last executing test programs: 5m15.196372171s ago: executing program 0 (id=4175): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/zoneinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x10004) 5m15.035910369s ago: executing program 0 (id=4178): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_create(0x3, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x1, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) 5m15.01717459s ago: executing program 0 (id=4179): socket$unix(0x1, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 5m14.811965911s ago: executing program 0 (id=4182): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) 5m14.43861313s ago: executing program 0 (id=4184): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x800) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x2000000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@mmap}]}}) 5m14.25404352s ago: executing program 0 (id=4186): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 4m56.973572313s ago: executing program 32 (id=4186): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 27.480037253s ago: executing program 4 (id=5237): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004800)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)}], 0x1}}], 0x1, 0x8060) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) 26.906532892s ago: executing program 4 (id=5241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000240)='.\x00', r3, 0x0) close(0x3) 26.067907486s ago: executing program 4 (id=5245): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x41) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="0c0070000400050004000700"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4040850) 21.936963687s ago: executing program 4 (id=5248): r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x20000000000006) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c098}, 0x80c0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000140000001100"], 0x74}, 0x1, 0x0, 0x0, 0x4001850}, 0x24000840) r4 = socket$kcm(0xa, 0x922000000003, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x24040840) 21.319941868s ago: executing program 2 (id=5250): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000c0ffffbf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) 19.676025513s ago: executing program 2 (id=5253): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="e4c228b5ba622b0f04ca4f240cce0939", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r3, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x25, 0x0, @val=@tcx}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) 19.364580729s ago: executing program 2 (id=5254): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESDEC, @ANYBLOB=',ro']) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 18.877407453s ago: executing program 2 (id=5255): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x3ab180, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(0x3) 18.684013503s ago: executing program 3 (id=5256): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x41) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="0c0070000400050004000700"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4040850) 15.195861302s ago: executing program 3 (id=5257): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000440)) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.998947062s ago: executing program 2 (id=5258): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004800)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8060) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) 14.934650235s ago: executing program 1 (id=5259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}], 0x5}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 14.45197685s ago: executing program 2 (id=5260): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x20000080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 14.410871722s ago: executing program 1 (id=5261): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x99}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) 14.019983342s ago: executing program 1 (id=5262): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) socket(0x10, 0x803, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) r3 = getpgid(r0) syz_pidfd_open(r3, 0x0) 13.67258954s ago: executing program 3 (id=5263): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESDEC, @ANYBLOB=',ro']) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 13.626022952s ago: executing program 4 (id=5264): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) 9.927688322s ago: executing program 1 (id=5265): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x41) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="0c0070000400050004000700"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4040850) 9.292052124s ago: executing program 3 (id=5266): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x3ab180, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(0x3) 7.937728383s ago: executing program 4 (id=5267): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000540)={0x40, 0x1b, 0x4, "9bd92a7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 447.247126ms ago: executing program 1 (id=5268): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004800)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8060) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) 323.823033ms ago: executing program 3 (id=5269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}], 0x5}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 118.985593ms ago: executing program 1 (id=5270): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@mcast1, r2}, 0x14) 0s ago: executing program 3 (id=5271): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): b 2-1:0.0: Error: mce write submit urb error = -90 [ 1200.638165][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1200.681044][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1200.728653][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1200.802943][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1200.852447][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1200.905746][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1200.927813][ T5813] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1200.950073][T11993] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1200.973020][T11993] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1201.026394][T11993] usb 2-1: USB disconnect, device number 106 [ 1201.167341][ T5813] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1201.176751][ T5813] usb 4-1: not running at top speed; connect to a high speed hub [ 1201.189238][ T5813] usb 4-1: config 1 has an invalid interface number: 8 but max is 0 [ 1201.198500][ T5813] usb 4-1: config 1 has an invalid interface number: 27 but max is 0 [ 1201.209995][ T5813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.241813][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4274'. [ 1201.242399][ T5813] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1201.266072][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4274'. [ 1201.275240][ T5813] usb 4-1: config 1 has no interface number 0 [ 1201.291029][ T5813] usb 4-1: config 1 has no interface number 1 [ 1201.306477][ T5813] usb 4-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1201.332424][ T5813] usb 4-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1201.377868][ T5813] usb 4-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1201.401979][ T5813] usb 4-1: config 1 interface 8 has no altsetting 0 [ 1201.415677][ T5813] usb 4-1: config 1 interface 27 has no altsetting 0 [ 1201.419071][T18975] netlink: 'syz.2.4274': attribute type 13 has an invalid length. [ 1201.450646][ T5813] usb 4-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1201.469372][T18975] netlink: 'syz.2.4274': attribute type 12 has an invalid length. [ 1201.478194][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.478224][ T5813] usb 4-1: Product: syz [ 1201.478241][ T5813] usb 4-1: Manufacturer: syz [ 1201.478257][ T5813] usb 4-1: SerialNumber: syz [ 1201.764288][ T5813] ftdi_sio 4-1:1.8: FTDI USB Serial Device converter detected [ 1201.807945][ T5813] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1201.962391][ T5813] ftdi_sio 4-1:1.27: FTDI USB Serial Device converter detected [ 1201.984676][T11993] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1202.037294][ T5813] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1202.527445][ T5813] usb 4-1: USB disconnect, device number 101 [ 1202.544628][T11993] usb 2-1: Using ep0 maxpacket: 32 [ 1202.574466][ T5813] ftdi_sio 4-1:1.8: device disconnected [ 1202.585534][T11993] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1202.620245][ T5813] ftdi_sio 4-1:1.27: device disconnected [ 1202.626913][T11993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.645819][T11993] usb 2-1: Product: syz [ 1202.660891][T11993] usb 2-1: Manufacturer: syz [ 1202.692673][T11993] usb 2-1: SerialNumber: syz [ 1202.712245][T11993] usb 2-1: config 0 descriptor?? [ 1203.183874][T11993] airspy 2-1:0.0: Board ID: 00 [ 1203.188726][T11993] airspy 2-1:0.0: Firmware version: [ 1203.360202][T18990] netlink: 'syz.3.4283': attribute type 10 has an invalid length. [ 1203.368369][T18990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4283'. [ 1204.791908][T11993] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 1204.810554][T11993] airspy 2-1:0.0: Registered as swradio24 [ 1204.826956][T11993] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1204.863280][T11993] usb 2-1: USB disconnect, device number 107 [ 1205.248290][T19013] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4290'. [ 1205.260930][T19013] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4290'. [ 1205.270560][T19013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4290'. [ 1205.708599][T19025] netlink: 'syz.3.4294': attribute type 10 has an invalid length. [ 1205.717811][T19025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4294'. [ 1205.821731][ T7151] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1207.441334][ T7151] usb 3-1: Using ep0 maxpacket: 8 [ 1207.454922][ T7151] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.467614][ T7151] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 1207.476872][ T7151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.534928][ T7151] usb 3-1: config 0 descriptor?? [ 1207.806660][ T7151] usb 3-1: USB disconnect, device number 108 [ 1208.583981][T19055] netlink: 'syz.4.4306': attribute type 10 has an invalid length. [ 1208.592975][T19055] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4306'. [ 1208.602271][T19055] batadv0: entered promiscuous mode [ 1208.607692][T19055] batadv0: entered allmulticast mode [ 1208.616124][T19055] bridge0: port 3(batadv0) entered blocking state [ 1208.623223][T19055] bridge0: port 3(batadv0) entered disabled state [ 1208.840235][T19055] bridge0: port 3(batadv0) entered blocking state [ 1208.846908][T19055] bridge0: port 3(batadv0) entered forwarding state [ 1209.629487][ T5837] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1209.652590][ T2918] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1209.662274][ T2918] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1209.838810][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 1209.873040][ T5837] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1209.897911][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.945670][ T5837] usb 2-1: Product: syz [ 1209.973178][ T5837] usb 2-1: Manufacturer: syz [ 1210.001988][ T5837] usb 2-1: SerialNumber: syz [ 1210.018560][ T5837] usb 2-1: config 0 descriptor?? [ 1210.042045][T19062] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4310'. [ 1210.356297][T11993] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1210.545859][ T5837] airspy 2-1:0.0: Board ID: 00 [ 1210.551330][ T5837] airspy 2-1:0.0: Firmware version: [ 1210.627958][T11993] usb 3-1: not running at top speed; connect to a high speed hub [ 1210.771370][T11993] usb 3-1: config 1 has an invalid interface number: 8 but max is 0 [ 1210.800449][T11993] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 1210.826154][T11993] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.859987][T11993] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1210.886527][T11993] usb 3-1: config 1 has no interface number 0 [ 1210.905735][T11993] usb 3-1: config 1 has no interface number 1 [ 1210.913067][T11993] usb 3-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1210.926653][T11993] usb 3-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1210.933804][T19071] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4314'. [ 1210.949350][T11993] usb 3-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1210.970012][T11993] usb 3-1: config 1 interface 8 has no altsetting 0 [ 1210.977004][T11993] usb 3-1: config 1 interface 27 has no altsetting 0 [ 1211.016803][T11993] usb 3-1: string descriptor 0 read error: -22 [ 1211.035732][T11993] usb 3-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1211.052155][T11993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.084465][T11993] ftdi_sio 3-1:1.8: FTDI USB Serial Device converter detected [ 1211.120367][T11993] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1211.131366][T11993] ftdi_sio 3-1:1.27: FTDI USB Serial Device converter detected [ 1211.150514][T11993] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1211.202204][ T5837] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 1211.228965][ T5837] airspy 2-1:0.0: Registered as swradio24 [ 1211.356988][T11993] usb 3-1: USB disconnect, device number 109 [ 1211.373613][T11993] ftdi_sio 3-1:1.8: device disconnected [ 1211.401089][T11993] ftdi_sio 3-1:1.27: device disconnected [ 1211.463755][ T5837] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1211.529296][ T5837] usb 2-1: USB disconnect, device number 108 [ 1212.940985][T19084] netlink: 'syz.1.4318': attribute type 4 has an invalid length. [ 1213.088937][T19085] netlink: 'syz.1.4318': attribute type 4 has an invalid length. [ 1213.723448][T19097] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4323'. [ 1216.164901][ T5813] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1216.250376][ T7155] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1216.291492][T19121] Bluetooth: hci0: unsupported parameter 255 [ 1216.297894][T19121] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1216.382977][ T5813] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1216.394373][ T5813] usb 3-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 1216.403955][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.412103][ T5813] usb 3-1: Product: syz [ 1216.416453][ T5813] usb 3-1: Manufacturer: syz [ 1216.421085][ T5813] usb 3-1: SerialNumber: syz [ 1216.453407][ T7155] usb 2-1: Using ep0 maxpacket: 32 [ 1216.469834][ T7155] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1216.479287][ T7155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.494721][ T7155] usb 2-1: Product: syz [ 1216.502696][ T7155] usb 2-1: Manufacturer: syz [ 1216.507697][ T7155] usb 2-1: SerialNumber: syz [ 1216.517877][ T7155] usb 2-1: config 0 descriptor?? [ 1216.692900][ T7151] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1216.895012][ T7151] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1216.909655][ T7151] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1216.916631][ T7151] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1216.926008][ T7151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.943472][ T7151] usb 4-1: config 0 descriptor?? [ 1216.962349][ T7155] airspy 2-1:0.0: Board ID: 00 [ 1216.967641][ T7151] cp210x 4-1:0.0: cp210x converter detected [ 1216.973740][ T7155] airspy 2-1:0.0: Firmware version: [ 1217.394253][ T7155] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 1217.403959][ T7151] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1217.419133][ T7155] airspy 2-1:0.0: Registered as swradio24 [ 1217.425881][ T7151] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1217.441588][ T7155] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1217.453381][ T7151] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 1217.469303][ T7151] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1217.480840][ T7155] usb 2-1: USB disconnect, device number 109 [ 1217.500875][ T7151] usb 4-1: USB disconnect, device number 102 [ 1217.540284][ T7151] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1217.569928][ T7151] cp210x 4-1:0.0: device disconnected [ 1217.831017][ T5813] usb 3-1: USB disconnect, device number 110 [ 1219.561655][T19148] Bluetooth: hci0: unsupported parameter 255 [ 1219.576153][T19148] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1219.969085][ T5813] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1220.035431][T17016] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1220.170139][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 1220.199574][ T5813] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1220.220192][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.234173][ T5813] usb 3-1: Product: syz [ 1220.239058][ T5813] usb 3-1: Manufacturer: syz [ 1220.243749][ T5813] usb 3-1: SerialNumber: syz [ 1220.258798][ T5813] usb 3-1: config 0 descriptor?? [ 1220.271810][T17016] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1220.286813][T17016] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1220.299683][T17016] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1220.309250][T17016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.322702][T17016] usb 4-1: config 0 descriptor?? [ 1220.331690][T17016] cp210x 4-1:0.0: cp210x converter detected [ 1220.579693][T19166] netlink: 'syz.4.4348': attribute type 10 has an invalid length. [ 1220.587667][T19166] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4348'. [ 1221.227863][T17016] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1221.236564][ T5813] airspy 3-1:0.0: Board ID: 00 [ 1221.241589][ T5813] airspy 3-1:0.0: Firmware version: [ 1221.248707][T17016] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1221.258529][T17016] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 1221.270438][T17016] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1221.281975][T17016] usb 4-1: USB disconnect, device number 103 [ 1221.305577][T17016] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1221.314430][T17016] cp210x 4-1:0.0: device disconnected [ 1221.512901][ T5813] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 1221.527406][ T5813] airspy 3-1:0.0: Registered as swradio24 [ 1221.536346][ T5813] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1221.558201][ T5813] usb 3-1: USB disconnect, device number 111 [ 1221.592939][T19170] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4350'. [ 1221.751598][T19173] sctp: [Deprecated]: syz.1.4351 (pid 19173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.751598][T19173] Use struct sctp_sack_info instead [ 1221.809107][T19175] Bluetooth: hci0: unsupported parameter 255 [ 1221.815187][T19175] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1223.221036][T19204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4365'. [ 1223.457353][ T7155] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1223.699252][ T7155] usb 2-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1223.713625][ T7155] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1223.724912][ T7155] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1223.736720][ T7155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.830276][ T7155] usb 2-1: config 0 descriptor?? [ 1223.838451][ T7155] cp210x 2-1:0.0: cp210x converter detected [ 1224.269636][ T7155] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1224.292285][ T7155] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1224.313414][ T7155] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 1224.340213][ T7155] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1224.364675][ T7155] usb 2-1: USB disconnect, device number 110 [ 1224.390575][ T7155] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1224.405883][ T7155] cp210x 2-1:0.0: device disconnected [ 1224.467970][ T5813] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1224.660235][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 1224.680416][ T5813] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1224.700520][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.713903][ T5813] usb 5-1: Product: syz [ 1224.718138][ T5813] usb 5-1: Manufacturer: syz [ 1224.733670][ T5813] usb 5-1: SerialNumber: syz [ 1224.747423][ T5813] usb 5-1: config 0 descriptor?? [ 1224.970405][ T5813] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1225.627411][ T5813] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1226.573140][ T5813] usb 5-1: USB disconnect, device number 2 [ 1229.366946][T19268] binder: 19262:19268 ioctl c0306201 0 returned -14 [ 1229.384663][T19268] netlink: 'syz.3.4387': attribute type 10 has an invalid length. [ 1229.392614][T19268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4387'. [ 1230.361619][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1230.395808][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1230.569944][ T9] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1230.853141][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1230.956804][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 1231.059065][ T9] usb 2-1: config 1 has an invalid interface number: 8 but max is 0 [ 1231.145561][ T9] usb 2-1: config 1 has an invalid interface number: 27 but max is 0 [ 1231.222819][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.325595][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1231.360591][ T9] usb 2-1: config 1 has no interface number 0 [ 1231.382333][ T9] usb 2-1: config 1 has no interface number 1 [ 1231.404751][ T9] usb 2-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1231.453836][ T9] usb 2-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1231.503723][ T9] usb 2-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1231.585779][ T9] usb 2-1: config 1 interface 8 has no altsetting 0 [ 1231.592470][ T9] usb 2-1: config 1 interface 27 has no altsetting 0 [ 1231.645429][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1232.904455][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.920737][ T9] usb 2-1: Product: syz [ 1232.924970][ T9] usb 2-1: Manufacturer: syz [ 1232.962840][ T9] usb 2-1: SerialNumber: syz [ 1233.245011][ T9] ftdi_sio 2-1:1.8: FTDI USB Serial Device converter detected [ 1233.266839][ T9] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1233.302383][ T9] ftdi_sio 2-1:1.27: FTDI USB Serial Device converter detected [ 1233.343332][ T9] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1233.375130][ T9] usb 2-1: USB disconnect, device number 111 [ 1233.397262][ T9] ftdi_sio 2-1:1.8: device disconnected [ 1233.419060][ T9] ftdi_sio 2-1:1.27: device disconnected [ 1233.585108][T19296] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 1233.785353][T19305] UBIFS error (pid: 19305): cannot open "(null)", error -22 [ 1235.725246][ T7155] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1236.959914][ T7155] usb 3-1: Using ep0 maxpacket: 32 [ 1236.975195][ T7155] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1236.995497][ T7155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.023387][ T7155] usb 3-1: Product: syz [ 1237.028169][ T7155] usb 3-1: Manufacturer: syz [ 1237.032821][ T7155] usb 3-1: SerialNumber: syz [ 1237.051261][ T7155] usb 3-1: config 0 descriptor?? [ 1237.665913][ T7155] airspy 3-1:0.0: Board ID: 00 [ 1237.715240][ T7155] airspy 3-1:0.0: Firmware version: [ 1238.127964][ T7155] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 1238.200018][ T7155] airspy 3-1:0.0: Registered as swradio24 [ 1238.205868][ T7155] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1238.277097][ T7155] usb 3-1: USB disconnect, device number 112 [ 1239.118693][ T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1239.380256][T19350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4416'. [ 1239.501371][ T9] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1239.529516][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1240.381089][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1240.507762][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.579066][ T9] usb 3-1: config 0 descriptor?? [ 1240.824269][ T9] cp210x 3-1:0.0: cp210x converter detected [ 1241.129443][T19361] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 1241.220414][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1241.249928][T19365] loop5: detected capacity change from 0 to 7 [ 1241.262388][T19365] Dev loop5: unable to read RDB block 7 [ 1241.268302][T19365] loop5: unable to read partition table [ 1241.274798][T19365] loop5: partition table beyond EOD, truncated [ 1241.282817][T19365] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1241.348813][ T9] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1241.451759][ T9] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 1241.730105][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1241.999024][ T9] usb 3-1: USB disconnect, device number 113 [ 1242.132007][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1242.140309][ T9] cp210x 3-1:0.0: device disconnected [ 1244.731514][T19396] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 1244.846918][T19386] random: crng reseeded on system resumption [ 1245.170528][T19400] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1245.965517][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4430'. [ 1245.975408][T19409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4430'. [ 1245.985121][T19409] netlink: 'syz.1.4430': attribute type 13 has an invalid length. [ 1245.993984][T19409] netlink: 'syz.1.4430': attribute type 12 has an invalid length. [ 1248.331565][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4438'. [ 1248.340602][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4438'. [ 1248.349609][T19429] netlink: 'syz.3.4438': attribute type 13 has an invalid length. [ 1248.357626][T19429] netlink: 'syz.3.4438': attribute type 12 has an invalid length. [ 1249.264354][T19439] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1249.273417][T19439] overlayfs: missing 'lowerdir' [ 1253.386708][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4459'. [ 1253.395729][T19491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4459'. [ 1253.404628][T19491] netlink: 'syz.1.4459': attribute type 13 has an invalid length. [ 1253.412548][T19491] netlink: 'syz.1.4459': attribute type 12 has an invalid length. [ 1255.781600][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4471'. [ 1255.790855][T19519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4471'. [ 1255.799888][T19519] netlink: 'syz.2.4471': attribute type 13 has an invalid length. [ 1255.807811][T19519] netlink: 'syz.2.4471': attribute type 12 has an invalid length. [ 1260.600187][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4482'. [ 1260.609316][T19550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4482'. [ 1260.618186][T19550] netlink: 'syz.1.4482': attribute type 13 has an invalid length. [ 1260.650848][T19550] netlink: 'syz.1.4482': attribute type 12 has an invalid length. [ 1262.099026][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4485'. [ 1262.108367][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4485'. [ 1262.117907][T19566] netlink: 'syz.3.4485': attribute type 13 has an invalid length. [ 1262.126613][T19566] netlink: 'syz.3.4485': attribute type 12 has an invalid length. [ 1262.995458][T19574] netlink: 'syz.2.4489': attribute type 3 has an invalid length. [ 1266.632594][T19592] UBIFS error (pid: 19592): cannot open "(null)", error -22 [ 1267.981810][T17016] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1268.228651][T17016] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1268.267422][T17016] usb 2-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 1268.289052][T17016] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1268.316339][T17016] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1268.330848][T17016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1268.356590][T17016] usb 2-1: Product: syz [ 1268.360826][T17016] usb 2-1: Manufacturer: syz [ 1268.382700][T17016] usb 2-1: SerialNumber: syz [ 1268.409904][T17016] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1268.445108][T17016] usb 2-1: no configuration chosen from 1 choice [ 1269.347570][T19625] UBIFS error (pid: 19625): cannot open "(null)", error -22 [ 1270.200032][T19632] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4509'. [ 1270.726192][T17016] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1270.762132][T19642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4513'. [ 1270.950561][T17016] usb 5-1: device descriptor read/64, error -71 [ 1271.143419][ T9] usb 2-1: USB disconnect, device number 112 [ 1271.351137][T17016] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1271.657596][T17016] usb 5-1: device descriptor read/64, error -71 [ 1271.786014][T17016] usb usb5-port1: attempt power cycle [ 1271.942037][T19660] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4518'. [ 1272.073084][T19663] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4519'. [ 1272.245228][T17016] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1272.299438][T17016] usb 5-1: device descriptor read/8, error -71 [ 1272.603877][T17016] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1272.737491][T17016] usb 5-1: device descriptor read/8, error -71 [ 1273.026449][T17016] usb usb5-port1: unable to enumerate USB device [ 1273.474366][T17016] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1273.682786][T17016] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1273.695750][T17016] usb 3-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 1273.707623][T17016] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1273.786468][T17016] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1273.801400][T17016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1273.810608][T17016] usb 3-1: Product: syz [ 1273.815678][T17016] usb 3-1: Manufacturer: syz [ 1273.825986][T17016] usb 3-1: SerialNumber: syz [ 1273.835043][T17016] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 1273.996145][T17016] usb 3-1: no configuration chosen from 1 choice [ 1275.219243][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4530'. [ 1275.229627][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4530'. [ 1275.238756][T19697] netlink: 'syz.1.4530': attribute type 13 has an invalid length. [ 1275.246891][T19697] netlink: 'syz.1.4530': attribute type 12 has an invalid length. [ 1276.468313][ T5810] usb 3-1: USB disconnect, device number 114 [ 1276.915067][ T5837] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1276.979238][ T5810] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1277.143552][ T5837] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.160868][ T5810] usb 3-1: device descriptor read/64, error -71 [ 1277.165081][ T5837] usb 5-1: config 0 has no interfaces? [ 1277.190866][ T5837] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1277.210635][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.223376][ T5837] usb 5-1: Product: syz [ 1277.229876][ T5837] usb 5-1: Manufacturer: syz [ 1277.234970][ T5837] usb 5-1: SerialNumber: syz [ 1277.252339][ T5837] usb 5-1: config 0 descriptor?? [ 1277.473984][ T5810] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1277.500509][ T5837] usb 5-1: USB disconnect, device number 7 [ 1277.652499][ T5810] usb 3-1: device descriptor read/64, error -71 [ 1277.833576][ T5810] usb usb3-port1: attempt power cycle [ 1278.849796][ T5810] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1278.892982][ T5810] usb 3-1: device descriptor read/8, error -71 [ 1279.204819][ T5810] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1279.371780][ T5810] usb 3-1: device descriptor read/8, error -71 [ 1279.517096][ T5810] usb usb3-port1: unable to enumerate USB device [ 1279.522613][ T5837] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1279.639812][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4545'. [ 1279.649798][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4545'. [ 