ 223.454880][ T2037] usb 2-1: USB disconnect, device number 8 [ 223.461275][ T5452] sddr09: could not read card info [ 223.484930][ T4418] sd 2:0:0:0: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 223.501654][ T4418] sd 2:0:0:0: [sdc] 0-byte physical blocks [ 223.519011][ T4418] sd 2:0:0:0: [sdc] Write Protect is off [ 223.527794][ T4418] sd 2:0:0:0: [sdc] Asking for cache data failed [ 223.553878][ T4418] sd 2:0:0:0: [sdc] Assuming drive cache: write through [ 223.603154][ T4418] sd 2:0:0:0: [sdc] Attached SCSI removable disk [ 223.881277][ T2037] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 224.055268][ T2037] usb 2-1: device descriptor read/64, error -32 [ 224.337130][ T2037] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 224.500871][ T2037] usb 2-1: device descriptor read/64, error -32 [ 224.633151][ T2037] usb usb2-port1: attempt power cycle [ 225.070685][ T2037] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 225.131016][ T2037] usb 2-1: device descriptor read/8, error -32 [ 225.412632][ T2037] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 225.465752][ T2037] usb 2-1: device descriptor read/8, error -32 [ 225.595999][ T2037] usb usb2-port1: unable to enumerate USB device [ 225.681796][ T4269] usb 3-1: USB disconnect, device number 7 [ 225.945338][ T4553] udevd[4553]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 226.149717][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.159010][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.424477][ T5798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.514971][ T5798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.561002][ T4553] udevd[4553]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 226.949152][ T5811] UBIFS error (pid: 5811): cannot open "(null)", error -22 [ 228.175069][ T5814] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 228.192005][ T5814] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 228.202094][ T5814] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 228.266027][ T5814] syz.2.325 (5814) used greatest stack depth: 20120 bytes left [ 228.274014][ T26] audit: type=1800 audit(1774393853.090:2): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.325" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 230.307038][ T5829] device syzkaller0 entered promiscuous mode [ 233.224058][ T5860] binder: 5859:5860 ioctl c0306201 200000000080 returned -14 [ 235.157991][ T5870] __nla_validate_parse: 44 callbacks suppressed [ 235.158006][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 235.248341][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 235.260824][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 235.272755][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 235.307135][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 235.353055][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 235.415494][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 235.464577][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 235.532725][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 235.599591][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 235.645414][ T5871] netlink: 'syz.3.338': attribute type 13 has an invalid length. [ 236.420711][ T5894] overlayfs: missing 'lowerdir' [ 236.592518][ T5894] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 236.855710][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 236.896922][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.917373][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.322285][ T5911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.344067][ T5911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.458784][ T5909] device syzkaller0 entered promiscuous mode [ 240.426696][ T5950] x_tables: unsorted entry at hook 2 [ 241.182870][ T5642] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 241.342230][ T5642] usb 5-1: device descriptor read/64, error -32 [ 241.616506][ T5642] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 241.780761][ T5642] usb 5-1: device descriptor read/64, error -32 [ 241.830939][ T5913] __nla_validate_parse: 44 callbacks suppressed [ 241.830960][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 241.846663][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 241.855762][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 241.864993][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 241.873976][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 241.883138][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 241.892411][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 241.901711][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 241.910973][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 241.920160][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 242.066921][ T5642] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 242.146250][ T5642] usb 5-1: device descriptor read/8, error -32 [ 242.473699][ T5642] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 242.647017][ T5642] usb 5-1: device descriptor read/8, error -32 [ 242.771740][ T4340] usb 5-1: USB disconnect, device number 9 [ 242.778118][ T5642] sddr09: could not read card info [ 242.820823][ T46] sd 3:0:0:0: [sdd] 0 512-byte logical blocks: (0 B/0 B) [ 242.843430][ T46] sd 3:0:0:0: [sdd] 0-byte physical blocks [ 242.869273][ T46] sd 3:0:0:0: [sdd] Write Protect is off [ 242.913714][ T46] sd 3:0:0:0: [sdd] Asking for cache data failed [ 242.946371][ T46] sd 3:0:0:0: [sdd] Assuming drive cache: write through [ 243.013495][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 243.031617][ T46] sd 3:0:0:0: [sdd] Attached SCSI removable disk [ 243.230768][ T7] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 243.239075][ T7] usb 3-1: config 0 has no interface number 0 [ 243.270745][ T7] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 243.313982][ T7] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.336935][ T7] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 243.378735][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.393762][ T7] usb 3-1: Product: syz [ 243.399939][ T7] usb 3-1: Manufacturer: syz [ 243.403360][ T4340] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 243.409873][ T7] usb 3-1: SerialNumber: syz [ 243.590855][ T4340] usb 5-1: device descriptor read/64, error -32 [ 243.675099][ T7] usb 3-1: config 0 descriptor?? [ 243.758998][ T5965] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 243.860997][ T4340] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 244.006024][ T7] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 244.060680][ T4340] usb 5-1: device descriptor read/64, error -32 [ 244.074553][ T5977] device geneve2 entered promiscuous mode [ 244.147077][ T7] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 244.180933][ T4340] usb usb5-port1: attempt power cycle [ 244.207343][ T4961] usb 3-1: USB disconnect, device number 8 [ 244.250375][ T4961] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 244.271131][ T4961] cyberjack 3-1:0.69: device disconnected [ 244.590782][ T4340] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 244.651011][ T4340] usb 5-1: device descriptor read/8, error -32 [ 244.930950][ T4340] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 244.981107][ T4340] usb 5-1: device descriptor read/8, error -32 [ 245.069141][ T6009] bridge0: port 3(vlan2) entered blocking state [ 245.100878][ T4340] usb usb5-port1: unable to enumerate USB device [ 245.108475][ T6009] bridge0: port 3(vlan2) entered disabled state [ 246.971068][ T6023] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 247.033684][ T4553] udevd[4553]: inotify_add_watch(7, /dev/sdd, 10) failed: No such file or directory [ 247.416915][ T6036] overlayfs: missing 'lowerdir' [ 248.072229][ T6036] netlink: 'syz.0.377': attribute type 1 has an invalid length. [ 248.278403][ T4553] udevd[4553]: inotify_add_watch(7, /dev/sdd, 10) failed: No such file or directory [ 248.290445][ T6036] vivid-001: kernel_thread() failed [ 248.414885][ T6045] __nla_validate_parse: 44 callbacks suppressed [ 248.414919][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 248.448707][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 248.474810][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 248.502730][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 248.524258][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 248.550348][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 248.564069][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 248.580866][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 248.606838][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 248.616110][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 248.922619][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.941926][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.107149][ T6066] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 250.320910][ T6072] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 250.631828][ T6086] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 250.947566][ T6099] QAT: Device 7 not found [ 251.135079][ T6101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.168305][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.364665][ T6086] overlayfs: failed to look up (tracing) for ino (-66) [ 252.631473][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.642517][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.859763][ T6128] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 253.370410][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.381519][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.264867][ T6137] __nla_validate_parse: 44 callbacks suppressed [ 254.264894][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 254.290397][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 254.328880][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 254.331531][ T6139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.351129][ T6139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.383373][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 254.411118][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 254.433794][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 254.473676][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 254.485233][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 254.496985][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 254.506293][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 255.112718][ T6146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.163438][ T6146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.727785][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.734439][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.553464][ T6151] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 257.060276][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.069459][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.151018][ T6176] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 257.605626][ T6184] tipc: Started in network mode [ 257.611796][ T6184] tipc: Node identity 2, cluster identity 4711 [ 257.618187][ T6184] tipc: Node number set to 2 [ 259.805370][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.814930][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.080752][ T4920] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 261.260701][ T4920] usb 3-1: Using ep0 maxpacket: 32 [ 261.269045][ T4920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.311001][ T4920] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 261.340191][ T4920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.357638][ T4920] usb 3-1: Product: syz [ 261.367628][ T4920] usb 3-1: Manufacturer: syz [ 261.377024][ T4920] usb 3-1: SerialNumber: syz [ 261.390396][ T4920] usb 3-1: config 0 descriptor?? [ 261.418243][ T4920] smsc75xx v1.0.0 [ 261.422649][ T4920] smsc75xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 261.433883][ T4920] smsc75xx: probe of 3-1:0.0 failed with error -22 [ 262.098756][ T6219] ax25_connect(): syz.0.431 uses autobind, please contact jreuter@yaina.de [ 263.140785][ T4340] usb 3-1: USB disconnect, device number 9 [ 263.388519][ T6231] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 265.080695][ T6226] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 265.160745][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 265.528833][ T6234] device syzkaller0 entered promiscuous mode [ 265.646443][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.655369][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.598765][ T4277] Bluetooth: hci3: Unknown advertising packet type: 0x6977 [ 266.598808][ T4277] Bluetooth: hci3: Malformed LE Event: 0x0d [ 267.486085][ T6264] ax25_connect(): syz.4.444 uses autobind, please contact jreuter@yaina.de [ 268.984267][ T4961] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 269.245666][ T4961] usb 3-1: Using ep0 maxpacket: 32 [ 269.264487][ T4961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.305072][ T4961] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 269.317401][ T4961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.326074][ T4961] usb 3-1: Product: syz [ 269.330389][ T4961] usb 3-1: Manufacturer: syz [ 269.338318][ T4961] usb 3-1: SerialNumber: syz [ 269.349521][ T4961] usb 3-1: config 0 descriptor?? [ 269.369904][ T4961] smsc75xx v1.0.0 [ 269.380266][ T4961] smsc75xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 269.406076][ T4961] smsc75xx: probe of 3-1:0.0 failed with error -22 [ 269.829971][ T6283] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 269.961648][ T6286] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 271.178720][ T4269] usb 3-1: USB disconnect, device number 10 [ 273.326372][ T4277] Bluetooth: hci1: Unknown advertising packet type: 0x6977 [ 273.327112][ T4277] Bluetooth: hci1: Malformed LE Event: 0x0d [ 273.354574][ T6305] ax25_connect(): syz.3.456 uses autobind, please contact jreuter@yaina.de [ 273.505963][ T6310] device syzkaller0 entered promiscuous mode [ 274.084269][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.093064][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.539527][ T6330] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 275.237920][ T6328] bridge0: port 3(erspan0) entered blocking state [ 275.248912][ T6328] bridge0: port 3(erspan0) entered disabled state [ 275.266482][ T6328] device erspan0 entered promiscuous mode [ 275.275684][ T6328] bridge0: port 3(erspan0) entered blocking state [ 275.282500][ T6328] bridge0: port 3(erspan0) entered forwarding state [ 275.994025][ T6334] trusted_key: encrypted_key: insufficient parameters specified [ 277.865287][ T6346] device syzkaller0 entered promiscuous mode [ 278.374370][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.450409][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.050554][ T6361] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 280.069022][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.078042][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.592634][ T6397] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 285.728796][ T6401] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 286.672205][ T6406] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 286.916796][ T6407] trusted_key: encrypted_key: insufficient parameters specified [ 287.332103][ T6414] bridge0: port 3(erspan0) entered blocking state [ 287.339510][ T6414] bridge0: port 3(erspan0) entered disabled state [ 287.358391][ T6414] device erspan0 entered promiscuous mode [ 287.369049][ T6414] bridge0: port 3(erspan0) entered blocking state [ 287.375974][ T6414] bridge0: port 3(erspan0) entered forwarding state [ 288.345311][ T4375] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 288.640811][ T4375] usb 3-1: Using ep0 maxpacket: 16 [ 288.687030][ T4375] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 288.896104][ T4375] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 289.285563][ T4375] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 290.225952][ T4375] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 290.299776][ T4375] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 290.336174][ T4375] usb 3-1: config 1 interface 0 has no altsetting 0 [ 290.359963][ T4375] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 290.651615][ T4375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.812818][ T4375] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 291.163713][ T4375] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 291.193889][ T4375] usb 3-1: USB disconnect, device number 11 [ 294.724858][ T6473] overlayfs: missing 'lowerdir' [ 294.878717][ T6473] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 295.933845][ T6486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.942847][ T6486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.158501][ T6503] trusted_key: encrypted_key: insufficient parameters specified [ 297.444715][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.459504][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.477570][ T6527] overlayfs: missing 'lowerdir' [ 301.036785][ T6527] netlink: 'syz.2.520': attribute type 1 has an invalid length. [ 301.282064][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.315204][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.436333][ T6551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.447223][ T6551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.364867][ T6579] trusted_key: encrypted_key: insufficient parameters specified [ 305.801646][ T4961] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 306.000849][ T4961] usb 3-1: Using ep0 maxpacket: 32 [ 306.013335][ T4961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.068725][ T4961] usb 3-1: config 0 has no interfaces? [ 306.095181][ T4961] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 306.131350][ T4961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.165835][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.174246][ T4961] usb 3-1: Product: syz [ 306.174272][ T4961] usb 3-1: Manufacturer: syz [ 306.174286][ T4961] usb 3-1: SerialNumber: syz [ 306.207471][ T4961] usb 3-1: config 0 descriptor?? [ 306.270356][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.784074][ T6607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.793002][ T6607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.115873][ T4314] usb 3-1: USB disconnect, device number 12 [ 310.181692][ T6618] QAT: failed to copy from user cfg_data. [ 312.652469][ T6638] qfq: no options [ 313.124302][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.124518][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.217928][ T6651] __nla_validate_parse: 44 callbacks suppressed [ 314.217946][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 314.297714][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 314.401642][ T6657] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 314.410231][ T6657] overlayfs: overlapping lowerdir path [ 314.824779][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.869765][ T6651] bond1: (slave bond0): making interface the new active one [ 314.886492][ T6651] bond1: (slave bond0): Enslaving as an active interface with an up link [ 314.895701][ T6649] netlink: 'syz.1.557': attribute type 4 has an invalid length. [ 314.904086][ T6651] syz.1.557 (6651) used greatest stack depth: 19952 bytes left [ 314.912126][ T6649] netlink: 152 bytes leftover after parsing attributes in process `syz.1.557'. [ 314.932135][ T6649] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 317.169969][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.177196][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.848840][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.857594][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.812825][ T6688] qfq: no options [ 320.239230][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.248040][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.418323][ T6707] QAT: failed to copy from user cfg_data. [ 320.595785][ T6711] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 321.993134][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.041749][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.819422][ T6744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.828512][ T6744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.940405][ T6748] can0: slcan on ttyS3. [ 325.963210][ T6748] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 325.971251][ T6748] netlink: 'syz.3.582': attribute type 2 has an invalid length. [ 326.772752][ T6740] can0 (unregistered): slcan off ttyS3. [ 328.406235][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.418141][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.562920][ T6765] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 331.022086][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 332.858017][ T6788] netlink: 56 bytes leftover after parsing attributes in process `syz.1.592'. [ 335.571969][ T6814] xt_recent: Unsupported userspace flags (000000de) [ 337.211272][ T6823] smc: net device wlan0 applied user defined pnetid SYZ0 [ 337.542577][ T6831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.574994][ T6831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.526777][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.527012][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.441155][ T4375] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 341.473550][ T6877] syz.1.617 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 341.497916][ T6877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 341.900619][ T6882] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 342.118989][ T6882] overlayfs: failed to look up (tracing) for ino (-66) [ 342.276142][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.311322][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.474560][ T4375] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 342.484720][ T4375] usb 3-1: config 0 has no interface number 0 [ 342.503156][ T4375] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 342.517306][ T4375] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.554303][ T4375] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 342.584518][ T4375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.610771][ T4375] usb 3-1: Product: syz [ 342.621011][ T4375] usb 3-1: Manufacturer: syz [ 342.641724][ T4375] usb 3-1: SerialNumber: syz [ 342.674960][ T4375] usb 3-1: config 0 descriptor?? [ 342.682452][ T6871] raw-gadget.9 gadget.2: fail, usb_ep_enable returned -22 [ 342.697942][ T4375] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 342.728868][ T4375] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 343.098232][ T4375] usb 3-1: USB disconnect, device number 13 [ 343.136184][ T4375] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 343.157963][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 343.228854][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 343.352712][ T4375] cyberjack 3-1:0.69: device disconnected [ 343.517561][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 343.547429][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 343.578926][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 343.609934][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 343.631927][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 343.676723][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 343.688103][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 343.820103][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.833980][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.078684][ T6900] misc userio: No port type given on /dev/userio [ 346.554496][ T6920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.554640][ T6920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.687949][ T6919] device syzkaller0 entered promiscuous mode [ 350.813007][ T6930] __nla_validate_parse: 44 callbacks suppressed [ 350.813022][ T6930] netlink: 44 bytes leftover after parsing attributes in process `syz.4.633'. [ 350.848225][ T6930] bridge0: port 3(erspan0) entered disabled state [ 350.855271][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.862786][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.887702][ T6931] netlink: 44 bytes leftover after parsing attributes in process `syz.4.633'. [ 352.442881][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 352.459674][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 352.468934][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 352.480848][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 352.491383][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 352.543590][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 352.593592][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 352.649218][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 353.551891][ T6983] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 357.425684][ T7001] device syzkaller0 entered promiscuous mode [ 357.723722][ T7012] kvm: pic: non byte write [ 358.151613][ T7019] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 359.193243][ T7028] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 359.819315][ T7039] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 364.672703][ T7035] __nla_validate_parse: 46 callbacks suppressed [ 364.672900][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 364.792929][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 365.050844][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 365.059776][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 365.121318][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 365.140856][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 365.175769][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 365.196043][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 365.214220][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 365.225412][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 365.926178][ T7069] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 