last executing test programs: 2.772147777s ago: executing program 1 (id=224): socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$vim2m(0x0, 0x2000000f4, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r0], 0x0) 1.410239799s ago: executing program 1 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.289414174s ago: executing program 1 (id=243): recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)}, 0x7}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x8, 0x0, "a386bcb957f6ee650a88e81a5cb3b0852da5b6b13aa9aed3e923ad05392be7124f3883a973ec229f5fab90b052c3572c8e868f4f1ff8e2f4bff94f46103f6fb8ed729eed0700000000000000de127097"}, 0xd8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0xffffffff, 0x8, 0xdeb9, 0x8, 0x5, 0x6, 0xfffffffffffffff2, 0x5, 0x6736, 0x2, 0xc, 0x7, 0xfffffffffffffff9, 0xa7, 0xa9], 0xdddd0000, 0x82200}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.289245443s ago: executing program 2 (id=244): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001fc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="200033004003000008021100800008021100000011f5030f216bb400ac0146c00600cd00"], 0x44}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 1.127721961s ago: executing program 2 (id=247): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x4048043) r2 = dup(r0) sendmsg$key(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)={0x2, 0xd, 0xe, 0x7, 0x2, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x10}}, 0x4008005) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x4, 0x1, 0xf06, 0x0, 0xa4, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 1.033180346s ago: executing program 2 (id=248): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 991.184479ms ago: executing program 3 (id=250): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x2, 0x6, 0x201}, 0x14}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 873.111971ms ago: executing program 1 (id=251): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @initial, {0x4, 0x1}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x12, @val={0x8c, 0x10, {0xf9f, "a432de484536", @short="ddd7864b8d60a9ca"}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0) 833.54558ms ago: executing program 0 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 813.135656ms ago: executing program 1 (id=253): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x6400, 0x31) io_setup(0xea, &(0x7f00000000c0)) close(0x3) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) 765.265898ms ago: executing program 3 (id=254): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2642, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x9) 693.459347ms ago: executing program 0 (id=255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xab4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 610.732878ms ago: executing program 3 (id=256): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001fc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="200033004003000008021100800008021100000011f5030f216bb400ac0146c00600cd00"], 0x44}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 582.584075ms ago: executing program 1 (id=257): syz_usb_connect(0x3, 0x57, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x15, 0xbd, 0xf9, 0x20, 0x1b3b, 0x2951, 0x83e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0xf, 0x6, 0xb0, 0x4, [{{0x9, 0x4, 0x2, 0x6, 0x0, 0xe, 0x1, 0x0, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7c, 0x8, 0x3de, 0x8}, {0x6, 0x24, 0x1a, 0x6, 0xa}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9, 0x3}, @acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1d}]}]}}]}}]}}, 0x0) 485.095582ms ago: executing program 3 (id=258): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000480)="aa", 0x1, 0x1150bdc9068b6e6, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="b0", 0x1}], 0x1}, 0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 461.149909ms ago: executing program 0 (id=259): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x5453, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r2, 