1279.663469][T19742] netlink: 'syz.1.4545': attribute type 13 has an invalid length. [ 1279.671724][T19742] netlink: 'syz.1.4545': attribute type 12 has an invalid length. [ 1279.740435][ T5837] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1279.834387][ T5837] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1279.881124][ T5837] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1279.905929][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1279.939999][ T5837] usb 5-1: Product: syz [ 1279.955973][ T5837] usb 5-1: Manufacturer: syz [ 1279.961980][ T5837] usb 5-1: SerialNumber: syz [ 1279.969313][ T5837] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 1279.978191][ T5837] usb 5-1: no configuration chosen from 1 choice [ 1281.510530][ T5837] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1281.524784][T19761] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4552'. [ 1281.734621][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 1281.750506][ T5837] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1281.773710][ T5837] usb 3-1: config 0 has no interface number 0 [ 1281.804951][ T5837] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1281.833854][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.856734][ T5837] usb 3-1: Product: syz [ 1281.871135][ T5837] usb 3-1: Manufacturer: syz [ 1281.882347][ T5837] usb 3-1: SerialNumber: syz [ 1281.937140][ T5837] usb 3-1: config 0 descriptor?? [ 1281.956831][ T5837] smsc95xx v2.0.0 [ 1282.387489][ T5810] usb 5-1: USB disconnect, device number 8 [ 1282.486829][ T5837] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1282.520349][ T5837] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1282.882115][T19781] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4560'. [ 1283.247425][T19784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4558'. [ 1283.256722][T19784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4558'. [ 1283.265995][T19784] netlink: 'syz.1.4558': attribute type 13 has an invalid length. [ 1283.274108][T19784] netlink: 'syz.1.4558': attribute type 12 has an invalid length. [ 1284.006132][T19786] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4561'. [ 1284.417554][ T5837] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 1284.483858][ T5837] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 1284.513013][ T5837] usb 3-1: USB disconnect, device number 119 [ 1285.069640][ T7152] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1285.154149][ T5837] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1285.274850][ T7152] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1285.319514][ T7152] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1285.342736][ T7152] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1285.356004][ T7152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1285.365277][ T7152] usb 4-1: Product: syz [ 1285.369941][ T7152] usb 4-1: Manufacturer: syz [ 1285.374679][ T7152] usb 4-1: SerialNumber: syz [ 1285.379884][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 1285.388915][ T5837] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.401231][ T7152] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1285.426493][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1285.437865][ T7152] usb 4-1: no configuration chosen from 1 choice [ 1285.454574][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1285.474576][ T5837] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1285.497975][ T5837] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.520708][ T5837] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1285.531885][ T5837] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1285.546752][ T5837] usb 5-1: Manufacturer: syz [ 1285.555921][ T5837] usb 5-1: config 0 descriptor?? [ 1286.051587][ T5837] rc_core: IR keymap rc-hauppauge not found [ 1286.057578][ T5837] Registered IR keymap rc-empty [ 1286.117957][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1286.179907][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1286.235757][ T5837] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1286.278061][ T5837] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input91 [ 1286.295837][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1286.329820][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1286.861966][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4570'. [ 1286.870939][T19813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4570'. [ 1286.879952][T19813] netlink: 'syz.2.4570': attribute type 13 has an invalid length. [ 1286.887838][T19813] netlink: 'syz.2.4570': attribute type 12 has an invalid length. [ 1286.928141][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1286.971622][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1287.019606][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1287.081263][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1287.120280][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1287.173748][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1287.225924][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1287.269856][ T5837] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1287.314468][ T5837] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1287.339368][ T5837] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1287.385870][ T5837] usb 5-1: USB disconnect, device number 9 [ 1288.664952][ T5810] usb 4-1: USB disconnect, device number 104 [ 1289.082488][T19844] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4583'. [ 1289.300230][T17016] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1289.513867][T17016] usb 3-1: Using ep0 maxpacket: 32 [ 1289.526951][T17016] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1289.568482][T17016] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1289.595762][T17016] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1289.615064][T17016] usb 3-1: Product: syz [ 1289.621015][T17016] usb 3-1: Manufacturer: syz [ 1289.625706][T17016] usb 3-1: SerialNumber: syz [ 1289.641924][T17016] usb 3-1: config 0 descriptor?? [ 1289.648398][T19841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1289.997867][ T5758] usb 3-1: USB disconnect, device number 120 [ 1290.061902][T19841] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4581'. [ 1290.935279][ T5758] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1291.007468][T19873] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4594'. [ 1291.135641][ T5758] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1291.155992][ T5758] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1291.185905][ T5758] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1291.196518][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1291.208071][T19879] random: crng reseeded on system resumption [ 1291.214259][ T5758] usb 4-1: Product: syz [ 1291.221369][ T5758] usb 4-1: Manufacturer: syz [ 1291.231767][ T5758] usb 4-1: SerialNumber: syz [ 1291.251512][ T5758] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1291.271129][ T5758] usb 4-1: no configuration chosen from 1 choice [ 1293.727589][T17016] usb 4-1: USB disconnect, device number 105 [ 1294.266289][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4606'. [ 1294.275981][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4606'. [ 1294.285075][T19909] netlink: 'syz.3.4606': attribute type 13 has an invalid length. [ 1294.292941][T19909] netlink: 'syz.3.4606': attribute type 12 has an invalid length. [ 1294.942386][T17016] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1295.155365][T17016] usb 2-1: Using ep0 maxpacket: 32 [ 1295.164198][T17016] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1295.178615][T17016] usb 2-1: config 0 has no interface number 0 [ 1295.194542][T17016] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1295.211079][T17016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.227256][T17016] usb 2-1: Product: syz [ 1295.238344][T17016] usb 2-1: Manufacturer: syz [ 1295.243914][T17016] usb 2-1: SerialNumber: syz [ 1295.258245][T17016] usb 2-1: config 0 descriptor?? [ 1295.274707][T17016] smsc95xx v2.0.0 [ 1295.723034][T17016] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1295.743895][T17016] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1295.808041][T11993] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1296.012202][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1296.019589][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1296.049466][T19936] netlink: 'syz.4.4615': attribute type 10 has an invalid length. [ 1296.057443][T19936] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4615'. [ 1296.866342][T11993] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1296.883974][T11993] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1296.903974][T11993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1296.912616][T11993] usb 4-1: Product: syz [ 1296.916874][T11993] usb 4-1: Manufacturer: syz [ 1296.930024][T11993] usb 4-1: SerialNumber: syz [ 1296.943123][T11993] usb 4-1: config 0 descriptor?? [ 1297.216775][ T5837] usb 4-1: USB disconnect, device number 106 [ 1297.407193][T17016] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1297.425606][T17016] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 1297.441279][T17016] usb 2-1: USB disconnect, device number 113 [ 1301.375574][T10210] Bluetooth: hci3: command tx timeout [ 1302.211835][T20009] netlink: 'syz.3.4640': attribute type 10 has an invalid length. [ 1302.219862][T20009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4640'. [ 1303.157088][T20018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4645'. [ 1305.168224][T20050] syzkaller0: entered promiscuous mode [ 1305.176304][T20050] syzkaller0: entered allmulticast mode [ 1306.153103][T11993] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1306.606989][T11993] usb 3-1: Using ep0 maxpacket: 16 [ 1306.739796][T11993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.751176][T11993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1306.762171][T11993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1306.772089][T11993] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1306.781791][T11993] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1306.804016][T11993] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1306.813116][T11993] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1306.843349][T11993] usb 3-1: Manufacturer: syz [ 1306.858261][T11993] usb 3-1: config 0 descriptor?? [ 1306.983469][T20076] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4669'. [ 1307.231489][T11993] rc_core: IR keymap rc-hauppauge not found [ 1307.252750][T11993] Registered IR keymap rc-empty [ 1307.257820][T11993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1307.306369][T11993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1307.445139][T11993] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1307.644342][T11993] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input92 [ 1307.968288][T11993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1308.013866][T11993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1308.044535][T11993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1308.078324][T11993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1308.129646][T11993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1308.201936][T11993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1308.236355][T11993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1308.270117][T11993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1308.332235][T11993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1308.414440][T11993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1309.212065][T11993] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1309.221300][T11993] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1309.235690][T11993] usb 3-1: USB disconnect, device number 121 [ 1309.482019][T20105] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4680'. [ 1310.865630][T20134] netlink: 'syz.2.4692': attribute type 10 has an invalid length. [ 1310.873556][T20134] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4692'. [ 1311.056444][T11993] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1311.766311][T11993] usb 2-1: Using ep0 maxpacket: 16 [ 1311.784204][T11993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.805031][T11993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1311.816041][T11993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1311.825743][T11993] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1311.858542][T11993] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1311.881958][T11993] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1311.912051][T11993] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1311.933287][T11993] usb 2-1: Manufacturer: syz [ 1311.956888][T11993] usb 2-1: config 0 descriptor?? [ 1312.530051][T20141] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4694'. [ 1312.627786][T11993] rc_core: IR keymap rc-hauppauge not found [ 1312.633780][T11993] Registered IR keymap rc-empty [ 1312.658330][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1312.729535][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1312.793055][T11993] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1312.832899][T11993] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input93 [ 1312.884390][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1312.937770][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1312.990120][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.033955][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.090730][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.099360][ T5758] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1313.140789][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.194691][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.212913][ T27] audit: type=1326 audit(1776929701.791:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8427b9c819 code=0x7ffc0000 [ 1313.244446][T20156] loop4: detected capacity change from 0 to 128 [ 1313.251101][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.264397][ T27] audit: type=1326 audit(1776929701.810:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8427b9c819 code=0x7ffc0000 [ 1313.294366][ T27] audit: type=1326 audit(1776929701.819:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8427b9c819 code=0x7ffc0000 [ 1313.318035][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.348523][ T5758] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1313.356414][ T27] audit: type=1326 audit(1776929701.819:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8427b9c819 code=0x7ffc0000 [ 1313.356500][ T27] audit: type=1326 audit(1776929701.819:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8427b9c819 code=0x7ffc0000 [ 1313.407398][T11993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.433126][ T5758] usb 3-1: not running at top speed; connect to a high speed hub [ 1313.445537][ T27] audit: type=1326 audit(1776929701.819:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8427b9c582 code=0x7ffc0000 [ 1313.472511][ T5758] usb 3-1: config 1 has an invalid interface number: 8 but max is 0 [ 1313.477156][T11993] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1313.481523][ T5758] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 1313.502373][ T27] audit: type=1326 audit(1776929701.819:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8427b5d04e code=0x7ffc0000 [ 1313.545482][ T5758] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.557671][T11993] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1313.576227][ T5758] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1313.592664][ T27] audit: type=1326 audit(1776929701.819:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8427b9c647 code=0x7ffc0000 [ 1313.618363][T11993] usb 2-1: USB disconnect, device number 114 [ 1313.633962][ T5758] usb 3-1: config 1 has no interface number 0 [ 1313.652834][ T5758] usb 3-1: config 1 has no interface number 1 [ 1313.670665][ T5758] usb 3-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1313.705513][ T27] audit: type=1326 audit(1776929701.819:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8427b5d04e code=0x7ffc0000 [ 1313.739218][ T5758] usb 3-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1313.761183][ T5758] usb 3-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1313.777173][ T27] audit: type=1326 audit(1776929701.819:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20155 comm="syz.4.