369.826582][ T7097] device syzkaller0 entered promiscuous mode [ 372.102258][ T7124] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 374.739258][ T7119] __nla_validate_parse: 44 callbacks suppressed [ 374.739295][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 374.780819][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 374.806151][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 374.824367][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 374.857177][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 374.970651][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 374.987356][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 374.997045][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 375.008900][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 375.715620][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 375.786038][ T7146] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 376.567105][ T7155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.620937][ T7155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.228336][ T7180] device syzkaller0 entered promiscuous mode [ 378.613381][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.620518][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.475922][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.513352][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.409577][ T7211] binder: 7210:7211 ioctl c0306201 200000000080 returned -14 [ 385.440225][ T7204] __nla_validate_parse: 42 callbacks suppressed [ 385.440240][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 385.458463][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 385.468781][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 385.479002][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 385.546833][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 385.593960][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 385.630257][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 385.646541][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 385.656802][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 385.675941][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 386.067113][ T7257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.168329][ T7259] binder: 7258:7259 ioctl c0306201 200000000080 returned -14 [ 386.174284][ T7257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.302288][ T7275] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 387.849536][ T7279] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 388.265411][ T7275] overlayfs: failed to look up (tracing) for ino (-66) [ 388.704101][ T7283] device syzkaller0 entered promiscuous mode [ 390.142184][ T7300] binder: 7299:7300 ioctl c0306201 200000000080 returned -14 [ 390.402432][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.453538][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.442458][ T7335] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 394.544874][ T7293] __nla_validate_parse: 42 callbacks suppressed [ 394.544891][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 394.566605][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 394.590838][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 394.636032][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 394.656386][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 394.700881][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 394.856086][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 394.876480][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 395.600748][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 395.624962][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 395.649124][ T7327] tipc: Started in network mode [ 395.654222][ T7327] tipc: Node identity 2, cluster identity 4711 [ 395.660885][ T7327] tipc: Node number set to 2 [ 395.871867][ T7353] binder: 7351:7353 ioctl c0306201 200000000080 returned -14 [ 395.969377][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.979721][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.013565][ T7358] qfq: no options [ 396.221214][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802760bc00: rx timeout, send abort [ 396.239232][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802760bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 397.302448][ T7375] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 397.752264][ T7375] overlayfs: failed to look up (tracing) for ino (-66) [ 400.505542][ T7399] device syzkaller0 entered promiscuous mode [ 400.554449][ T7400] __nla_validate_parse: 44 callbacks suppressed [ 400.554492][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 400.600991][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 400.611070][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 400.631479][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 400.652597][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 400.670208][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 400.686399][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 400.702957][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 400.721763][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 400.876399][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 401.108408][ T7412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.171106][ T7412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.527315][ T7440] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 407.444504][ T7454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.680854][ T7454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.053232][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.151105][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.675283][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.761247][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.151764][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.191200][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.265129][ T7488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.278658][ T7488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.873466][ T7498] device syzkaller0 entered promiscuous mode [ 414.319192][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.344362][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.330875][ T4312] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 416.523094][ T4312] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 416.534104][ T4312] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 416.544212][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.609552][ T4312] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 417.639075][ T7543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.648996][ T4312] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 417.666703][ T7543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.675065][ T4312] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 417.687062][ T4312] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 417.709776][ T4312] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 417.747920][ T4312] usb 3-1: USB disconnect, device number 14 [ 419.060793][ T4314] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 419.250921][ T4314] usb 3-1: Using ep0 maxpacket: 32 [ 419.260176][ T7566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.272764][ T7566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.291285][ T4314] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.299357][ T4314] usb 3-1: config 0 has no interface number 0 [ 419.348298][ T4314] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 419.371309][ T4314] usb 3-1: config 0 interface 1 has no altsetting 0 [ 419.381006][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.390312][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.447969][ T4314] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 419.930938][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054fa2800: rx timeout, send abort [ 419.939567][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054fa2800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 420.203569][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.516027][ T4314] usb 3-1: Product: syz [ 420.547546][ T4314] usb 3-1: Manufacturer: syz [ 420.566029][ T4314] usb 3-1: SerialNumber: syz [ 420.604791][ T4314] usb 3-1: config 0 descriptor?? [ 421.253693][ T7579] device syzkaller0 entered promiscuous mode [ 421.286952][ T4314] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 421.314416][ T4314] cx231xx 3-1:0.1: Not found matching IAD interface [ 421.352546][ T4314] usb 3-1: USB disconnect, device number 15 [ 421.530015][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.541043][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.403951][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056586000: rx timeout, send abort [ 425.412747][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056586000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 425.499542][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.517634][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.141040][ T7631] random: crng reseeded on system resumption [ 427.060791][ T27] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 427.202907][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.236607][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.320925][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 427.328589][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 427.358735][ T27] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 428.750737][ T27] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 428.761920][ T27] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 428.780761][ T27] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 428.821421][ T27] usb 3-1: config 1 interface 0 has no altsetting 0 [ 428.848744][ T27] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 428.873621][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.917815][ T27] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 429.172037][ T27] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 429.220813][ T27] usb 3-1: USB disconnect, device number 16 [ 430.336157][ T7654] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 430.930678][ T4312] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 430.977953][ T7663] device syzkaller0 entered promiscuous mode [ 431.122254][ T4312] usb 3-1: Using ep0 maxpacket: 16 [ 431.129731][ T4312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 431.171698][ T4312] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 431.195016][ T4312] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 431.209009][ T4312] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 431.219526][ T4312] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 431.229744][ T4312] usb 3-1: config 1 interface 0 has no altsetting 0 [ 431.236671][ T4312] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 431.246161][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.274922][ T4312] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 432.059910][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ba77c00: rx timeout, send abort [ 432.068559][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ba77c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 432.431060][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.458027][ T4312] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 432.468686][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.486123][ T4312] usb 3-1: USB disconnect, device number 17 [ 432.560373][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.570440][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.032039][ T7682] binder: 7681:7682 ioctl c0306201 200000000080 returned -14 [ 433.253907][ T7689] random: crng reseeded on system resumption [ 434.210744][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.219494][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.910942][ T4312] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 435.530651][ T4312] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 435.560798][ T4312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.571749][ T4312] usb 3-1: config 0 has no interface number 0 [ 435.578057][ T4312] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 435.589635][ T4312] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 435.629743][ T4312] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 435.640243][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.653672][ T4312] usb 3-1: Product: syz [ 435.658127][ T4312] usb 3-1: Manufacturer: syz [ 435.665975][ T4312] usb 3-1: SerialNumber: syz [ 435.678627][ T4312] usb 3-1: config 0 descriptor?? [ 435.687005][ T4312] cyberjack 3-1:0.69: required endpoints missing [ 435.891547][ T4312] usb 3-1: USB disconnect, device number 18 [ 437.744950][ T7716] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 439.434071][ T127] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 