0x0, 0x0) 337.182829ms ago: executing program 2 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x4c, r1, 0x101, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x2, 0x1, 0x0, {0x2, 0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x7ff, 0x8}}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044014}, 0x48000) 336.987938ms ago: executing program 0 (id=261): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @initial, {0x4, 0x1}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x12, @val={0x8c, 0x10, {0xf9f, "a432de484536", @short="ddd7864b8d60a9ca"}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0) 302.317289ms ago: executing program 3 (id=262): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000d80)="687043b29f2db45ab4f8af96f9a1cd6689198319856d3b332042d320d70eb2974cea831d290a93f2a1f50806b5d0531a448576dd9d003eae3e881f563cb1adcc4019dd6231a5a2f38ec41aa5643c55973e4de85e577ddfb25d9694d48e11bc55e3dfa20934dacfdd75cc6f6ed6386aaa1025f2ccd1e391b51d029cf722559a0ec0d3b23d12cdc676df939f0e6a3785529f1a0fbca5bd1697486bf3966e74c2aabb5b93778d45c29514775af5ea2debc567b7350b64e460e4c858cdbee285eb6df563b33dab3a3fc31a9e03b83114a29ae0a7769aec232ca1be0873deaa54f152429c6a4cd07a0420142ea845ad2907d192611713f7eff6446c8381da519ba3fac967fe1330e3c2e8c7c2fdb89d8e91fc3867ffeb4b347c4772d90e438c5629ac87a2c4788890911fb73ec8dd522ce968bd6084a1ac498561d80d1364601b7d2e93bf005ca5113ab58039ad206a56441236baba9c8d4e2dc7b77de2dfbbfcafbb45cc73eb8c8856c4a13d35dbcb37a43c65b6afdeb1447ab3b6459ed2a4acba8baa692b7a337d9627e053cfa62f971447fcd598b28726dd7bf19cc8b07b4b233681e9e5887593e452f1a90dce13f489d05899d99ed78320d68e6fa8d83979294038a0efcfe65b70c11ad15eadfc41e9b7aa1f42d3533dddb9440447758bbe70e56da1d14582b2fb0b0908422e5c4d1a4db0fd1a5cfba0be309a3750aeba78d38f75fe60c68a6be172c09afb730b583a44f65474f811295284273098f9cf91edab4f31a4c419eff79b31", 0x229) 240.315791ms ago: executing program 2 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 113.203448ms ago: executing program 0 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000002340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 113.053199ms ago: executing program 3 (id=265): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647309d209558b1965ef7ea4576ec0e289b73c2089310271d0a67d88a312f4cb0194c4f28ec3c2fe269311d0cec1fe0efef17d376d183b08e392b6cb58e930e1f959dd4528ec95350fc86e5297e6d59af036b132df17833881238ba8692842a8da4d5b4a37c94915331143d9128a197495433c2f550b4455a9ae03b937305e192e861ca3a60f9b3a14288e3daeb6936593485388a4aaab39b3843ee2960d9c8728eafb904333e7b78a270480e8dd89bc4cf0b791013cff43bf314e11a44d5f9c4fdad8a2fcdb04f76de29a50a0428148f4bc3eff1e84d25ea95dabddfba6162860a3c3389ee366450b6bcf1409f920caf1be5702af0402e2cef4896d9544a26ebfab694d7a47eca55bd2f62e7d7eb1f6061f7e441df5ab31344f02179764822036ef706133ea1a6380e042f074b2b0ddcc578cb8a668a846b9d5792f8d434f8ec7b562594587c49e8e6b3450e545fc070644bd06a36106cdb63f9e8ad7ae50b5b44e47f377961f5e29392330fb40d63c911ffd13e094f0452cc5c77b0731b56211b2d8a7554f6077ae593626a54f56d6dea49058fd1d48db02a7b33d50474b58a7e14e6a4d935bfaf4865f00074d59ece4b2d5f5e768e952733ee2c34b3e4b0be230f792f8b16f872afbbd155fe5314d4f54ea7b747eb2cd2410db7464c73ecd4815cda0bcc839fb603bb3f0c04b2d233b54a78b7aa3db974e469c8788e155cc2ef39bcf8491101058093c842df8cd0ac03d29e6d6902187f31eaf960b306debf734d8d26cc34a7e62c64a98b5a8a61020d81f5213d4d5722088be5b5ea6b1ee19b148d1f8b7172cd507533360d2d668e85252463b1d61302a75a7e3dc5e8c607a1026c66c2e8a6cbd34e3e5e99890da6cf07ed1247a07f004a6b1d643e00be7c156127bd7b39326e84ea6963d0530a4538eea35cf8048440a65148f1fe6314020bbe9c9358242589360fa5b1425d24b9f59141d81c0dbdd2e802eb82849e6342a4ffd0dcf307e2c73c707f54d54a2d04f2e504cae3d1719253ea4f455ae0e5fd35c08808b1fb8c6f5a25e7a3b082cd2159b9e624b67f1ed7faf2e5a0e6cd2560e26e4eabf626b65ce42c7855512ad92bcd6849d0c73e4cf41962ae0d17d850cd598e016b1db978f7a8d7f5fd88c7952982633e7673f11f3dc1ea4363ecbd106b3f410be357a29d0ddff9cb8448f71b39c60c3e7d5fba9e6115e64e88813418614419fcc8e27c2bd