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8427b9c4ab code=0x7ffc0000 [ 1313.816974][ T5758] usb 3-1: config 1 interface 8 has no altsetting 0 [ 1313.839004][ T5758] usb 3-1: config 1 interface 27 has no altsetting 0 [ 1313.861510][ T5758] usb 3-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1313.879070][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.888090][ T5758] usb 3-1: Product: syz [ 1313.893656][ T5758] usb 3-1: Manufacturer: syz [ 1313.898320][ T5758] usb 3-1: SerialNumber: syz [ 1314.190176][ T5758] ftdi_sio 3-1:1.8: FTDI USB Serial Device converter detected [ 1314.200647][ T5758] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1314.237883][ T5758] ftdi_sio 3-1:1.27: FTDI USB Serial Device converter detected [ 1315.101466][ T5758] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1315.125745][ T5758] usb 3-1: USB disconnect, device number 122 [ 1315.140495][ T5758] ftdi_sio 3-1:1.8: device disconnected [ 1315.163401][ T5758] ftdi_sio 3-1:1.27: device disconnected [ 1316.696018][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1317.155490][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1317.168885][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 1317.190964][ T9] usb 5-1: config 1 has an invalid interface number: 8 but max is 0 [ 1317.211683][ T9] usb 5-1: config 1 has an invalid interface number: 27 but max is 0 [ 1317.233983][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.261933][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1317.319002][ T9] usb 5-1: config 1 has no interface number 0 [ 1317.329742][ T9] usb 5-1: config 1 has no interface number 1 [ 1317.335925][ T9] usb 5-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1317.388913][ T9] usb 5-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1317.413758][ T9] usb 5-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1317.445812][ T9] usb 5-1: config 1 interface 8 has no altsetting 0 [ 1317.466015][ T9] usb 5-1: config 1 interface 27 has no altsetting 0 [ 1317.467172][T18864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1317.509700][T18864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1317.512336][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1317.539015][T18864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1317.543571][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.609790][ T9] usb 5-1: Product: syz [ 1317.614268][ T9] usb 5-1: Manufacturer: syz [ 1317.706579][T18864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1317.719739][T18864] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1317.730280][T18864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1318.310840][ T9] usb 5-1: SerialNumber: syz [ 1318.332188][T19725] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.572083][ T9] ftdi_sio 5-1:1.8: FTDI USB Serial Device converter detected [ 1318.619734][ T9] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1318.648293][ T9] ftdi_sio 5-1:1.27: FTDI USB Serial Device converter detected [ 1318.666599][ T9] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1318.690592][T19725] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.708566][ T9] usb 5-1: USB disconnect, device number 10 [ 1318.719557][ T9] ftdi_sio 5-1:1.8: device disconnected [ 1318.729043][ T9] ftdi_sio 5-1:1.27: device disconnected [ 1318.800827][T20197] erspan0 speed is unknown, defaulting to 1000 [ 1318.905483][T19725] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.117310][T19725] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.012519][T18864] Bluetooth: hci1: command tx timeout [ 1320.040501][T20197] chnl_net:caif_netlink_parms(): no params data found [ 1320.100362][T18864] Bluetooth: hci3: command 0x0406 tx timeout [ 1321.745433][T20197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.752751][T20197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.777519][T20197] bridge_slave_0: entered allmulticast mode [ 1321.785193][T20197] bridge_slave_0: entered promiscuous mode [ 1321.811554][T20197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.835055][T20197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.865061][T20197] bridge_slave_1: entered allmulticast mode [ 1321.895169][T20197] bridge_slave_1: entered promiscuous mode [ 1322.204949][T20197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.246665][T10210] Bluetooth: hci1: command tx timeout [ 1322.300563][T20197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.720161][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4736'. [ 1323.729189][T20262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4736'. [ 1323.738190][T20262] netlink: 'syz.4.4736': attribute type 13 has an invalid length. [ 1323.746071][T20262] netlink: 'syz.4.4736': attribute type 12 has an invalid length. [ 1324.006639][T20197] team0: Port device team_slave_0 added [ 1324.024612][T20197] team0: Port device team_slave_1 added [ 1324.351085][T20197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.364846][T20197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.414641][T20197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.441989][ T5810] infiniband syz2: ib_query_port failed (-19) [ 1324.458054][T10210] Bluetooth: hci1: command tx timeout [ 1324.506347][T20197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.539818][T20197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.606988][T20197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.767908][T20197] hsr_slave_0: entered promiscuous mode [ 1324.774887][T20197] hsr_slave_1: entered promiscuous mode [ 1324.782223][T20197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1324.790302][T20197] Cannot create hsr debugfs directory [ 1325.237549][ T5758] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1325.419854][T19725] hsr_slave_0: left promiscuous mode [ 1325.434182][T19725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1325.442238][T19725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.451159][ T5758] usb 4-1: Using ep0 maxpacket: 32 [ 1325.459280][T19725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1325.475855][ T5758] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1325.479104][T19725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.494886][ T5758] usb 4-1: config 0 has no interface number 0 [ 1325.512788][T19725] bridge0: port 3(batadv0) entered disabled state [ 1325.515734][ T5758] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1325.536199][T19725] bridge_slave_1: left allmulticast mode [ 1325.546823][T19725] bridge_slave_1: left promiscuous mode [ 1325.549995][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.571696][T19725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.597698][T19725] bridge_slave_0: left allmulticast mode [ 1325.601553][ T5758] usb 4-1: Product: syz [ 1325.607581][ T5758] usb 4-1: Manufacturer: syz [ 1325.610205][T19725] bridge_slave_0: left promiscuous mode [ 1325.627436][T19725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.635087][ T5758] usb 4-1: SerialNumber: syz [ 1325.657281][ T5758] usb 4-1: config 0 descriptor?? [ 1325.684528][ T5758] smsc95xx v2.0.0 [ 1325.737632][T19725] veth1_macvtap: left promiscuous mode [ 1325.750302][T19725] veth0_macvtap: left promiscuous mode [ 1325.763002][T19725] veth1_vlan: left promiscuous mode [ 1325.774441][T19725] veth0_vlan: left promiscuous mode [ 1326.113724][ T5758] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1326.144879][ T5758] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1326.344339][T19725] bond2 (unregistering): Released all slaves [ 1326.470727][T20321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4751'. [ 1326.609158][T19725] bond1 (unregistering): Released all slaves [ 1326.681458][T10210] Bluetooth: hci1: command tx timeout [ 1327.071641][ T5758] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1327.087427][ T5758] smsc95xx: probe of 4-1:0.67 failed with error -32 [ 1327.793244][T19725] team0 (unregistering): Port device team_slave_1 removed [ 1327.851084][T19725] team0 (unregistering): Port device team_slave_0 removed [ 1327.915599][T19725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.977674][T19725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.187793][ T9] usb 4-1: USB disconnect, device number 107 [ 1328.459935][T19725] bond0 (unregistering): Released all slaves [ 1329.482132][T20336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4756'. [ 1329.491118][T20336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4756'. [ 1329.500004][T20336] netlink: 'syz.3.4756': attribute type 13 has an invalid length. [ 1329.508841][T20336] netlink: 'syz.3.4756': attribute type 12 has an invalid length. [ 1329.594079][ T7152] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1329.672163][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1329.739122][T20197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1329.762751][T20197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1329.796900][T20197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1329.805897][ T7152] usb 5-1: Using ep0 maxpacket: 32 [ 1329.839203][ T7152] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.857314][T20197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1329.864395][ T7152] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1329.908792][ T7152] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1329.928546][ T7152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.949143][ T7152] usb 5-1: Product: syz [ 1329.953821][ T7152] usb 5-1: Manufacturer: syz [ 1329.969447][ T7152] usb 5-1: SerialNumber: syz [ 1329.994836][ T7152] usb 5-1: config 0 descriptor?? [ 1330.146965][T20197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.199588][T20197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.265549][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.272807][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.317878][T11745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.325110][T11745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.415728][T20197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1330.623305][ T5758] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1330.826368][ T5758] usb 4-1: Using ep0 maxpacket: 32 [ 1330.840796][ T5758] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1330.856548][T20197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1330.864279][ T5758] usb 4-1: config 0 has no interface number 0 [ 1330.871389][ T5758] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1330.871421][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.912031][ T5758] usb 4-1: Product: syz [ 1330.916255][ T5758] usb 4-1: Manufacturer: syz [ 1330.920884][ T5758] usb 4-1: SerialNumber: syz [ 1330.963197][ T5758] usb 4-1: config 0 descriptor?? [ 1330.984855][ T5758] smsc95xx v2.0.0 [ 1330.990208][T20197] veth0_vlan: entered promiscuous mode [ 1331.016236][T20197] veth1_vlan: entered promiscuous mode [ 1331.078378][T20197] veth0_macvtap: entered promiscuous mode [ 1331.120251][T20197] veth1_macvtap: entered promiscuous mode [ 1331.165714][T20197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.198032][T20197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.214991][T20197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.228154][T20197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.360719][T20197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.396483][T20197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.431342][T20197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.463712][T20197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.504955][T20197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.533494][ T5758] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1331.589661][T20197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.613879][T20197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.644958][T20197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.676053][T20197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.700962][T20197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.729951][T20197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.750961][ T5758] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1331.769608][T20197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.780298][T20197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.793608][T20197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.808882][T20197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.817997][T20197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.828786][T20197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.837623][T20197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.956399][T20384] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4761'. [ 1332.089079][T11745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.165914][T11745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.581820][ T5758] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1332.594387][ T5758] smsc95xx: probe of 4-1:0.67 failed with error -32 [ 1332.741315][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.757173][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.769890][T11993] usb 5-1: USB disconnect, device number 11 [ 1333.977042][T11993] usb 4-1: USB disconnect, device number 108 [ 1334.567785][T20415] syzkaller0: entered promiscuous mode [ 1334.587748][T20415] syzkaller0: entered allmulticast mode [ 1334.864054][T18864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1334.879033][T18864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1334.886960][ T5758] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1334.896028][T18864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1334.906518][T18864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1334.914495][T18864] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1334.922211][T18864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1335.100709][ T5758] usb 5-1: Using ep0 maxpacket: 32 [ 1335.109341][ T5758] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.131400][ T5758] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1335.156843][ T5758] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1335.175442][ T5758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.186065][ T5758] usb 5-1: Product: syz [ 1335.190291][ T5758] usb 5-1: Manufacturer: syz [ 1335.198887][ T5758] usb 5-1: SerialNumber: syz [ 1335.219804][ T5758] usb 5-1: config 0 descriptor?? [ 1335.344887][T12853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.494561][T12853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.530656][T20420] chnl_net:caif_netlink_parms(): no params data found [ 1335.608117][T12853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.677821][T20420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.685183][T20420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.693159][T20420] bridge_slave_0: entered allmulticast mode [ 1335.700772][T20420] bridge_slave_0: entered promiscuous mode [ 1335.710171][T20420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.717419][T20420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.724976][T20420] bridge_slave_1: entered allmulticast mode [ 1335.732554][T20420] bridge_slave_1: entered promiscuous mode [ 1335.776011][T12853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.815455][T20432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4771'. [ 1335.829072][T20420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.841680][T20420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.123265][T20420] team0: Port device team_slave_0 added [ 1336.271827][T20420] team0: Port device team_slave_1 added [ 