439.618807][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.642814][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.655552][ T7728] binder: 7727:7728 ioctl c0306201 200000000080 returned -14 [ 439.682961][ T7728] binder: BINDER_SET_CONTEXT_MGR already set [ 439.694980][ T127] usb 3-1: Using ep0 maxpacket: 16 [ 439.703039][ T127] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 439.725172][ T127] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 439.735278][ T7728] binder: 7727:7728 ioctl 4018620d 200000000040 returned -16 [ 439.757237][ T127] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 439.779765][ T127] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 439.790252][ T127] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 439.800439][ T127] usb 3-1: config 1 interface 0 has no altsetting 0 [ 439.807542][ T127] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 439.840923][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.892672][ T127] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 440.043064][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.049515][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.949879][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.958722][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.781566][ T127] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 441.890735][ T127] usb 3-1: USB disconnect, device number 19 [ 443.216875][ T7758] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 443.223908][ T7758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 443.254426][ T7758] vhci_hcd vhci_hcd.0: Device attached [ 443.280887][ T7763] device syzkaller0 entered promiscuous mode [ 443.287491][ T7766] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 443.294213][ T7766] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 443.311996][ T7766] vhci_hcd vhci_hcd.0: Device attached [ 443.327627][ T7758] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 443.334292][ T7758] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 443.361679][ T7758] vhci_hcd vhci_hcd.0: Device attached [ 443.387149][ T7773] MPTCP: kernel_bind error, err=-98 [ 443.388143][ T7766] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(21) [ 443.400223][ T7766] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 443.424458][ T7766] vhci_hcd vhci_hcd.0: Device attached [ 443.440912][ T7758] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 443.447539][ T7758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 443.489457][ T7766] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 443.505136][ T7766] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 443.520768][ T127] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 443.530479][ T7758] vhci_hcd vhci_hcd.0: Device attached [ 443.554716][ T7766] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 443.698265][ T7776] vhci_hcd: connection closed [ 443.698501][ T7761] vhci_hcd: connection reset by peer [ 443.700075][ T7774] vhci_hcd: connection closed [ 443.709057][ T7771] vhci_hcd: connection closed [ 443.713896][ T7767] vhci_hcd: connection closed [ 443.719146][ T4337] vhci_hcd: stop threads [ 443.773644][ T4337] vhci_hcd: release socket [ 443.800947][ T4337] vhci_hcd: disconnect device [ 443.825808][ T4337] vhci_hcd: stop threads [ 443.855956][ T4337] vhci_hcd: release socket [ 443.866272][ T4337] vhci_hcd: disconnect device [ 443.881805][ T4337] vhci_hcd: stop threads [ 443.890529][ T4337] vhci_hcd: release socket [ 443.915100][ T4337] vhci_hcd: disconnect device [ 443.927206][ T4337] vhci_hcd: stop threads [ 443.936511][ T4337] vhci_hcd: release socket [ 443.947043][ T4337] vhci_hcd: disconnect device [ 443.962625][ T4337] vhci_hcd: stop threads [ 443.984057][ T4337] vhci_hcd: release socket [ 444.006452][ T4337] vhci_hcd: disconnect device [ 444.671260][ T7789] binder: 7788:7789 ioctl c0306201 200000000080 returned -14 [ 444.707581][ T7789] binder: BINDER_SET_CONTEXT_MGR already set [ 444.726632][ T7789] binder: 7788:7789 ioctl 4018620d 200000000040 returned -16 [ 446.163270][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.175882][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.681816][ T127] vhci_hcd: vhci_device speed not set [ 448.866389][ T7820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.875330][ T7820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.755652][ T7826] device syzkaller0 entered promiscuous mode [ 453.959531][ T7854] random: crng reseeded on system resumption [ 457.683535][ T7874] device syzkaller0 entered promiscuous mode [ 458.900709][ T4920] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 459.090824][ T4920] usb 3-1: Using ep0 maxpacket: 16 [ 459.102778][ T4920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 459.113176][ T4920] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 459.126653][ T4920] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 459.139477][ T4920] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 459.152551][ T4920] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 459.165685][ T4920] usb 3-1: config 1 interface 0 has no altsetting 0 [ 459.173041][ T4920] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 459.185571][ T4920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.208558][ T7897] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 459.259859][ T4920] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 459.445631][ T4920] scsi host1: usb-storage 3-1:1.0 [ 460.940225][ T30] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 461.715885][ T4312] usb 3-1: USB disconnect, device number 20 [ 461.731948][ T30] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 461.801395][ T11] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 461.815880][ T11] sd 1:0:0:0: [sdb] Sense not available. [ 461.822309][ T11] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 461.829949][ T11] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 461.836342][ T11] sd 1:0:0:0: [sdb] Write Protect is off [ 461.843123][ T11] sd 1:0:0:0: [sdb] Asking for cache data failed [ 461.849516][ T11] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 461.876242][ T11] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 462.501805][ T7921] udevd[7921]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 462.800142][ T7544] udevd[7544]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 466.090805][ T4323] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 466.302448][ T4323] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 466.332428][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.359064][ T4323] usb 3-1: config 0 descriptor?? [ 466.382206][ T4323] cp210x 3-1:0.0: cp210x converter detected [ 466.849287][ T4323] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 466.872057][ T4323] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 466.958973][ T4323] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 466.968028][ T4323] usb 3-1: cp210x converter now attached to ttyUSB0 [ 467.028875][ T4323] usb 3-1: USB disconnect, device number 21 [ 467.048613][ T4323] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 467.115007][ T7972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.121114][ T4323] cp210x 3-1:0.0: device disconnected [ 467.129114][ T7972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.158002][ T7974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.167020][ T7974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.187326][ T7983] overlayfs: missing 'lowerdir' [ 469.247602][ T7983] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 470.498008][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.557770][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.767866][ T7995] device syzkaller0 entered promiscuous mode [ 474.467566][ T8025] overlayfs: missing 'lowerdir' [ 474.499629][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.508615][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.054150][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.080958][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.108268][ T8042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.152717][ T8042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.959950][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.968674][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.977832][ T8065] xt_recent: Unsupported userspace flags (000000de) [ 481.585840][ T8079] overlayfs: missing 'lowerdir' [ 481.638850][ T8080] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 481.705068][ T8082] device syzkaller0 entered promiscuous mode [ 482.947407][ T8095] random: crng reseeded on system resumption [ 484.593518][ T8110] xt_recent: Unsupported userspace flags (000000de) [ 486.863683][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.872845][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.120975][ T8129] overlayfs: missing 'lowerdir' [ 489.130568][ T8129] netlink: 'syz.4.934': attribute type 1 has an invalid length. [ 490.930697][ T4269] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 490.944669][ T8149] xt_recent: Unsupported userspace flags (000000de) [ 491.130665][ T4269] usb 3-1: Using ep0 maxpacket: 16 [ 491.138566][ T4269] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 491.167890][ T4269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.186097][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.204801][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.218255][ T4269] usb 3-1: config 0 descriptor?? [ 491.676556][ T4269] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 492.054134][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.063695][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.665515][ T4269] gspca_sonixj: reg_r err -32 [ 493.670361][ T4269] sonixj: probe of 3-1:0.0 failed with error -32 [ 494.488639][ T8172] device syzkaller0 entered promiscuous mode [ 494.772879][ T4375] usb 3-1: USB disconnect, device number 22 [ 495.108658][ T8186] overlayfs: missing 'lowerdir' [ 495.117829][ T8186] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 498.551170][ T4269] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 499.100844][ T4269] usb 3-1: Using ep0 maxpacket: 16 [ 499.123747][ T4269] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 499.220782][ T4269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.245608][ T4269] usb 3-1: config 0 descriptor?? [ 499.314100][ T4269] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 499.725803][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.734791][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.543336][ T4269] gspca_sonixj: reg_r err -32 [ 500.564997][ T4269] sonixj: probe of 3-1:0.0 failed with error -32 [ 501.068039][ T8236] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 501.491672][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.512731][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.753560][ T4314] usb 3-1: USB disconnect, device number 23 [ 501.904002][ T8240] overlayfs: missing 'lowerdir' [ 506.620871][ T8271] fuse: Bad value for 'fd' [ 507.602417][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.675577][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.740359][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.770893][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.254989][ T8302] device syzkaller0 entered promiscuous mode [ 515.559053][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880568d0800: rx timeout, send abort [ 515.568220][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880568d0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 518.359470][ T8339] __nla_validate_parse: 44 callbacks suppressed [ 518.360428][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 518.474640][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 518.555619][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 518.617110][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 518.626970][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 518.636871][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 518.648190][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 518.658648][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 518.677874][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 518.697749][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 518.731890][ T8344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.801317][ T8344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.969684][ T8348] xt_recent: Unsupported userspace flags (000000de) [ 521.857883][ T8364] device syzkaller0 entered promiscuous mode [ 526.353985][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.403065][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.065655][ T8395] xt_recent: Unsupported userspace flags (000000de) [ 529.285275][ T8405] __nla_validate_parse: 45 callbacks suppressed [ 529.285317][ T8405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1009'. [ 530.110237][ T8375] netlink: 'syz.3.1000': attribute type 13 has an invalid length. [ 530.123750][ T8375] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 530.144020][ T8375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 530.167640][ T8375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 530.278831][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 530.310226][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 530.319870][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 530.335807][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 530.347373][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 530.357776][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 530.367470][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 530.378387][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 530.388686][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 533.435336][ T8437] xt_recent: Unsupported userspace flags (000000de) [ 534.599476][ T8449] __nla_validate_parse: 45 callbacks suppressed [ 534.600068][ T8449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1021'. [ 535.065938][ T8452] binder: 8451:8452 ioctl 4018620d 0 returned -22 [ 535.091194][ T8452] binder: 8451:8452 ioctl c0306201 200000000080 returned -14 [ 535.214226][ T8454] device syzkaller0 entered promiscuous mode [ 536.194451][ T8472] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 537.068514][ T8478] xt_recent: Unsupported userspace flags (000000de) [ 538.678788][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023ec5800: rx timeout, send abort [ 538.687229][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023ec5800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 539.012270][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 539.030805][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 539.050786][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 539.060081][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 539.093670][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 539.134984][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 539.223134][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 539.426734][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 539.480811][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 539.670629][ T8503] __nla_validate_parse: 45 callbacks suppressed [ 539.670646][ T8503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1035'. [ 540.334123][ T8507] binder: 8506:8507 ioctl 4018620d 0 returned -22 [ 540.400861][ T8507] binder: 8506:8507 ioctl c0306201 200000000080 returned -14 [ 540.649791][ T8516] xt_recent: Unsupported userspace flags (000000de) [ 544.856436][ T8531] device syzkaller0 entered promiscuous mode [ 544.941144][ T8533] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 545.838608][ T8539] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 546.045185][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.101614][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.263262][ T8547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1047'. [ 546.789585][ T8541] device syzkaller0 entered promiscuous mode [ 546.839336][ T8552] binder: 8551:8552 ioctl 4018620d 0 returned -22 [ 546.881981][ T8552] binder: 8551:8552 ioctl c0306201 200000000080 returned -14 [ 548.769434][ T8580] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 548.872461][ T8581] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 549.700446][ T8585] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 550.960070][ T8607] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 553.485423][ T8614] binder: BINDER_SET_CONTEXT_MGR already set [ 553.516704][ T8616] xt_recent: Unsupported userspace flags (000000de) [ 553.534835][ T8614] binder: 8612:8614 ioctl 4018620d 200000000040 returned -16 [ 553.735483][ T8623] random: crng reseeded on system resumption [ 554.675182][ T8609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.379155][ T8647] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 557.748832][ T8653] device syzkaller0 entered promiscuous mode [ 557.798760][ T8657] device syzkaller0 entered promiscuous mode [ 557.980494][ T8666] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 560.908946][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 560.928993][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 560.958965][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 560.986407][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 561.077653][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 561.131877][ T8674] random: crng reseeded on system resumption [ 561.640919][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 561.709797][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 561.785205][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 562.206386][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 562.217256][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 562.922819][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.929716][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.946067][ T8692] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 563.278240][ T8695] xt_recent: Unsupported userspace flags (000000de) [ 566.364082][ T8717] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 568.655608][ T8736] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 568.684754][ T8737] __nla_validate_parse: 44 callbacks suppressed [ 568.684790][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 568.710776][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 568.719958][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 568.769509][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 568.796370][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 568.811009][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 568.930374][ T8742] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 569.680827][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 569.690849][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 569.700948][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 569.714363][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 569.809088][ T8723] netlink: 'syz.1.1089': attribute type 13 has an invalid length. [ 570.340694][ T4315] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 571.221849][ T4315] usb 3-1: Using ep0 maxpacket: 32 [ 571.629424][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 571.646899][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 571.776324][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 572.166960][ T4315] usb 3-1: device descriptor read/all, error -71 [ 572.845702][ T4315] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 572.935892][ T8773] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 573.388854][ T4315] usb 3-1: Using ep0 maxpacket: 32 [ 574.162051][ T4315] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 574.170176][ T4315] usb 3-1: config 0 has no interface number 0 [ 574.214775][ T4315] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 574.323448][ T4315] usb 3-1: config 0 interface 1 has no altsetting 0 [ 574.365284][ T4315] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 574.491135][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.567039][ T4315] usb 3-1: Product: syz [ 574.596309][ T4315] usb 3-1: Manufacturer: syz [ 574.615940][ T4315] usb 3-1: SerialNumber: syz [ 575.315737][ T4315] usb 3-1: config 0 descriptor?? [ 575.603359][ T4315] usb 3-1: can't set config #0, error -71 [ 575.847531][ T4315] usb 3-1: USB disconnect, device number 25 [ 577.567091][ T8805] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 579.310854][ T8815] __nla_validate_parse: 44 callbacks suppressed [ 579.310869][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 579.330761][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 579.331543][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 579.331578][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 579.331610][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 579.331648][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 579.331677][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 579.331705][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 579.331735][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 579.331764][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 579.378725][ T8827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.378940][ T8827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.424842][ T8825] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 583.281925][ T8843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.416398][ T8843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.440759][ T8844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.451564][ T8844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.811288][ T8864] netlink: 'syz.0.1122': attribute type 13 has an invalid length. [ 586.009382][ T8864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 586.039780][ T8864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 586.051497][ T8864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 586.711576][ T8879] __nla_validate_parse: 42 callbacks suppressed [ 586.711592][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 586.730271][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 586.740566][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 586.754566][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 586.764428][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 586.774670][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 586.785963][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 586.797599][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 586.808119][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 586.820699][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 589.352243][ T8907] device syzkaller0 entered promiscuous mode [ 589.517332][ T8914] random: crng reseeded on system resumption [ 593.081530][ T8960] random: crng reseeded on system resumption [ 594.082066][ T8956] netlink: 'syz.1.1147': attribute type 13 has an invalid length. [ 594.264366][ T8956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 594.392920][ T8956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 594.479560][ T8956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 595.079775][ T8963] device syzkaller0 entered promiscuous mode [ 597.023094][ T8987] usb usb7: usbfs: process 8987 (syz.2.1158) did not claim interface 0 before use [ 597.818638][ T14] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 598.000666][ T14] usb 3-1: device descriptor read/64, error -71 [ 598.360877][ T14] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 599.192399][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b6c5400: rx timeout, send abort [ 599.201200][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801b6c5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 599.370808][ T14] usb 3-1: device descriptor read/64, error -71 [ 599.491975][ T14] usb usb3-port1: attempt power cycle [ 599.921365][ T14] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 600.448491][ T14] usb 3-1: device descriptor read/8, error -71 [ 600.534876][ T9008] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 602.073296][ T9028] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 602.081515][ T9028] netlink: 'syz.1.1168': attribute type 2 has an invalid length. [ 603.017676][ T9034] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 603.206901][ T9033] __nla_validate_parse: 44 callbacks suppressed [ 603.206916][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 604.228429][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 604.251772][ T9042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.260416][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 604.431632][ T9042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.180773][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 605.366265][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 605.376323][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 605.385628][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 605.396478][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 605.406196][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 606.141562][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 606.324436][ T9065] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 607.521232][ T9075] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 608.017787][ T9078] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 608.743536][ T9090] __nla_validate_parse: 44 callbacks suppressed [ 608.743689][ T9090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1187'. [ 609.545322][ T9095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.591997][ T9095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.070720][ T4269] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 612.233553][ T4269] usb 3-1: device descriptor read/64, error -71 [ 612.353936][ T9125] random: crng reseeded on system resumption [ 613.401830][ T4269] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 613.582207][ T4269] usb 3-1: device descriptor read/64, error -71 [ 613.711072][ T4269] usb usb3-port1: attempt power cycle [ 