1336.621988][T20420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.629684][T20420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.659064][T20420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.707984][T20420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.716294][T20420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.746639][T20420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.818152][T20420] hsr_slave_0: entered promiscuous mode [ 1336.831128][T20420] hsr_slave_1: entered promiscuous mode [ 1337.109678][T10210] Bluetooth: hci5: command tx timeout [ 1338.487037][ T5813] usb 5-1: USB disconnect, device number 12 [ 1339.333739][T10210] Bluetooth: hci5: command tx timeout [ 1339.482122][T20420] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1339.525155][T20420] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1339.543213][T20420] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1339.603804][T20420] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1339.755985][T12853] hsr_slave_0: left promiscuous mode [ 1339.767837][T12853] hsr_slave_1: left promiscuous mode [ 1339.789333][T12853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.810495][T12853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.878718][T12853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.905652][T12853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.937294][T12853] bridge0: port 3(batadv0) entered disabled state [ 1339.988239][T12853] bridge_slave_1: left allmulticast mode [ 1339.993960][T12853] bridge_slave_1: left promiscuous mode [ 1340.035856][T12853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.070524][T12853] bridge_slave_0: left allmulticast mode [ 1340.076246][T12853] bridge_slave_0: left promiscuous mode [ 1340.091184][T12853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.296496][T12853] veth1_macvtap: left promiscuous mode [ 1340.302260][T12853] veth0_macvtap: left promiscuous mode [ 1340.386638][T12853] veth1_vlan: left promiscuous mode [ 1340.464612][T12853] veth0_vlan: left promiscuous mode [ 1341.555563][T10210] Bluetooth: hci5: command tx timeout [ 1343.084025][T12853] team0 (unregistering): Port device team_slave_1 removed [ 1343.317177][T12853] team0 (unregistering): Port device team_slave_0 removed [ 1343.444226][T12853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1343.582014][T12853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.788438][T10210] Bluetooth: hci5: command tx timeout [ 1344.897706][T12853] bond0 (unregistering): Released all slaves [ 1345.280651][T20523] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4791'. [ 1345.499256][T20420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.586078][T20420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.756094][T20534] syz_tun: entered allmulticast mode [ 1346.218161][T20529] dvmrp8: entered allmulticast mode [ 1346.525024][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.532254][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.540856][T20528] syz_tun: left allmulticast mode [ 1346.597408][T19725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.604687][T19725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.714658][T12853] IPVS: stop unused estimator thread 0... [ 1347.322299][T20420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.523589][T20420] veth0_vlan: entered promiscuous mode [ 1347.546002][T20420] veth1_vlan: entered promiscuous mode [ 1347.633047][T20420] veth0_macvtap: entered promiscuous mode [ 1347.701443][T20420] veth1_macvtap: entered promiscuous mode [ 1347.742590][T20420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.789101][T20420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.824069][T20420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.859708][T20420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.880735][T20420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.913207][T20420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.923113][T20420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.975681][T20420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.039949][T20420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1348.564514][T20420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.588005][T20420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.620781][T20420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.655232][T20420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.679828][T20420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.708605][T20420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.728839][T20420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.751234][T20420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.776012][T20420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.817851][T20420] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.837999][T20420] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.879742][T20420] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.896816][T20420] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.137279][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.178072][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.299176][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.324126][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.471643][T20580] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4800'. [ 1351.696984][T20614] netlink: 'syz.4.4809': attribute type 10 has an invalid length. [ 1351.705020][T20614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4809'. [ 1352.565433][T20616] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4810'. [ 1353.135951][T20636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4813'. [ 1357.736549][T20713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1357.791450][T20717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4841'. [ 1357.800400][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4841'. [ 1357.809323][T20717] netlink: 'syz.1.4841': attribute type 13 has an invalid length. [ 1357.817133][T20717] netlink: 'syz.1.4841': attribute type 12 has an invalid length. [ 1360.177424][ T7155] kernel write not supported for file /sg0 (pid: 7155 comm: kworker/1:9) [ 1360.618868][T17016] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1362.468551][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.474944][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.306512][T20754] netlink: 'syz.2.4854': attribute type 10 has an invalid length. [ 1363.315923][T20754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4854'. [ 1363.325010][T20754] batadv0: entered promiscuous mode [ 1363.330256][T20754] batadv0: entered allmulticast mode [ 1363.336460][T20754] bridge0: port 3(batadv0) entered blocking state [ 1363.343062][T20754] bridge0: port 3(batadv0) entered disabled state [ 1363.352107][T20754] bridge0: port 3(batadv0) entered blocking state [ 1363.358729][T20754] bridge0: port 3(batadv0) entered forwarding state [ 1363.370958][T17016] usb 5-1: Using ep0 maxpacket: 8 [ 1363.378491][T17016] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1363.389956][T17016] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.391266][T19725] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1363.409911][T19725] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1363.439968][T17016] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1363.467387][T17016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.603008][T17016] usb 5-1: can't set config #16, error -71 [ 1363.635023][T17016] usb 5-1: USB disconnect, device number 13 [ 1363.886064][T20767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4860'. [ 1364.101075][T20775] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4863'. [ 1364.944135][T17016] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1365.259705][T17016] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1365.268531][T17016] usb 5-1: not running at top speed; connect to a high speed hub [ 1365.403074][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4867'. [ 1365.412384][T20789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4867'. [ 1365.421567][T20789] netlink: 'syz.1.4867': attribute type 13 has an invalid length. [ 1365.429539][T20789] netlink: 'syz.1.4867': attribute type 12 has an invalid length. [ 1366.166669][T17016] usb 5-1: config 1 has an invalid interface number: 8 but max is 0 [ 1366.174747][T17016] usb 5-1: config 1 has an invalid interface number: 27 but max is 0 [ 1366.207848][ T9] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1366.215696][T17016] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.239732][T17016] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1366.254162][T17016] usb 5-1: config 1 has no interface number 0 [ 1366.260657][T17016] usb 5-1: config 1 has no interface number 1 [ 1366.270391][T17016] usb 5-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1366.293168][T17016] usb 5-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1366.314948][T17016] usb 5-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1366.346629][T17016] usb 5-1: config 1 interface 8 has no altsetting 0 [ 1366.353305][T17016] usb 5-1: config 1 interface 27 has no altsetting 0 [ 1366.373742][T17016] usb 5-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1366.393303][T20795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4871'. [ 1366.402393][T17016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.410451][T17016] usb 5-1: Product: syz [ 1366.431174][T17016] usb 5-1: Manufacturer: syz [ 1366.443077][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1366.453549][T17016] usb 5-1: SerialNumber: syz [ 1366.464860][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1366.473077][ T9] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.521484][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1366.568864][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1366.578256][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.607538][ T9] usbtmc 3-1:16.0: bulk endpoints not found [ 1366.874060][T17016] ftdi_sio 5-1:1.8: FTDI USB Serial Device converter detected [ 1366.883320][T17016] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1366.894460][T17016] ftdi_sio 5-1:1.27: FTDI USB Serial Device converter detected [ 1366.904101][T17016] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1366.922937][T17016] usb 5-1: USB disconnect, device number 14 [ 1366.940589][T17016] ftdi_sio 5-1:1.8: device disconnected [ 1367.050148][T17016] ftdi_sio 5-1:1.27: device disconnected [ 1368.142992][T20818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4877'. [ 1368.152007][T20818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4877'. [ 1368.161071][T20818] netlink: 'syz.1.4877': attribute type 13 has an invalid length. [ 1368.169051][T20818] netlink: 'syz.1.4877': attribute type 12 has an invalid length. [ 1368.902706][T17016] usb 3-1: USB disconnect, device number 123 [ 1369.195408][T20826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4882'. [ 1369.595200][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1370.285334][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4889'. [ 1370.294463][T20850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4889'. [ 1370.303535][T20850] netlink: 'syz.4.4889': attribute type 13 has an invalid length. [ 1370.311495][T20850] netlink: 'syz.4.4889': attribute type 12 has an invalid length. [ 1371.128738][T17016] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1371.134252][ T7155] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1371.275902][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4895'. [ 1371.358357][T17016] usb 2-1: Using ep0 maxpacket: 8 [ 1371.368629][T17016] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1371.377855][T17016] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.410303][T17016] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1371.428082][T17016] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1371.444058][ T7155] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1371.455881][T17016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.536741][ T7155] usb 4-1: not running at top speed; connect to a high speed hub [ 1371.548273][ T7155] usb 4-1: config 1 has an invalid interface number: 8 but max is 0 [ 1371.565332][ T7155] usb 4-1: config 1 has an invalid interface number: 27 but max is 0 [ 1371.573645][ T7155] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.584123][ T7155] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1371.593249][ T7155] usb 4-1: config 1 has no interface number 0 [ 1371.599551][ T7155] usb 4-1: config 1 has no interface number 1 [ 1371.606174][ T7155] usb 4-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1371.619638][ T7155] usb 4-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1371.634042][T17016] usbtmc 2-1:16.0: bulk endpoints not found [ 1371.659720][ T7155] usb 4-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1371.707484][ T7155] usb 4-1: config 1 interface 8 has no altsetting 0 [ 1371.764948][ T7155] usb 4-1: config 1 interface 27 has no altsetting 0 [ 1371.783496][ T7155] usb 4-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1371.808694][ T7155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.817886][ T7155] usb 4-1: Product: syz [ 1371.822099][ T7155] usb 4-1: Manufacturer: syz [ 1371.826817][ T7155] usb 4-1: SerialNumber: syz [ 1371.954499][T20869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4900'. [ 1372.527870][ T7155] ftdi_sio 4-1:1.8: FTDI USB Serial Device converter detected [ 1372.853817][ T7155] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1372.882850][ T7155] ftdi_sio 4-1:1.27: FTDI USB Serial Device converter detected [ 1372.911901][ T7155] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1372.938860][ T7155] usb 4-1: USB disconnect, device number 109 [ 1373.006590][ T7155] ftdi_sio 4-1:1.8: device disconnected [ 1373.026509][ T7155] ftdi_sio 4-1:1.27: device disconnected [ 1373.075646][T20881] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4904'. [ 1374.453691][ T9] usb 2-1: USB disconnect, device number 115 [ 1376.093552][ T7152] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1376.483039][ T7152] usb 4-1: Using ep0 maxpacket: 8 [ 1376.515824][ T7152] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1376.551887][ T7152] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.585707][ T7152] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1376.621575][ T7152] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1376.640818][ T7152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.660081][ T7152] usbtmc 4-1:16.0: bulk endpoints not found [ 1376.904463][ T5837] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1377.111159][ T5837] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1377.139631][ T5837] usb 5-1: not running at top speed; connect to a high speed hub [ 1377.162387][ T5837] usb 5-1: config 1 has an invalid interface number: 8 but max is 0 [ 1377.181586][ T5837] usb 5-1: config 1 has an invalid interface number: 27 but max is 0 [ 1377.199611][ T5837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.223007][ T5837] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1377.252041][ T5837] usb 5-1: config 1 has no interface number 0 [ 1377.266001][ T5837] usb 5-1: config 1 has no interface number 1 [ 1377.275303][ T5837] usb 5-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1377.318028][ T5837] usb 5-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1377.540704][ T5837] usb 5-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1377.554883][ T5837] usb 5-1: config 1 interface 8 has no altsetting 0 [ 1377.561674][ T5837] usb 5-1: config 1 interface 27 has no altsetting 0 [ 1377.571891][ T5837] usb 5-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1377.581265][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.589340][ T5837] usb 5-1: Product: syz [ 1377.593575][ T5837] usb 5-1: Manufacturer: syz [ 1377.598198][ T5837] usb 5-1: SerialNumber: syz [ 1378.193873][ T5837] ftdi_sio 5-1:1.8: FTDI USB Serial Device converter detected [ 1378.342038][ T5837] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1378.373753][ T5837] ftdi_sio 5-1:1.27: FTDI USB Serial Device converter detected [ 1378.396866][ T5837] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1378.409943][ T5837] usb 5-1: USB disconnect, device number 15 [ 1378.483963][ T5837] ftdi_sio 5-1:1.8: device disconnected [ 1378.522646][ T5837] ftdi_sio 5-1:1.27: device disconnected [ 1378.796029][ T9] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1378.975141][ T5813] usb 4-1: USB disconnect, device number 110 [ 1379.017094][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1379.072995][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1379.110777][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.147909][ T9] usb 3-1: Product: syz [ 1379.172865][ T9] usb 3-1: Manufacturer: syz [ 1379.177630][ T9] usb 3-1: SerialNumber: syz [ 1379.208547][ T9] usb 3-1: config 0 descriptor?? [ 1379.448701][ T9] airspy 3-1:0.0: usb_control_msg() failed -32 request 09 [ 1379.457574][ T9] airspy 3-1:0.0: Could not detect board [ 1379.494062][ T9] airspy: probe of 3-1:0.0 failed with error -32 [ 1380.698080][ T7151] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1380.795941][T20887] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1380.912156][ T7151] usb 4-1: Using ep0 maxpacket: 8 [ 1380.924982][ T7151] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1380.940079][ T7151] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.953564][ T7151] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1380.970467][ T7151] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1380.982051][ T7151] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1380.999396][T20887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1381.011708][ T7151] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1381.032925][T20887] usb 5-1: not running at top speed; connect to a high speed hub [ 1381.047209][ T7151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.060348][T20887] usb 5-1: config 1 has an invalid interface number: 8 but max is 0 [ 1381.076647][T20887] usb 5-1: config 1 has an invalid interface number: 27 but max is 0 [ 1381.087829][T20887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.102046][T20887] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1381.116465][ T7151] usbtmc 4-1:16.0: bulk endpoints not found [ 1381.128174][T20887] usb 5-1: config 1 has no interface number 0 [ 1381.158154][T20887] usb 5-1: config 1 has no interface number 1 [ 1381.178088][T20887] usb 5-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1381.193078][T20887] usb 5-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1381.204876][T20887] usb 5-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1381.218574][T20887] usb 5-1: config 1 interface 8 has no altsetting 0 [ 1381.225340][T20887] usb 5-1: config 1 interface 27 has no altsetting 0 [ 1381.235257][T20887] usb 5-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1381.244594][T20887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.252702][T20887] usb 5-1: Product: syz [ 1381.257259][T20887] usb 5-1: Manufacturer: syz [ 1381.270392][T20887] usb 5-1: SerialNumber: syz [ 1381.532891][T20887] ftdi_sio 5-1:1.8: FTDI USB Serial Device converter detected [ 1381.541625][T20887] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1381.554031][T20887] ftdi_sio 5-1:1.27: FTDI USB Serial Device converter detected [ 1381.563859][T20887] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1381.574414][T20887] usb 5-1: USB disconnect, device number 16 [ 1381.582518][T20887] ftdi_sio 5-1:1.8: device disconnected [ 1381.592246][T20887] ftdi_sio 5-1:1.27: device disconnected [ 1381.720386][ T5837] usb 3-1: USB disconnect, device number 124 [ 1381.802959][T17016] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1381.824851][T17016] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1382.124998][T21003] netlink: 'syz.2.4950': attribute type 10 has an invalid length. [ 1382.133172][T21003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4950'. [ 1384.346197][ T7152] usb 4-1: USB disconnect, device number 111 [ 1384.465328][T20887] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1384.652611][T20887] usb 5-1: device descriptor read/64, error -71 [ 1384.807609][T21027] loop2: detected capacity change from 0 to 512 [ 1384.814938][T21029] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4960'. [ 1384.824375][ T7151] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1384.826113][T21027] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1384.951209][T20887] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1385.057991][ T7151] usb 2-1: Using ep0 maxpacket: 32 [ 1385.088651][ T7151] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1385.112807][ T7151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.121272][ T7151] usb 2-1: Product: syz [ 1385.131423][ T7151] usb 2-1: Manufacturer: syz [ 1385.138719][ T7151] usb 2-1: SerialNumber: syz [ 1385.181227][ T7151] usb 2-1: config 0 descriptor?? [ 1385.186527][T20887] usb 5-1: device descriptor read/64, error -71 [ 1385.328017][T20887] usb usb5-port1: attempt power cycle [ 1385.528153][ T7151] airspy 2-1:0.0: usb_control_msg() failed -32 request 09 [ 1385.535378][ T7151] airspy 2-1:0.0: Could not detect board [ 1385.541218][ T7151] airspy: probe of 2-1:0.0 failed with error -32 [ 1385.820816][T20887] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1385.870898][T20887] usb 5-1: device descriptor read/8, error -71 [ 1385.889773][T21036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4962'. [ 1386.244282][T20887] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1386.290699][T20887] usb 5-1: device descriptor read/8, error -71 [ 1386.470258][T20887] usb usb5-port1: unable to enumerate USB device [ 1387.061091][T17016] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1387.269968][T17016] usb 4-1: Using ep0 maxpacket: 8 [ 1387.288316][T17016] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1387.308589][T17016] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.326048][T17016] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1387.336222][T17016] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1387.355568][T17016] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1387.379550][T17016] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1387.408763][T17016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.425194][T17016] usbtmc 4-1:16.0: bulk endpoints not found [ 1387.472926][T21057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4970'. [ 1388.063828][ T5837] usb 2-1: USB disconnect, device number 116 [ 1388.479780][T21071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4975'. [ 1389.575599][ T5837] usb 4-1: USB disconnect, device number 112 [ 1389.757720][T21080] syzkaller0: entered promiscuous mode [ 1389.768328][T21080] syzkaller0: entered allmulticast mode [ 1390.240845][ T5837] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1390.454614][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 1390.466899][ T5837] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1390.481293][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.490113][ T5837] usb 4-1: Product: syz [ 1390.494631][ T5837] usb 4-1: Manufacturer: syz [ 1390.505852][ T5837] usb 4-1: SerialNumber: syz [ 1390.514499][ T5837] usb 4-1: config 0 descriptor?? [ 1390.678813][ T7151] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1390.741625][ T5837] airspy 4-1:0.0: usb_control_msg() failed -32 request 09 [ 1390.749037][ T5837] airspy 4-1:0.0: Could not detect board [ 1390.756223][ T5837] airspy: probe of 4-1:0.0 failed with error -32 [ 1390.903152][ T7151] usb 3-1: Using ep0 maxpacket: 8 [ 1390.926605][ T7151] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1390.950384][ T7151] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.961274][ T7151] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1390.980373][ T7151] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1390.993545][ T7151] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1391.017665][ T7151] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1391.028990][ T7151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.055342][ T7151] usbtmc 3-1:16.0: bulk endpoints not found [ 1391.064108][T21110] syzkaller0: entered promiscuous mode [ 1391.074453][T21110] syzkaller0: entered allmulticast mode [ 1393.053933][ T7151] usb 4-1: USB disconnect, device number 113 [ 1393.357165][T21143] syzkaller0: entered promiscuous mode [ 1393.369108][T21143] syzkaller0: entered allmulticast mode [ 1393.692711][ T7151] usb 3-1: USB disconnect, device number 125 [ 1393.844036][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5003'. [ 1393.853038][T21152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5003'. [ 1393.862038][T21152] netlink: 'syz.1.5003': attribute type 13 has an invalid length. [ 1393.870003][T21152] netlink: 'syz.1.5003': attribute type 12 has an invalid length. [ 1396.154737][T21174] vlan2: entered promiscuous mode [ 1396.159854][T21174] bridge0: entered promiscuous mode [ 1396.381334][T21180] syzkaller0: entered promiscuous mode [ 1396.427300][T21180] syzkaller0: entered allmulticast mode [ 1396.526053][T21184] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5016'. [ 1397.727613][T21202] loop2: detected capacity change from 0 to 128 [ 1397.767270][T21202] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1397.846310][T21202] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1398.075495][T20197] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1398.473001][T21214] netlink: 'syz.2.5026': attribute type 10 has an invalid length. [ 1398.480997][T21214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5026'. [ 1401.547205][T17016] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1401.771147][T17016] usb 2-1: Using ep0 maxpacket: 8 [ 1401.789651][T17016] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1401.799995][T17016] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1401.856428][T17016] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1401.882873][T17016] usb 2-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1401.919933][T17016] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1401.949253][T17016] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1401.973926][T17016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.013435][T17016] usbtmc 2-1:16.0: bulk endpoints not found [ 1403.042883][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1403.051827][T21285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1403.060844][T21285] netlink: 'syz.2.5051': attribute type 13 has an invalid length. [ 1403.068816][T21285] netlink: 'syz.2.5051': attribute type 12 has an invalid length. [ 1404.335532][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 1404.335549][ T27] audit: type=1326 audit(1776929787.061:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21291 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a159c819 code=0x7ffc0000 [ 1404.381632][ T27] audit: type=1326 audit(1776929787.061:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21291 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a159c819 code=0x7ffc0000 [ 1404.437845][ T27] audit: type=1326 audit(1776929787.155:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21291 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a159c819 code=0x7ffc0000 [ 1404.449165][T17016] usb 2-1: USB disconnect, device number 117 [ 1404.461384][ T27] audit: type=1326 audit(1776929787.155:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21291 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f45a159c819 code=0x7ffc0000 [ 1404.656735][ T27] audit: type=1326 audit(1776929787.192:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21291 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a159c819 code=0x7ffc0000 [ 1404.800432][ T27] audit: type=1326 audit(1776929787.436:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21291 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a159c819 code=0x7ffc0000 [ 1404.928678][ T27] audit: type=1326 audit(1776929787.436:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21291 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a159c819 code=0x7ffc0000 [ 1405.073947][ T27] audit: type=1326 audit(1776929787.436:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21291 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a159c819 code=0x7ffc0000 [ 1405.181674][ T27] audit: type=1326 audit(1776929787.436:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21291 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a159c819 code=0x7ffc0000 [ 1405.254511][ T27] audit: type=1326 audit(1776929787.436:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21291 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a159c819 code=0x7ffc0000 [ 1405.311280][T21309] loop2: detected capacity change from 0 to 512 [ 1405.376076][T21311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5060'. [ 1405.393882][T21309] EXT4-fs (loop2): 1 truncate cleaned up [ 1405.401144][T21309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1405.443144][T21311] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5060'. [ 1405.469347][T21316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5062'. [ 1405.697601][T20197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.034866][ T9] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1406.442090][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1406.467116][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1406.521681][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1406.548601][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1406.665256][ T7151] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1406.678909][ T9] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1406.689727][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1406.704446][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1406.714033][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.749864][ T9] usbtmc 4-1:16.0: bulk endpoints not found [ 1406.910867][ T7151] usb 5-1: Using ep0 maxpacket: 16 [ 1406.956156][ T7151] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.984537][ T7151] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1407.031351][ T7151] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1407.046620][ T7151] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1407.063364][ T7151] usb 5-1: Manufacturer: syz [ 1407.153366][ T7151] usb 5-1: config 0 descriptor?? [ 1407.419817][T21343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5072'. [ 1407.991133][ T5813] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1408.206290][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1408.230184][ T5813] usb 2-1: not running at top speed; connect to a high speed hub [ 1408.240533][ T5813] usb 2-1: config 1 has an invalid interface number: 8 but max is 0 [ 1408.251100][ T5813] usb 2-1: config 1 has an invalid interface number: 27 but max is 0 [ 1408.262721][ T5813] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.288677][ T5813] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1408.298209][ T5813] usb 2-1: config 1 has no interface number 0 [ 1408.310671][ T5813] usb 2-1: config 1 has no interface number 1 [ 1408.317519][ T5813] usb 2-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1408.331066][ T5813] usb 2-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1408.342287][ T5813] usb 2-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1408.355701][ T5813] usb 2-1: config 1 interface 8 has no altsetting 0 [ 1408.362356][ T5813] usb 2-1: config 1 interface 27 has no altsetting 0 [ 1408.372346][ T5813] usb 2-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1408.381589][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.389842][ T5813] usb 2-1: Product: syz [ 1408.394141][ T5813] usb 2-1: Manufacturer: syz [ 1408.401217][ T5813] usb 2-1: SerialNumber: syz [ 1408.642835][ T5813] ftdi_sio 2-1:1.8: FTDI USB Serial Device converter detected [ 1408.661428][ T5813] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1408.673828][ T5813] ftdi_sio 2-1:1.27: FTDI USB Serial Device converter detected [ 1408.689273][ T5813] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1408.701152][ T5813] usb 2-1: USB disconnect, device number 118 [ 1408.710418][ T5813] ftdi_sio 