614.130728][ T4269] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 614.212730][ T9133] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 614.409434][ T4269] usb 3-1: device descriptor read/8, error -71 [ 614.846039][ T9133] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 615.509309][ T9154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.340631][ T9158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1203'. [ 616.400948][ T9154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.712164][ T9147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.828184][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 616.843585][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 616.875406][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 616.886144][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 616.921538][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 616.932507][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 616.971071][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 616.981464][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 616.995116][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 618.960887][ T4317] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 619.120802][ T4317] usb 3-1: device descriptor read/64, error -71 [ 619.400824][ T4317] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 619.570809][ T4317] usb 3-1: device descriptor read/64, error -71 [ 619.638545][ T9191] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 619.690918][ T4317] usb usb3-port1: attempt power cycle [ 620.100655][ T4317] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 620.141130][ T4317] usb 3-1: device descriptor read/8, error -71 [ 620.420670][ T4317] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 621.232617][ T4317] usb 3-1: device descriptor read/8, error -71 [ 621.407426][ T4317] usb usb3-port1: unable to enumerate USB device [ 621.524365][ T9204] __nla_validate_parse: 43 callbacks suppressed [ 621.524445][ T9204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1217'. [ 622.716512][ T9207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.757610][ T9215] MPTCP: kernel_bind error, err=-98 [ 624.362656][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.376019][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.293482][ T9239] usb usb7: usbfs: process 9239 (syz.1.1226) did not claim interface 0 before use [ 627.384596][ T9252] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 628.070746][ T9255] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 631.012037][ T9262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.469085][ T9280] trusted_key: encrypted_key: insufficient parameters specified [ 632.558774][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.704293][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.949913][ T9294] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 633.126647][ T9300] MPTCP: kernel_bind error, err=-98 [ 638.239499][ T9333] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 638.454544][ T9333] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 638.741814][ T7] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 638.935529][ T7] usb 3-1: device descriptor read/64, error -71 [ 639.420867][ T7] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 639.613724][ T7] usb 3-1: device descriptor read/64, error -71 [ 639.751668][ T7] usb usb3-port1: attempt power cycle [ 639.945943][ T9357] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 640.160760][ T7] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 640.191515][ T7] usb 3-1: device descriptor read/8, error -71 [ 640.470826][ T7] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 640.529125][ T7] usb 3-1: device descriptor read/8, error -71 [ 640.615865][ T9359] usb usb7: usbfs: process 9359 (syz.1.1265) did not claim interface 0 before use [ 640.673380][ T7] usb usb3-port1: unable to enumerate USB device [ 643.733329][ T9378] usb usb7: usbfs: process 9378 (syz.2.1271) did not claim interface 0 before use [ 644.330801][ T9379] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 645.126789][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1275'. [ 645.849112][ T9400] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 647.689216][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023a91800: rx timeout, send abort [ 647.875740][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023a91800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 648.110761][ T4269] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 648.330886][ T4269] usb 3-1: device descriptor read/64, error -71 [ 650.052755][ T4269] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 650.480908][ T4269] usb 3-1: device descriptor read/64, error -71 [ 650.601347][ T4269] usb usb3-port1: attempt power cycle [ 651.411322][ T9439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1290'. [ 651.948529][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.041914][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.132769][ T9479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1304'. [ 657.550108][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.575370][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.842501][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024202800: rx timeout, send abort [ 657.857935][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888024202800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 660.992483][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1316'. [ 664.560781][ T9539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.599670][ T9539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.492283][ T9552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1328'. [ 669.330847][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054b4e400: rx timeout, send abort [ 669.340281][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888054b4e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 671.985242][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.094340][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.162194][ T9607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1345'. [ 673.807227][ T9620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.822425][ T9620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.111366][ T9631] usb usb7: usbfs: process 9631 (syz.0.1349) did not claim interface 0 before use [ 676.135654][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.145802][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.030383][ T9638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.878101][ T9656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.990711][ T9656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.003834][ T9657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1358'. [ 679.646434][ T9666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.670744][ T9666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.685705][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023ff3800: rx timeout, send abort [ 679.694256][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888023ff3800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 680.969500][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805709c400: rx timeout, send abort [ 680.978333][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805709c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 683.107117][ T9683] usb usb7: usbfs: process 9683 (syz.3.1366) did not claim interface 0 before use [ 683.135650][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.146626][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.900046][ T9690] random: crng reseeded on system resumption [ 685.241717][ T9695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1371'. [ 685.812335][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.819368][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.051333][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ba99800: rx timeout, send abort [ 690.060221][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ba99800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 690.720927][ T9725] random: crng reseeded on system resumption [ 691.656028][ T9721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.244887][ T9730] usb usb7: usbfs: process 9730 (syz.0.1382) did not claim interface 0 before use [ 692.276158][ T9730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.288489][ T9730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.897603][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1385'. [ 694.363763][ T9745] netlink: 'syz.0.1384': attribute type 13 has an invalid length. [ 694.412088][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880573e1800: rx timeout, send abort [ 694.420736][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880573e1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 694.474629][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 695.017407][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 695.027515][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 700.580525][ T9792] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 702.461665][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055863000: rx timeout, send abort [ 702.470139][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055863000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 704.628831][ T9822] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 705.969802][ T9828] netlink: 'syz.3.1404': attribute type 13 has an invalid length. [ 706.045812][ T9828] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 706.103424][ T9828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 706.141800][ T9828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 706.619721][ T9842] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 707.684190][ T9847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.730925][ T9847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.188255][ T9871] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 712.922844][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.923082][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.049767][ T9918] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 720.177008][ T127] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 720.370681][ T127] usb 3-1: Using ep0 maxpacket: 16 [ 720.380519][ T127] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.402236][ T127] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 720.423262][ T127] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 720.439672][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.486576][ T127] usb 3-1: config 0 descriptor?? [ 726.149140][ T27] usb 3-1: USB disconnect, device number 45 [ 726.734771][ T9975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.575896][ T9983] binder: 9981:9983 ioctl c0306201 200000000080 returned -14 [ 733.886541][T10026] binder: 10025:10026 ioctl c0306201 200000000080 returned -14 [ 735.263762][T10040] MPTCP: kernel_bind error, err=-98 [ 737.402734][T10055] random: crng reseeded on system resumption [ 737.915069][T10052] netlink: 'syz.3.1466': attribute type 13 has an invalid length. [ 738.067624][T10052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 738.182040][T10052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 738.270113][T10052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 741.157266][T10076] binder: 10075:10076 ioctl c0306201 200000000080 returned -14 [ 743.091366][T10091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.127395][T10091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.431918][T10094] usb usb7: usbfs: process 10094 (syz.3.1477) did not claim interface 0 before use [ 743.620069][T10096] MPTCP: kernel_bind error, err=-98 [ 743.670503][T10093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.692753][T10093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.741286][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.747827][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.393266][T10130] netlink: 'syz.4.1488': attribute type 13 has an invalid length. [ 749.876199][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 750.199961][T10137] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 750.842005][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 751.062102][T10140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.100966][T10140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.151570][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 753.470667][ T14] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 753.634366][ T14] usb 3-1: device descriptor read/64, error -71 [ 754.036146][T10147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.120675][ T14] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 754.291197][ T14] usb 3-1: device descriptor read/64, error -71 [ 754.521303][ T14] usb usb3-port1: attempt power cycle [ 757.599535][T10175] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 