2-1:1.8: device disconnected [ 1408.737491][ T5813] ftdi_sio 2-1:1.27: device disconnected [ 1408.812181][T21361] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1408.872413][T11993] usb 5-1: USB disconnect, device number 21 [ 1408.977391][ T9] usb 4-1: USB disconnect, device number 114 [ 1409.094686][T21367] netlink: 'syz.4.5082': attribute type 10 has an invalid length. [ 1409.102669][T21367] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5082'. [ 1409.446193][T21370] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5083'. [ 1411.646947][T21398] netlink: 'syz.1.5093': attribute type 10 has an invalid length. [ 1411.654946][T21398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5093'. [ 1411.703432][ T5813] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1412.737999][ T5813] usb 5-1: Using ep0 maxpacket: 16 [ 1412.780064][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.798830][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1412.835820][ T5813] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1412.862988][ T5813] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1412.872296][ T5813] usb 5-1: Manufacturer: syz [ 1412.887128][ T5813] usb 5-1: config 0 descriptor?? [ 1413.569658][T21404] netlink: 'syz.3.5095': attribute type 72 has an invalid length. [ 1414.713871][ T7155] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1414.824150][ T9] usb 5-1: USB disconnect, device number 22 [ 1414.947453][ T7155] usb 4-1: Using ep0 maxpacket: 32 [ 1414.991012][ T7155] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1415.014931][ T7155] usb 4-1: config 0 has no interface number 0 [ 1415.025921][ T7155] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1415.039649][ T7155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.047649][T21430] syzkaller0: entered promiscuous mode [ 1415.047689][T21430] syzkaller0: entered allmulticast mode [ 1415.065559][ T7155] usb 4-1: Product: syz [ 1415.069820][ T7155] usb 4-1: Manufacturer: syz [ 1415.081235][ T7155] usb 4-1: SerialNumber: syz [ 1415.102913][ T7155] usb 4-1: config 0 descriptor?? [ 1415.115962][ T7155] smsc95xx v2.0.0 [ 1415.566621][ T7155] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1415.594718][ T7155] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1415.828003][ T7155] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1415.866626][ T7155] smsc95xx: probe of 4-1:0.67 failed with error -32 [ 1416.987867][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1417.196058][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1417.219661][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.239279][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1417.295405][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1417.305505][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1417.329857][ T9] usb 2-1: Manufacturer: syz [ 1417.352449][ T9] usb 2-1: config 0 descriptor?? [ 1418.915001][ T9] usb 4-1: USB disconnect, device number 115 [ 1419.363732][T21489] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5125'. [ 1419.766182][ T7155] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1419.958551][ T7155] usb 5-1: Using ep0 maxpacket: 32 [ 1419.968832][ T7155] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1419.978030][ T7155] usb 5-1: config 0 has no interface number 0 [ 1419.989876][ T7155] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1420.000910][ T7155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.011720][ T7155] usb 5-1: Product: syz [ 1420.021597][ T7155] usb 5-1: Manufacturer: syz [ 1420.028188][ T7155] usb 5-1: SerialNumber: syz [ 1420.056332][ T7155] usb 5-1: config 0 descriptor?? [ 1420.073034][ T7155] smsc95xx v2.0.0 [ 1420.211698][T20887] usb 2-1: USB disconnect, device number 119 [ 1420.357040][T21510] Invalid argument reading file caps for ./file0 [ 1420.579770][ T7155] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1420.624345][ T7155] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1421.022332][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5140'. [ 1421.031435][T21525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5140'. [ 1421.040518][T21525] netlink: 'syz.3.5140': attribute type 13 has an invalid length. [ 1421.048516][T21525] netlink: 'syz.3.5140': attribute type 12 has an invalid length. [ 1421.729492][ T7155] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1421.753977][ T7155] smsc95xx: probe of 5-1:0.67 failed with error -32 [ 1422.363066][ T7155] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1422.567410][ T7155] usb 2-1: Using ep0 maxpacket: 16 [ 1422.592525][ T7155] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.636643][ T7155] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1422.666318][ T7155] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1422.676101][ T7155] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1422.687065][ T7155] usb 2-1: Manufacturer: syz [ 1422.703422][ T7155] usb 2-1: config 0 descriptor?? [ 1423.285062][T21557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5151'. [ 1423.294135][T21557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5151'. [ 1423.303212][T21557] netlink: 'syz.2.5151': attribute type 13 has an invalid length. [ 1423.311168][T21557] netlink: 'syz.2.5151': attribute type 12 has an invalid length. [ 1424.130844][ T5813] usb 5-1: USB disconnect, device number 23 [ 1424.488162][T21567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5156'. [ 1425.172344][T11993] usb 2-1: USB disconnect, device number 120 [ 1425.675569][T11993] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1427.473608][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.484038][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.562969][T11993] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1427.595377][T11993] usb 2-1: not running at top speed; connect to a high speed hub [ 1427.606174][T11993] usb 2-1: config 1 has an invalid interface number: 8 but max is 0 [ 1427.615767][T11993] usb 2-1: config 1 has an invalid interface number: 27 but max is 0 [ 1427.628082][T11993] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.638558][T11993] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1427.649030][T11993] usb 2-1: config 1 has no interface number 0 [ 1427.656863][T11993] usb 2-1: config 1 has no interface number 1 [ 1427.663331][T11993] usb 2-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1427.676591][T11993] usb 2-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1427.688329][T11993] usb 2-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1427.709615][T11993] usb 2-1: config 1 interface 8 has no altsetting 0 [ 1427.719289][T11993] usb 2-1: config 1 interface 27 has no altsetting 0 [ 1427.733131][T11993] usb 2-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1427.763735][T11993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.779900][T11993] usb 2-1: Product: syz [ 1427.788679][T11993] usb 2-1: Manufacturer: syz [ 1427.794895][T11993] usb 2-1: SerialNumber: syz [ 1428.048073][T11993] ftdi_sio 2-1:1.8: FTDI USB Serial Device converter detected [ 1428.072065][T11993] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1428.092657][T11993] ftdi_sio 2-1:1.27: FTDI USB Serial Device converter detected [ 1428.111753][T11993] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1428.131313][T11993] usb 2-1: USB disconnect, device number 121 [ 1428.146922][T11993] ftdi_sio 2-1:1.8: device disconnected [ 1428.158958][T11993] ftdi_sio 2-1:1.27: device disconnected [ 1428.179214][ T5810] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1428.229579][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1428.400698][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 1428.414086][ T5810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1428.442467][ T5810] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1428.452936][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1428.462701][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1428.473234][ T5810] usb 4-1: Product: syz [ 1428.482082][ T5810] usb 4-1: Manufacturer: syz [ 1428.488087][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1428.500939][ T5810] usb 4-1: SerialNumber: syz [ 1428.505655][ T9] usb 5-1: config 0 has no interface number 0 [ 1428.524949][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1428.536523][ T5810] usb 4-1: config 0 descriptor?? [ 1428.557312][T21582] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1428.570040][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.592018][ T9] usb 5-1: Product: syz [ 1428.602324][ T9] usb 5-1: Manufacturer: syz [ 1428.621362][ T9] usb 5-1: SerialNumber: syz [ 1428.650203][ T9] usb 5-1: config 0 descriptor?? [ 1428.718347][ T9] smsc95xx v2.0.0 [ 1428.914575][ T5810] usb 4-1: USB disconnect, device number 116 [ 1428.960825][T21582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5162'. [ 1429.266254][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1429.293985][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1430.122719][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1430.153770][ T9] smsc95xx: probe of 5-1:0.67 failed with error -32 [ 1430.467211][T21609] netlink: 'syz.1.5169': attribute type 10 has an invalid length. [ 1430.475240][T21609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5169'. [ 1431.910973][ T9] usb 5-1: USB disconnect, device number 24 [ 1434.096590][T21638] netlink: 'syz.1.5181': attribute type 10 has an invalid length. [ 1434.104528][T21638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5181'. [ 1434.726640][ T7155] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1434.942604][ T7155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1434.957680][ T7155] usb 3-1: not running at top speed; connect to a high speed hub [ 1434.976138][ T7155] usb 3-1: config 1 has an invalid interface number: 8 but max is 0 [ 1435.463953][ T7155] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 1435.472214][ T7155] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.501617][ T7155] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1435.528074][ T7155] usb 3-1: config 1 has no interface number 0 [ 1435.535021][ T7155] usb 3-1: config 1 has no interface number 1 [ 1435.543643][ T7155] usb 3-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1435.570819][ T7155] usb 3-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1435.594732][ T7155] usb 3-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1435.634949][ T7155] usb 3-1: config 1 interface 8 has no altsetting 0 [ 1435.647831][ T7155] usb 3-1: config 1 interface 27 has no altsetting 0 [ 1435.673081][ T7155] usb 3-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1435.698341][ T7155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.723832][ T7155] usb 3-1: Product: syz [ 1435.737331][ T7155] usb 3-1: Manufacturer: syz [ 1435.751436][ T7155] usb 3-1: SerialNumber: syz [ 1436.182456][ T7155] ftdi_sio 3-1:1.8: FTDI USB Serial Device converter detected [ 1436.201931][ T7155] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1436.223149][ T7155] ftdi_sio 3-1:1.27: FTDI USB Serial Device converter detected [ 1436.232419][ T7155] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1437.024967][ T7155] usb 3-1: USB disconnect, device number 126 [ 1437.032757][ T7155] ftdi_sio 3-1:1.8: device disconnected [ 1437.058708][ T7155] ftdi_sio 3-1:1.27: device disconnected [ 1438.243323][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1439.289707][ T7155] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1439.544959][ T7155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1439.685656][ T7155] usb 3-1: not running at top speed; connect to a high speed hub [ 1439.739494][ T7155] usb 3-1: config 1 has an invalid interface number: 8 but max is 0 [ 1439.747568][ T7155] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 1439.781647][ T7155] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.829184][ T7155] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1439.870005][ T7155] usb 3-1: config 1 has no interface number 0 [ 1439.909549][ T7155] usb 3-1: config 1 has no interface number 1 [ 1439.952208][ T7155] usb 3-1: config 1 interface 8 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1439.989685][ T7155] usb 3-1: too many endpoints for config 1 interface 27 altsetting 170: 61, using maximum allowed: 30 [ 1440.016208][ T7155] usb 3-1: config 1 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 1440.052562][ T7155] usb 3-1: config 1 interface 8 has no altsetting 0 [ 1440.073865][ T7155] usb 3-1: config 1 interface 27 has no altsetting 0 [ 1440.093979][ T7155] usb 3-1: New USB device found, idVendor=0403, idProduct=a54b, bcdDevice=41.77 [ 1440.112368][ T7155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.120502][ T7155] usb 3-1: Product: syz [ 1440.144625][ T7155] usb 3-1: Manufacturer: syz [ 1440.149338][ T7155] usb 3-1: SerialNumber: syz [ 1440.402908][ T7155] ftdi_sio 3-1:1.8: FTDI USB Serial Device converter detected [ 1440.433235][ T7155] ftdi_sio ttyUSB0: unknown device type: 0x4177 [ 1440.442690][ T7155] ftdi_sio 3-1:1.27: FTDI USB Serial Device converter detected [ 1440.468485][ T7155] ftdi_sio ttyUSB1: unknown device type: 0x4177 [ 1440.489649][ T7155] usb 3-1: USB disconnect, device number 127 [ 1440.504538][ T7155] ftdi_sio 3-1:1.8: device disconnected [ 1440.530900][ T7155] ftdi_sio 3-1:1.27: device disconnected [ 1444.970829][T21740] netlink: 'syz.3.5217': attribute type 10 has an invalid length. [ 1444.978898][T21740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5217'. [ 1444.988076][T21740] batadv0: entered promiscuous mode [ 1444.993410][T21740] batadv0: entered allmulticast mode [ 1444.999766][T21740] bridge0: port 3(batadv0) entered blocking state [ 1445.006456][T21740] bridge0: port 3(batadv0) entered disabled state [ 1445.015590][T21740] bridge0: port 3(batadv0) entered blocking state [ 1445.022316][T21740] bridge0: port 3(batadv0) entered forwarding state [ 1447.908078][ T42] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1447.917549][ T42] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1450.163291][T21771] program syz.4.5228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1451.517975][T18864] Bluetooth: hci1: command 0x0406 tx timeout [ 1455.961563][T21832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5245'. [ 1456.156216][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5245'. [ 1456.361702][T21832] netlink: 'syz.4.5245': attribute type 13 has an invalid length. [ 1456.533678][T21832] netlink: 'syz.4.5245': attribute type 12 has an invalid length. [ 1460.950542][ T5837] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1461.022111][T21849] loop3: detected capacity change from 0 to 8192 [ 1461.185340][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 1461.255532][ T5837] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1461.295595][ T5837] usb 2-1: config 0 has no interface number 0 [ 1461.365021][ T5837] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1461.421206][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.429306][ T5837] usb 2-1: Product: syz [ 1461.478550][ T5837] usb 2-1: Manufacturer: syz [ 1461.483243][ T5837] usb 2-1: SerialNumber: syz [ 1461.497237][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 1461.556143][ T5837] usb 2-1: config 0 descriptor?? [ 1461.593569][ T5837] smsc95xx v2.0.0 [ 1462.057896][ T5837] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1462.104621][ T5837] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1462.512396][T21864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5256'. [ 1462.521736][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5256'. [ 1462.530781][T21864] netlink: 'syz.3.5256': attribute type 13 has an invalid length. [ 1462.538824][T21864] netlink: 'syz.3.5256': attribute type 12 has an invalid length. [ 1465.230013][ T5837] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1465.335481][ T5837] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 1465.407140][ T5837] usb 2-1: USB disconnect, device number 122 [ 1467.835138][T10210] Bluetooth: hci5: command 0x0406 tx timeout [ 1595.872178][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1595.879212][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20189/1:b..l P20420/1:b..l [ 1595.889288][ C1] rcu: (detected by 1, t=10503 jiffies, g=140545, q=119 ncpus=2) [ 1595.897135][ C1] task:syz-executor state:R running task stack:21736 pid:20420 ppid:20402 flags:0x00004002 [ 1595.909731][ C1] Call Trace: [ 1595.913056][ C1] [ 1595.916027][ C1] __schedule+0x1553/0x45a0 [ 1595.920617][ C1] ? mark_lock+0x94/0x320 [ 1595.925006][ C1] ? asan.module_dtor+0x20/0x20 [ 1595.929924][ C1] ? preempt_schedule+0xc0/0xd0 [ 1595.934865][ C1] preempt_schedule_common+0x82/0xc0 [ 1595.940235][ C1] preempt_schedule+0xc0/0xd0 [ 1595.944983][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 1595.950678][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 1595.955790][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1595.961048][ C1] _raw_spin_unlock+0x3a/0x40 [ 1595.965785][ C1] ? copy_page_range+0x2b6f/0x3670 [ 1595.970958][ C1] copy_page_range+0x2ba0/0x3670 [ 1595.976084][ C1] ? pfn_valid+0x450/0x450 [ 1595.980609][ C1] ? copy_mm+0x1232/0x1d80 [ 1595.985078][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 1595.990155][ C1] ? mas_empty_area_rev+0x1960/0x1960 [ 1595.995628][ C1] ? down_write+0x16e/0x200 [ 1596.000186][ C1] ? up_write+0x1c3/0x410 [ 1596.004579][ C1] ? anon_vma_interval_tree_verify+0x150/0x150 [ 1596.010824][ C1] copy_mm+0x1281/0x1d80 [ 1596.015137][ C1] ? copy_signal+0x680/0x680 [ 1596.019801][ C1] ? lockdep_init_map_type+0x9c/0x8e0 [ 1596.025233][ C1] ? __init_rwsem+0x122/0x160 [ 1596.029956][ C1] ? copy_signal+0x556/0x680 [ 1596.034669][ C1] copy_process+0x16f7/0x3d80 [ 1596.039411][ C1] ? copy_process+0x96e/0x3d80 [ 1596.044230][ C1] ? __pidfd_prepare+0x140/0x140 [ 1596.049219][ C1] kernel_clone+0x24b/0x8a0 [ 1596.053779][ C1] ? create_io_thread+0x190/0x190 [ 1596.058848][ C1] ? __might_fault+0xaa/0x120 [ 1596.063592][ C1] __x64_sys_clone+0x1b7/0x230 [ 1596.068406][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 1596.073498][ C1] ? lock_chain_count+0x20/0x20 [ 1596.078420][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1596.083685][ C1] do_syscall_64+0x55/0xa0 [ 1596.088145][ C1] ? clear_bhb_loop+0x40/0x90 [ 1596.092885][ C1] ? clear_bhb_loop+0x40/0x90 [ 1596.097796][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1596.103736][ C1] RIP: 0033:0x7f45a15c5292 [ 1596.108194][ C1] RSP: 002b:00007ffcc996e140 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1596.116682][ C1] RAX: ffffffffffffffda RBX: 00007ffcc996e140 RCX: 00007f45a15c5292 [ 1596.124695][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1596.132705][ C1] RBP: 00007ffcc996e2cc R08: 0000000000000000 R09: 0000000000000001 [ 1596.140716][ C1] R10: 00005555926977d0 R11: 0000000000000246 R12: 0000000000000001 [ 1596.148725][ C1] R13: 00000000000927c0 R14: 00000000001588d5 R15: 00007ffcc996e320 [ 1596.156759][ C1] [ 1596.159837][ C1] task:syz-executor state:R running task stack:24232 pid:20189 ppid:5756 flags:0x00004004 [ 1596.170681][ C1] Call Trace: [ 1596.174002][ C1] [ 1596.176968][ C1] __schedule+0x1553/0x45a0 [ 1596.181548][ C1] ? mark_lock+0x94/0x320 [ 1596.185934][ C1] ? asan.module_dtor+0x20/0x20 [ 1596.190854][ C1] ? preempt_schedule+0xc0/0xd0 [ 1596.195779][ C1] preempt_schedule_common+0x82/0xc0 [ 1596.201121][ C1] preempt_schedule+0xc0/0xd0 [ 1596.205960][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 1596.211653][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 1596.216729][ C1] ? folio_mark_accessed+0x332/0x1420 [ 1596.222159][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1596.227419][ C1] _raw_spin_unlock+0x3a/0x40 [ 1596.232147][ C1] unmap_page_range+0x2315/0x3000 [ 1596.237264][ C1] ? copy_page_range+0x3670/0x3670 [ 1596.242457][ C1] ? unmap_single_vma+0x1b0/0x2a0 [ 1596.247567][ C1] unmap_vmas+0x286/0x3f0 [ 1596.251973][ C1] ? unmap_page_range+0x3000/0x3000 [ 1596.257233][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 1596.262323][ C1] exit_mmap+0x238/0xb90 [ 1596.266617][ C1] ? exit_mm_release+0x1a/0x30 [ 1596.271448][ C1] ? vm_brk+0x30/0x30 [ 1596.275483][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1596.281191][ C1] ? uprobe_clear_state+0x278/0x290 [ 1596.286532][ C1] ? mm_update_next_owner+0x562/0x6c0 [ 1596.291969][ C1] __mmput+0x118/0x3c0 [ 1596.296085][ C1] exit_mm+0x1f2/0x2c0 [ 1596.300202][ C1] ? do_exit+0x2460/0x2460 [ 1596.304688][ C1] ? taskstats_exit+0x35e/0x9e0 [ 1596.309590][ C1] do_exit+0x8dd/0x2460 [ 1596.313846][ C1] ? put_task_struct+0xc0/0xc0 [ 1596.318672][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1596.324730][ C1] ? get_signal+0x1068/0x13f0 [ 1596.329453][ C1] ? lock_chain_count+0x20/0x20 [ 1596.334351][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1596.339431][ C1] do_group_exit+0x21b/0x2d0 [ 1596.344085][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1596.349332][ C1] get_signal+0x12fc/0x13f0 [ 1596.353904][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 1596.359509][ C1] ? __x64_sys_wait4+0x1b8/0x240 [ 1596.364504][ C1] ? get_sigframe_size+0x20/0x20 [ 1596.369519][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1596.375045][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1596.380397][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1596.386013][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1596.391525][ C1] do_syscall_64+0x61/0xa0 [ 1596.396077][ C1] ? clear_bhb_loop+0x40/0x90 [ 1596.400804][ C1] ? clear_bhb_loop+0x40/0x90 [ 1596.405554][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1596.411687][ C1] RIP: 0033:0x7ff4de957997 [ 1596.416148][ C1] RSP: 002b:00007ffe40e47f10 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 1596.424616][ C1] RAX: fffffffffffffe00 RBX: 000055555ee39500 RCX: 00007ff4de957997 [ 1596.432739][ C1] RDX: 0000000040000000 RSI: 00007ffe40e47f6c RDI: ffffffffffffffff [ 1596.440763][ C1] RBP: 00007ffe40e47f6c R08: 0000000000000000 R09: 0000000000000000 [ 1596.448779][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1596.457064][ C1] R13: 0000000000000003 R14: 00007ffe40e481c8 R15: 0000000000000000 [ 1596.465112][ C1] [ 1596.468282][ C1] rcu: rcu_preempt kthread starved for 10163 jiffies! g140545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1596.479603][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1596.489697][ C1] rcu: RCU grace-period kthread stack dump: [ 1596.495630][ C1] task:rcu_preempt state:R running task stack:27656 pid:17 ppid:2 flags:0x00004000 [ 1596.506467][ C1] Call Trace: [ 1596.509790][ C1] [ 1596.512765][ C1] __schedule+0x1553/0x45a0 [ 1596.517364][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x120 [ 1596.523316][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1596.529260][ C1] ? asan.module_dtor+0x20/0x20 [ 1596.534172][ C1] ? enqueue_timer+0x23d/0x550 [ 1596.539021][ C1] ? __mod_timer+0x984/0xdb0 [ 1596.543682][ C1] schedule+0xbd/0x170 [ 1596.547810][ C1] schedule_timeout+0x188/0x2d0 [ 1596.552706][ C1] ? console_conditional_schedule+0x40/0x40 [ 1596.558654][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1596.564627][ C1] ? update_process_times+0x1b0/0x1b0 [ 1596.570053][ C1] ? prepare_to_swait_event+0x339/0x360 [ 1596.575664][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 1596.580571][ C1] ? rcu_gp_init+0x1162/0x1560 [ 1596.585396][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1596.590325][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1596.596539][ C1] ? rcu_gp_init+0x1560/0x1560 [ 1596.601348][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 1596.606276][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1596.611529][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1596.616778][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 1596.621784][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1596.626954][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 1596.631937][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1596.637011][ C1] kthread+0x2fa/0x390 [ 1596.641128][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1596.646283][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1596.650929][ C1] ret_from_fork+0x48/0x80 [ 1596.655394][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1596.660032][ C1] ret_from_fork_asm+0x11/0x20 [ 1596.664860][ C1] [ 1596.667918][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1596.674270][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1596.681361][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1596.691476][ C1] RIP: 0010:unwind_next_frame+0x717/0x2970 [ 1596.697350][ C1] Code: 00 00 48 89 5c 24 30 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 51 1c 00 00 41 0f b7 1f c1 eb 0b 80 e3 01 48 8b 44 24 38 <42> 0f b6 04 28 84 c0 0f 85 55 1c 00 00 48 8b 44 24 08 88 18 45 0f [ 1596.717007][ C1] RSP: 0018:ffffc900001efcf8 EFLAGS: 00000246 [ 1596.723123][ C1] RAX: 1ffff9200003dfbf RBX: 0000000000000000 RCX: ffff88801c263c00 [ 1596.731143][ C1] RDX: 0000000000000100 RSI: ffffffff8cfa07c0 RDI: 0000000000000002 [ 1596.739168][ C1] RBP: ffffc900001efe18 R08: ffff88801c263c00 R09: 0000000000000002 [ 1596.747186][ C1] R10: 0000000000000001 R11: 0000000000000100 R12: ffffc900001efdc8 [ 1596.755205][ C1] R13: dffffc0000000000 R14: ffffffff8f100b91 R15: ffffffff8f100b90 [ 1596.763226][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1596.772195][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1596.778815][ C1] CR2: 00007f45a23456b8 CR3: 0000000076d14000 CR4: 00000000003506e0 [ 1596.786915][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1596.794934][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1596.803044][ C1] Call Trace: [ 1596.806357][ C1] [ 1596.809246][ C1] ? cpu_startup_entry+0x43/0x60 [ 1596.814350][ C1] ? cpu_startup_entry+0x43/0x60 [ 1596.819346][ C1] ? stack_trace_save+0x100/0x100 [ 1596.824454][ C1] arch_stack_walk+0x144/0x190 [ 1596.829265][ C1] ? cpu_startup_entry+0x43/0x60 [ 1596.834257][ C1] stack_trace_save+0xaa/0x100 [ 1596.839079][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1596.844264][ C1] ? ktime_get+0x24b/0x280 [ 1596.848757][ C1] kasan_set_track+0x4e/0x70 [ 1596.853413][ C1] ? kasan_set_track+0x4e/0x70 [ 1596.858270][ C1] ? kasan_save_free_info+0x2e/0x50 [ 1596.863524][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 1596.868866][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1596.874578][ C1] ? kmem_cache_free+0xf8/0x270 [ 1596.879500][ C1] ? skb_release_data+0x60a/0x800 [ 1596.884576][ C1] ? consume_skb+0xb2/0x110 [ 1596.889125][ C1] ? nft_synproxy_eval_v6+0x353/0x4e0 [ 1596.894579][ C1] ? nft_synproxy_do_eval+0x3cb/0x570 [ 1596.899991][ C1] ? nft_do_chain+0x44e/0x1600 [ 1596.904812][ C1] ? nft_do_chain_inet+0x29b/0x380 [ 1596.909974][ C1] ? nf_hook_slow+0xbd/0x200 [ 1596.914618][ C1] ? NF_HOOK+0x21d/0x3b0 [ 1596.918911][ C1] ? NF_HOOK+0x32d/0x3b0 [ 1596.923209][ C1] ? __netif_receive_skb+0xcc/0x290 [ 1596.928449][ C1] ? process_backlog+0x391/0x6f0 [ 1596.933447][ C1] ? __napi_poll+0xc0/0x460 [ 1596.938001][ C1] ? net_rx_action+0x616/0xc40 [ 1596.942802][ C1] ? handle_softirqs+0x280/0x820 [ 1596.947780][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1596.952614][ C1] ? irq_exit_rcu+0x9/0x20 [ 1596.957096][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1596.962950][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1596.969155][ C1] ? pv_native_safe_halt+0xf/0x10 [ 1596.974222][ C1] ? default_idle+0x13/0x20 [ 1596.978774][ C1] ? default_idle_call+0x6c/0xa0 [ 1596.983762][ C1] ? do_idle+0x221/0x590 [ 1596.988059][ C1] ? cpu_startup_entry+0x43/0x60 [ 1596.993077][ C1] ? kmem_cache_free+0xf8/0x270 [ 1596.997986][ C1] kasan_save_free_info+0x2e/0x50 [ 1597.003066][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1597.008222][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 1597.013729][ C1] ? skb_release_data+0x60a/0x800 [ 1597.018798][ C1] kmem_cache_free+0xf8/0x270 [ 1597.023563][ C1] skb_release_data+0x60a/0x800 [ 1597.028503][ C1] consume_skb+0xb2/0x110 [ 1597.032886][ C1] nft_synproxy_eval_v6+0x353/0x4e0 [ 1597.038140][ C1] ? nft_synproxy_eval_v4+0x4e0/0x4e0 [ 1597.043572][ C1] ? nf_ip_checksum+0x13c/0x520 [ 1597.048479][ C1] nft_synproxy_do_eval+0x3cb/0x570 [ 1597.053740][ C1] ? nft_synproxy_validate+0xc0/0xc0 [ 1597.059063][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1597.064483][ C1] nft_do_chain+0x44e/0x1600 [ 1597.069123][ C1] ? lock_chain_count+0x20/0x20 [ 1597.074013][ C1] ? ip6t_do_table+0x135e/0x1510 [ 1597.078997][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1597.084412][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 1597.090393][ C1] nft_do_chain_inet+0x29b/0x380 [ 1597.095382][ C1] ? nft_do_chain_arp+0x110/0x110 [ 1597.100453][ C1] ? nf_nat_ipv6_fn+0x227/0x2e0 [ 1597.105378][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 1597.110803][ C1] ? nf_nat_ipv6_fn+0x227/0x2e0 [ 1597.115712][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1597.121130][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 1597.126564][ C1] ? nft_do_chain_arp+0x110/0x110 [ 1597.131635][ C1] nf_hook_slow+0xbd/0x200 [ 1597.136104][ C1] NF_HOOK+0x21d/0x3b0 [ 1597.140222][ C1] ? ip6_input+0xa0/0xa0 [ 1597.144514][ C1] ? NF_HOOK+0x9f/0x3b0 [ 1597.148735][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 1597.153647][ C1] ? ip6_input+0xa0/0xa0 [ 1597.157940][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 1597.163275][ C1] ? ip6_rcv_finish+0x178/0x230 [ 1597.168168][ C1] NF_HOOK+0x32d/0x3b0 [ 1597.172294][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 1597.177462][ C1] ? NF_HOOK+0x9f/0x3b0 [ 1597.181675][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 1597.186571][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 1597.191735][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 1597.197091][ C1] __netif_receive_skb+0xcc/0x290 [ 1597.202201][ C1] ? process_backlog+0x2cf/0x6f0 [ 1597.207185][ C1] process_backlog+0x391/0x6f0 [ 1597.212032][ C1] ? trigger_rx_softirq+0x60/0x60 [ 1597.217100][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1597.223131][ C1] ? lock_chain_count+0x20/0x20 [ 1597.228060][ C1] __napi_poll+0xc0/0x460 [ 1597.232463][ C1] ? net_rx_action+0x3a0/0xc40 [ 1597.237281][ C1] net_rx_action+0x616/0xc40 [ 1597.241936][ C1] ? net_tx_action+0x980/0x980 [ 1597.246765][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1597.252819][ C1] ? lock_chain_count+0x20/0x20 [ 1597.257727][ C1] handle_softirqs+0x280/0x820 [ 1597.262561][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1597.267379][ C1] ? do_softirq+0x1a0/0x1a0 [ 1597.271935][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1597.277183][ C1] __irq_exit_rcu+0xd3/0x190 [ 1597.281822][ C1] ? irq_exit_rcu+0x20/0x20 [ 1597.286379][ C1] irq_exit_rcu+0x9/0x20 [ 1597.290665][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1597.296343][ C1] [ 1597.299306][ C1] [ 1597.302290][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1597.308341][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1597.314025][ C1] Code: 39 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 f3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1597.333673][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1597.339786][ C1] RAX: b492e132313c8c00 RBX: ffffffff8162a8f1 RCX: b492e132313c8c00 [ 1597.347797][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 1597.355815][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 1597.363828][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 1597.371848][ C1] R13: dffffc0000000000 R14: 1ffff1100384c780 R15: 0000000000000000 [ 1597.379868][ C1] ? do_idle+0x221/0x590 [ 1597.384169][ C1] default_idle+0x13/0x20 [ 1597.388551][ C1] default_idle_call+0x6c/0xa0 [ 1597.393369][ C1] do_idle+0x221/0x590 [ 1597.397515][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1597.402758][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1597.408085][ C1] ? asm_sysvec_error_interrupt+0x11/0x20 [ 1597.413867][ C1] cpu_startup_entry+0x43/0x60 [ 1597.418693][ C1] start_secondary+0xee/0xf0 [ 1597.423327][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1597.429456][ C1] [ 1601.153762][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1601.166111][ T1283] ieee802154 phy1 wpan1: encryption failed: -22