759.146971][T10194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.159433][T10194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.570538][T10203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.861543][T10211] xt_recent: Unsupported userspace flags (000000de) [ 763.863798][T10223] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 773.569614][T10296] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 773.925420][T10298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.301998][T10298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.038175][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.059085][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.338051][T10339] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 780.537659][T10351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.550959][T10351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.623066][T10346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.357917][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805522fc00: rx timeout, send abort [ 786.390808][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805522fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 787.693316][T10398] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 791.221211][T10418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.574903][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027b3bc00: rx timeout, send abort [ 793.082224][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027b3bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 793.997576][T10446] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 797.321073][T10464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.383515][T10464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.006264][T10473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.932606][T10494] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 804.374666][T10519] overlayfs: missing 'lowerdir' [ 804.557373][T10519] netlink: 'syz.4.1590': attribute type 1 has an invalid length. [ 805.027079][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055161c00: rx timeout, send abort [ 805.363320][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055161c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 807.132274][T10530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.204809][T10529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.215998][T10530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.817054][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.823663][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.786852][T10575] overlayfs: missing 'lowerdir' [ 813.230416][T10579] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 814.675887][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.396241][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.405060][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.078042][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026e29000: rx timeout, send abort [ 818.086861][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888026e29000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 820.224120][T10629] overlayfs: missing 'lowerdir' [ 820.955345][T10629] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 822.867770][T10652] usb usb7: usbfs: process 10652 (syz.1.1625) did not claim interface 0 before use [ 822.880458][T10652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.889120][T10652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.456137][T10657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.466484][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802412e400: rx timeout, send abort [ 824.475178][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802412e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 827.821760][T10685] netlink: 'syz.4.1633': attribute type 1 has an invalid length. [ 827.859814][T10685] netlink: 'syz.4.1633': attribute type 2 has an invalid length. [ 829.169631][T10689] netlink: 'syz.3.1634': attribute type 1 has an invalid length. [ 829.391141][T10689] vivid-007: kernel_thread() failed [ 832.116363][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572c1800: rx timeout, send abort [ 832.125851][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880572c1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 832.555521][T10724] overlayfs: unrecognized mount option "/" or missing value [ 833.550880][T10731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.753178][T10754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1651'. [ 838.878617][T10771] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 838.894272][T10771] netlink: 'syz.4.1654': attribute type 2 has an invalid length. [ 839.084830][T10775] overlayfs: unrecognized mount option "/" or missing value [ 839.545677][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e359c00: rx timeout, send abort [ 839.554712][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e359c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 843.486962][T10807] trusted_key: encrypted_key: insufficient parameters specified [ 844.646665][T10813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.760129][T10817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1665'. [ 844.918102][T10813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.010670][T10829] overlayfs: unrecognized mount option "/" or missing value [ 847.161217][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803032d400: rx timeout, send abort [ 847.722968][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803032d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 850.766147][T10864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1676'. [ 851.746705][T10875] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 852.044364][T10875] netlink: 'syz.2.1678': attribute type 2 has an invalid length. [ 852.789442][T10886] trusted_key: encrypted_key: insufficient parameters specified [ 853.372616][T10893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.408100][T10893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.693243][T10908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1688'. [ 857.770118][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d828800: rx timeout, send abort [ 857.778774][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d828800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 858.090703][ T4340] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 858.190884][T10943] netlink: 'syz.0.1698': attribute type 1 has an invalid length. [ 858.212707][T10943] netlink: 'syz.0.1698': attribute type 2 has an invalid length. [ 858.282568][ T4340] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 858.326437][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.432779][ T4340] usb 3-1: config 0 descriptor?? [ 858.518049][ T4340] cp210x 3-1:0.0: cp210x converter detected [ 858.669374][ T4340] usb 3-1: cp210x converter now attached to ttyUSB0 [ 860.887405][ T4340] usb 3-1: USB disconnect, device number 49 [ 860.924716][ T4340] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 860.975332][ T4340] cp210x 3-1:0.0: device disconnected [ 861.341855][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1704'. [ 861.808972][T10965] trusted_key: encrypted_key: insufficient parameters specified [ 868.276800][T11011] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 870.133774][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.146584][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.488154][T11020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1717'. [ 870.594307][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.603170][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.444284][T11029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.486959][T11029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.662843][T11032] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 871.671023][T11032] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 871.726830][T11034] usb usb7: usbfs: process 11034 (syz.0.1721) did not claim interface 0 before use [ 871.738563][T11034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.747495][T11034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.629479][T11047] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 874.073026][T11050] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 876.197221][T11058] trusted_key: encrypted_key: insufficient parameters specified [ 876.529291][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1729'. [ 877.659371][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.821008][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.850845][T10846] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 879.101371][T11092] netlink: 'syz.1.1736': attribute type 1 has an invalid length. [ 879.189719][T10846] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 879.227685][T10846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.251749][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054f78c00: rx timeout, send abort [ 879.260402][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054f78c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 879.581805][T10846] usb 3-1: config 0 descriptor?? [ 879.615418][T10846] cp210x 3-1:0.0: cp210x converter detected [ 879.818282][T10846] usb 3-1: cp210x converter now attached to ttyUSB0 [ 880.049325][T11096] device syzkaller0 entered promiscuous mode [ 880.270372][T11100] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 882.001230][ T127] usb 3-1: USB disconnect, device number 50 [ 882.024770][ T127] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 882.565374][ T127] cp210x 3-1:0.0: device disconnected [ 883.212144][T11121] MPTCP: kernel_bind error, err=-98 [ 883.300811][T11130] trusted_key: encrypted_key: insufficient parameters specified [ 883.384231][T11131] netlink: 'syz.0.1745': attribute type 13 has an invalid length. [ 883.531455][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 883.624098][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 883.646841][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 884.712486][T11141] netlink: 'syz.1.1747': attribute type 1 has an invalid length. [ 885.649019][T11148] device syzkaller0 entered promiscuous mode [ 886.541949][T11150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.615539][T11156] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 887.320948][T11162] usb usb7: usbfs: process 11162 (syz.2.1753) did not claim interface 0 before use [ 887.961822][T10846] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 888.141041][T10846] usb 3-1: device descriptor read/64, error -71 [ 889.120848][T10846] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 889.165222][T11180] device syzkaller0 entered promiscuous mode [ 889.300727][T10846] usb 3-1: device descriptor read/64, error -71 [ 889.432252][T10846] usb usb3-port1: attempt power cycle [ 889.537942][T11184] netlink: 'syz.3.1761': attribute type 13 has an invalid length. [ 889.562331][T11184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 889.586706][T11184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 889.601400][T11184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 889.940890][T10846] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 890.002981][T10846] usb 3-1: device descriptor read/8, error -71 [ 890.321675][T10846] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 890.651353][T10846] usb 3-1: device not accepting address 54, error -71 [ 890.727751][T10846] usb usb3-port1: unable to enumerate USB device [ 891.099102][T11203] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 891.723700][T11201] trusted_key: encrypted_key: insufficient parameters specified [ 892.349412][T11206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.259763][T11227] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 894.267578][T11227] netlink: 'syz.0.1772': attribute type 2 has an invalid length. [ 894.740247][T11236] usb usb7: usbfs: process 11236 (syz.3.1774) did not claim interface 0 before use [ 894.850434][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.859816][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.974376][T11242] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 895.492109][T11244] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 896.073066][T11256] usb usb7: usbfs: process 11256 (syz.4.1782) did not claim interface 0 before use [ 896.084419][T11256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.092993][T11256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.706218][T11264] netlink: 'syz.1.1781': attribute type 13 has an invalid length. [ 896.795823][T11264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 896.835866][T11264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 896.868632][T11264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 897.267570][T11271] trusted_key: encrypted_key: insufficient parameters specified [ 897.385085][T11275] netlink: 'syz.0.1786': attribute type 1 has an invalid length. [ 897.393214][T11275] netlink: 'syz.0.1786': attribute type 2 has an invalid length. [ 898.599682][T11296] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 899.807192][T11294] usb usb7: usbfs: process 11294 (syz.1.1792) did not claim interface 0 before use [ 899.820201][T11294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.829426][T11294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.003038][T11307] MPTCP: kernel_bind error, err=-98 [ 901.064893][T11312] usb usb7: usbfs: process 11312 (syz.1.1797) did not claim interface 0 before use [ 901.082975][T11312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.092032][T11312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.213149][T11317] netlink: 'syz.3.1798': attribute type 1 has an invalid length. [ 901.256309][T11317] netlink: 'syz.3.1798': attribute type 2 has an invalid length. [ 902.372268][T11330] netlink: 'syz.2.1802': attribute type 13 has an invalid length. [ 902.668148][T11330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 903.066990][T11330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 903.088790][T11330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 903.239791][T11350] usb usb7: usbfs: process 11350 (syz.4.1808) did not claim interface 0 before use [ 903.370126][T11350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.679148][T11350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.983887][T11356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.035209][T11356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.800988][T11373] netlink: 'syz.3.1815': attribute type 1 has an invalid length. [ 905.808989][T11373] netlink: 'syz.3.1815': attribute type 2 has an invalid length. [ 908.430405][T11397] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 908.970740][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.990338][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.310541][T11402] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 914.416593][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.545841][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.320105][T11449] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 916.683383][T11457] usb usb7: usbfs: process 11457 (syz.2.1839) did not claim interface 0 before use [ 917.624410][ T4315] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 917.727795][T11463] netlink: 'syz.0.1828': attribute type 1 has an invalid length. [ 917.736027][T11463] netlink: 'syz.0.1828': attribute type 2 has an invalid length. [ 917.810745][ T4315] usb 3-1: device descriptor read/64, error -71 [ 918.096743][ T4315] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 918.603514][ T4315] usb 3-1: device descriptor read/64, error -71 [ 918.901348][ T4315] usb usb3-port1: attempt power cycle [ 920.141277][ T4315] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 920.384156][T11481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.758791][ T4315] usb 3-1: device not accepting address 57, error -71 [ 922.458376][T11501] trusted_key: encrypted_key: insufficient parameters specified [ 922.640738][ T4315] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 923.066203][T11505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.076390][T11505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.235068][ T4315] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 923.265186][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.303092][ T4315] usb 3-1: config 0 descriptor?? [ 923.329070][ T4315] cp210x 3-1:0.0: cp210x converter detected [ 923.502015][T11510] device syzkaller0 entered promiscuous mode [ 923.524644][ T4315] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 923.539282][ T4315] cp210x 3-1:0.0: querying part number failed [ 923.563780][ T4315] usb 3-1: cp210x converter now attached to ttyUSB0 [ 923.615055][T11510] ------------[ cut here ]------------ [ 923.621210][T11510] WARNING: CPU: 1 PID: 11510 at include/linux/skbuff.h:2876 em_cmp_match+0x56a/0x7b0 [ 923.631216][T11510] Modules linked in: [ 923.635175][T11510] CPU: 1 PID: 11510 Comm: syz.0.1852 Not tainted syzkaller #0 [ 923.642797][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.653042][T11510] RIP: 0010:em_cmp_match+0x56a/0x7b0 [ 923.658809][T11510] Code: e8 3b c3 1a f9 39 dd 0f 94 c0 e9 40 fe ff ff e8 cc c1 1a f9 e9 34 fe ff ff e8 c2 c1 1a f9 0f 0b e9 97 fc ff ff e8 b6 c1 1a f9 <0f> 0b e9 79 fb ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c e5 fa ff ff [ 923.679085][T11510] RSP: 0018:ffffc90006167118 EFLAGS: 00010283 [ 923.685441][T11510] RAX: ffffffff8867b0fa RBX: ffff88807cab9a2a RCX: 0000000000080000 [ 923.693618][T11510] RDX: ffffc90005519000 RSI: 00000000000003d9 RDI: 00000000000003da [ 923.701836][T11510] RBP: 000000000000ffff R08: ffff888052fd1dc0 R09: 0000000000000003 [ 923.709979][T11510] R10: 0000000000000002 R11: 0000000000000002 R12: 1ffff1100f957345 [ 923.718213][T11510] R13: 1ffff1100fb4e3a6 R14: ffff88807da71c80 R15: ffff88807da71d36 [ 923.726304][T11510] FS: 00007f6ad98926c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 923.735327][T11510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 923.742386][T11510] CR2: 00007f6ad9870ff8 CR3: 000000002ad41000 CR4: 00000000003506e0 [ 923.750449][T11510] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 923.758584][T11510] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 923.766807][T11510] Call Trace: [ 923.770172][T11510] [ 923.773438][T11510] __tcf_em_tree_match+0x1cb/0x7a0 [ 923.778619][T11510] ? tcf_em_tree_dump+0x900/0x900 [ 923.783752][T11510] ? rcu_read_lock_held+0x40/0x40 [ 923.788909][T11510] ? __lock_acquire+0x12f4/0x7d10 [ 923.794089][T11510] basic_classify+0x111/0x2c0 [ 923.798813][T11510] tcf_classify+0x331/0xbf0 [ 923.803418][T11510] multiq_enqueue+0xfb/0x4b0 [ 923.808056][T11510] ? sch_tree_unlock+0x1b0/0x1b0 [ 923.813048][T11510] ? do_raw_spin_lock+0x128/0x2f0 [ 923.818107][T11510] ? __rwlock_init+0x140/0x140 [ 923.822928][T11510] dev_qdisc_enqueue+0x4c/0x2b0 [ 923.827882][T11510] __dev_queue_xmit+0xfdc/0x37c0 [ 923.832908][T11510] ? __dev_queue_xmit+0x26b/0x37c0 [ 923.838229][T11510] ? netdev_core_pick_tx+0x340/0x340 [ 923.843617][T11510] ? packet_parse_headers+0x7b8/0xab0 [ 923.849125][T11510] ? packet_parse_headers+0x84b/0xab0 [ 923.854562][T11510] ? __virt_addr_valid+0x188/0x540 [ 923.859721][T11510] ? __check_object_size+0x500/0xa40 [ 923.865155][T11510] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 923.870832][T11510] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 923.876876][T11510] ? skb_put+0x117/0x210 [ 923.881192][T11510] packet_sendmsg+0x3bc3/0x4e60 [ 923.886241][T11510] ? __might_sleep+0xd0/0xd0 [ 923.890909][T11510] ? verify_lock_unused+0x140/0x140 [ 923.896313][T11510] ? aa_sk_perm+0x81f/0x950 [ 923.900969][T11510] ? packet_getsockopt+0x9a0/0x9a0 [ 923.906131][T11510] ? aa_sock_msg_perm+0x94/0x150 [ 923.911412][T11510] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 923.916745][T11510] ? security_socket_sendmsg+0x7c/0xa0 [ 923.922294][T11510] ? packet_getsockopt+0x9a0/0x9a0 [ 923.927511][T11510] ____sys_sendmsg+0x5be/0x970 [ 923.932450][T11510] ? __sys_sendmsg_sock+0x30/0x30 [ 923.937551][T11510] ? __import_iovec+0x315/0x500 [ 923.942482][T11510] ? import_iovec+0x6f/0xa0 [ 923.947044][T11510] ___sys_sendmsg+0x2a2/0x360 [ 923.951909][T11510] ? __sys_sendmsg+0x290/0x290 [ 923.956772][T11510] __se_sys_sendmsg+0x1bb/0x2a0 [ 923.961794][T11510] ? __x64_sys_sendmsg+0x80/0x80 [ 923.966977][T11510] ? lockdep_hardirqs_on+0x94/0x140 [ 923.972496][T11510] do_syscall_64+0x4c/0xa0 [ 923.977208][T11510] ? clear_bhb_loop+0x60/0xb0 [ 923.981958][T11510] ? clear_bhb_loop+0x60/0xb0 [ 923.986686][T11510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 923.992738][T11510] RIP: 0033:0x7f6ad899c799 [ 923.997222][T11510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.016984][T11510] RSP: 002b:00007f6ad9892028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.025611][T11510] RAX: ffffffffffffffda RBX: 00007f6ad8c15fa0 RCX: 00007f6ad899c799 [ 924.033804][T11510] RDX: 000000000004c00c RSI: 00002000000000c0 RDI: 0000000000000005 [ 924.042014][T11510] RBP: 00007f6ad8a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 924.050054][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.058290][T11510] R13: 00007f6ad8c16038 R14: 00007f6ad8c15fa0 R15: 00007ffd0d7786b8 [ 924.066482][T11510] [ 924.069580][T11510] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 924.076951][T11510] CPU: 1 PID: 11510 Comm: syz.0.1852 Not tainted syzkaller #0 [ 924.084407][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 924.094465][T11510] Call Trace: [ 924.097828][T11510] [ 924.100754][T11510] dump_stack_lvl+0x188/0x24e [ 924.105524][T11510] ? memcpy+0x3c/0x60 [ 924.109499][T11510] ? show_regs_print_info+0x12/0x12 [ 924.114693][T11510] ? load_image+0x400/0x400 [ 924.119421][T11510] panic+0x2e5/0x730 [ 924.123501][T11510] ? bpf_jit_dump+0xd0/0xd0 [ 924.128279][T11510] __warn+0x2f8/0x4f0 [ 924.132442][T11510] ? em_cmp_match+0x56a/0x7b0 [ 924.137205][T11510] ? em_cmp_match+0x56a/0x7b0 [ 924.141883][T11510] report_bug+0x2ba/0x4f0 [ 924.146213][T11510] ? em_cmp_match+0x56a/0x7b0 [ 924.150904][T11510] handle_bug+0x3a/0x70 [ 924.155153][T11510] exc_invalid_op+0x16/0x40 [ 924.159651][T11510] asm_exc_invalid_op+0x16/0x20 [ 924.164586][T11510] RIP: 0010:em_cmp_match+0x56a/0x7b0 [ 924.169872][T11510] Code: e8 3b c3 1a f9 39 dd 0f 94 c0 e9 40 fe ff ff e8 cc c1 1a f9 e9 34 fe ff ff e8 c2 c1 1a f9 0f 0b e9 97 fc ff ff e8 b6 c1 1a f9 <0f> 0b e9 79 fb ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c e5 fa ff ff [ 924.189489][T11510] RSP: 0018:ffffc90006167118 EFLAGS: 00010283 [ 924.195639][T11510] RAX: ffffffff8867b0fa RBX: ffff88807cab9a2a RCX: 0000000000080000 [ 924.203694][T11510] RDX: ffffc90005519000 RSI: 00000000000003d9 RDI: 00000000000003da [ 924.211924][T11510] RBP: 000000000000ffff R08: ffff888052fd1dc0 R09: 0000000000000003 [ 924.219891][T11510] R10: 0000000000000002 R11: 0000000000000002 R12: 1ffff1100f957345 [ 924.227953][T11510] R13: 1ffff1100fb4e3a6 R14: ffff88807da71c80 R15: ffff88807da71d36 [ 924.235953][T11510] ? em_cmp_match+0x56a/0x7b0 [ 924.240666][T11510] ? em_cmp_match+0x56a/0x7b0 [ 924.245569][T11510] __tcf_em_tree_match+0x1cb/0x7a0 [ 924.250993][T11510] ? tcf_em_tree_dump+0x900/0x900 [ 924.256121][T11510] ? rcu_read_lock_held+0x40/0x40 [ 924.261155][T11510] ? __lock_acquire+0x12f4/0x7d10 [ 924.266209][T11510] basic_classify+0x111/0x2c0 [ 924.270976][T11510] tcf_classify+0x331/0xbf0 [ 924.275588][T11510] multiq_enqueue+0xfb/0x4b0 [ 924.280194][T11510] ? sch_tree_unlock+0x1b0/0x1b0 [ 924.285186][T11510] ? do_raw_spin_lock+0x128/0x2f0 [ 924.290205][T11510] ? __rwlock_init+0x140/0x140 [ 924.294976][T11510] dev_qdisc_enqueue+0x4c/0x2b0 [ 924.299923][T11510] __dev_queue_xmit+0xfdc/0x37c0 [ 924.305046][T11510] ? __dev_queue_xmit+0x26b/0x37c0 [ 924.310243][T11510] ? netdev_core_pick_tx+0x340/0x340 [ 924.315529][T11510] ? packet_parse_headers+0x7b8/0xab0 [ 924.321096][T11510] ? packet_parse_headers+0x84b/0xab0 [ 924.326461][T11510] ? __virt_addr_valid+0x188/0x540 [ 924.331570][T11510] ? __check_object_size+0x500/0xa40 [ 924.336851][T11510] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 924.342423][T11510] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 924.348412][T11510] ? skb_put+0x117/0x210 [ 924.352744][T11510] packet_sendmsg+0x3bc3/0x4e60 [ 924.357679][T11510] ? __might_sleep+0xd0/0xd0 [ 924.362255][T11510] ? verify_lock_unused+0x140/0x140 [ 924.367465][T11510] ? aa_sk_perm+0x81f/0x950 [ 924.372088][T11510] ? packet_getsockopt+0x9a0/0x9a0 [ 924.377207][T11510] ? aa_sock_msg_perm+0x94/0x150 [ 924.382239][T11510] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 924.387572][T11510] ? security_socket_sendmsg+0x7c/0xa0 [ 924.393033][T11510] ? packet_getsockopt+0x9a0/0x9a0 [ 924.398329][T11510] ____sys_sendmsg+0x5be/0x970 [ 924.403104][T11510] ? __sys_sendmsg_sock+0x30/0x30 [ 924.408141][T11510] ? __import_iovec+0x315/0x500 [ 924.413026][T11510] ? import_iovec+0x6f/0xa0 [ 924.417568][T11510] ___sys_sendmsg+0x2a2/0x360 [ 924.422265][T11510] ? __sys_sendmsg+0x290/0x290 [ 924.427045][T11510] __se_sys_sendmsg+0x1bb/0x2a0 [ 924.431900][T11510] ? __x64_sys_sendmsg+0x80/0x80 [ 924.436947][T11510] ? lockdep_hardirqs_on+0x94/0x140 [ 924.442160][T11510] do_syscall_64+0x4c/0xa0 [ 924.446583][T11510] ? clear_bhb_loop+0x60/0xb0 [ 924.451252][T11510] ? clear_bhb_loop+0x60/0xb0 [ 924.455929][T11510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 924.461839][T11510] RIP: 0033:0x7f6ad899c799 [ 924.466434][T11510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.486651][T11510] RSP: 002b:00007f6ad9892028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.495162][T11510] RAX: ffffffffffffffda RBX: 00007f6ad8c15fa0 RCX: 00007f6ad899c799 [ 924.503151][T11510] RDX: 000000000004c00c RSI: 00002000000000c0 RDI: 0000000000000005 [ 924.511125][T11510] RBP: 00007f6ad8a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 924.519105][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.527163][T11510] R13: 00007f6ad8c16038 R14: 00007f6ad8c15fa0 R15: 00007ffd0d7786b8 [ 924.535231][T11510] [ 924.538840][T11510] Kernel Offset: disabled [ 924.543413][T11510] Rebooting in 86400 seconds..