13109425528e44927ff85444cc076fbebbbf5c8b5a7bb8c7c9dd61a2bb4eed88d057a7268904cdd84f5e1eb8e4800a4d0c516e33e97c83f859c5e83fcd841ec6af3eb609c50bfd4794edb29d3a4c50088821ebd1f964eb9689e75c8ba3912ef50641b12a090e8687542763ed92bf85aae23b320f36f2b6b48327d5a58c0ea4b5725b655a33ac84dcf473a4f5adc3eabb7eb8efaeb18660d4b35405dc05a752f663ceaf25975849c708d41cdc53a8b4de94a10612b3901e8fd3a4797d5e6bfb1fcafebb7ad602cac461b014549574a8bba04601d4270749b17855d6e0bf912a823f801f74716bff0c5b5b7f8b62111168277a7725a9aa4b90a728304888f60bf1ff5de292e1451e01c34e38666cbfafb5dbc2b6af55c06a4bc758dab1081685c284f6480223f08be99fe93f758780b11e019ea305dd4ae2d7998830077ffbacdf545f94df06bfe57c5aac1c235d2ec4494c57228258517c7757bba41ebbb4a91d4d7c17d56a8a4f4896f8b87105bb91339bc817f51a14e657dd76934ba125e66df998d16f0467a71a437d6d9535d442af1a96ea753074fca588ee3cea87e01c8e2c7903f3d493c1f03dc77187acd17471769286c77f8d9c740705e1dc1cc1c528959ca6437766706dae23e117ba6585204e7ff30128d4629e107a409f744e4bae6dfec03cdc53d95f5d06c82258b17e9a215dda1dd153b20d3340463efdcd86dfaafeffdc38474d08772bc53ccc6db54d981a3eb4006651e3aaa354fa41f44f2a334b228f2bdf12f2620b4031e01a0a51d1292c86de05073fedb09764ffa1619f0d9e46f7855f0e7f486d7015f329e1ce3db9481ce2584609bdea78aa4b1fdbd769e08c7500acf3fc6fac0070262b7354cc99f7624123421925f8ab73cfe334718b32eea0f9d7ed25b5ec3f87cbab72e2bf67cccadb886000d02bbd2b2954aaf1edc090bf713dbc81833b7b6726e7f8a4a0084b0d68b03a4be78a532528dbc67ab327cc9fd5f604e09b6ae3749b927cb763d79bdd462e1b038573d97d265f1b077ba3ca36bdada16701c56fee635f09ba574dad81b33d289cb362e2ddc9aba7e268c07361662b1abae1402c99e7a2ac1b80a101b37c46d710bce0a913a8b77d804c438504b6cb3ac3a3cf07fa7efabfef60451f499675909b5848fbffc31aac39d1e0adade2cd01629b5d3c09861109990984c3f091c0ffa59778a5f91c0f1bd11c104c3962005a1947f650d559fac5a7aa108fe2457ae8bb454a6d0886abfdf85b14ac2b62dd0ce202557e2304710146003e38cbfbecaf86bde5e3bf83788ac7425446d38ac0f4babcfc5f0a49ed9de7590052f900fda5044d375a372bdff53610c7eda587b808c144affb58d0ba0f6232db2cd6a4bc5dd2573ea694aa71f0664045369044ed485e80f3190f41690e359e66290aabba532a454ebff7de7fdd26336b418215753d565424ea8faf3e2d1e84ff97e2ff029f11b0c32c396bacdb41b826f47919fca485349e0853793dd7cbf04f54bdd929695b3de45e7c38ba991dee3071eb9d7fd4ed92206b44b141a4cd87bc0e7ef194ca34a2d19c39d70ce0b487f960fc47ded966d15cb57266c15ca3eb5ac45c9fc3e404bcace092d9991508e2cc9fbbb1687d5ac6857c5d2280fdcf21779b7a207a1cfa92a9ca6dd476000ee45725be1afa5be7e42e0be6d96536b8808a71292bc0cab2a535969a1a25c4f7d7e58553a5f4ea14b05da770529f34c1c0183a3ec8d9d13eb9e023cb3c152b8a95217c26ae91e203ce96c672301d64bfce1d001228a4fe288a3e1e3253ec6afc063f15aa38584be665c0a5e6dfc7248d3e7e68aa425fc114d0a75a035b75b8e046418f7de8f3e33a8ca447b7cbd8644f2954044aa724f039f90e1b2eb29435537fba76125b8a906b20add2b1db3274f06b8bb23528c60c885074fe24f059340d9dfb2d64aa0c4fab84df7b73dc7328716599aced431eff86577a605e39e4519", 0x9c0}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 86.519844ms ago: executing program 2 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=267): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)='c', 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0xff, 0x6, @broadcast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.50' (ED25519) to the list of known hosts. [ 83.827487][ T5834] cgroup: Unknown subsys name 'net' [ 83.968941][ T5834] cgroup: Unknown subsys name 'cpuset' [ 83.978391][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.685773][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.184873][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.194858][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.203375][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.215762][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.234709][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.312326][ T5166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.324703][ T5166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.332458][ T5166] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.342334][ T5166] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.351087][ T5166] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.370459][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.406606][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.414933][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.423600][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.432483][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.434001][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.449652][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.467889][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.476744][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.485696][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.920130][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.101132][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 89.143885][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 89.273170][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.280889][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.289407][ T5844] bridge_slave_0: entered allmulticast mode [ 89.296930][ T5844] bridge_slave_0: entered promiscuous mode [ 89.311845][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 89.343826][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.351216][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.358497][ T5844] bridge_slave_1: entered allmulticast mode [ 89.366530][ T5844] bridge_slave_1: entered promiscuous mode [ 89.447800][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.455484][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.462692][ T5851] bridge_slave_0: entered allmulticast mode [ 89.471599][ T5851] bridge_slave_0: entered promiscuous mode [ 89.479487][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.486700][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.493874][ T5854] bridge_slave_0: entered allmulticast mode [ 89.501964][ T5854] bridge_slave_0: entered promiscuous mode [ 89.543570][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.550864][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.560554][ T5851] bridge_slave_1: entered allmulticast mode [ 89.567956][ T5851] bridge_slave_1: entered promiscuous mode [ 89.588511][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.595779][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.602971][ T5854] bridge_slave_1: entered allmulticast mode [ 89.611988][ T5854] bridge_slave_1: entered promiscuous mode [ 89.622254][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.635683][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.699338][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.751820][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.777830][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.791626][ T5844] team0: Port device team_slave_0 added [ 89.811544][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.819177][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.826534][ T5849] bridge_slave_0: entered allmulticast mode [ 89.833818][ T5849] bridge_slave_0: entered promiscuous mode [ 89.843705][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.856875][ T5844] team0: Port device team_slave_1 added [ 89.876218][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.884019][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.892020][ T5849] bridge_slave_1: entered allmulticast mode [ 89.900507][ T5849] bridge_slave_1: entered promiscuous mode [ 89.934998][ T5851] team0: Port device team_slave_0 added [ 89.976306][ T5854] team0: Port device team_slave_0 added [ 89.997163][ T5851] team0: Port device team_slave_1 added [ 90.003935][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.011481][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.037626][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.068896][ T5854] team0: Port device team_slave_1 added [ 90.090636][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.098085][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.124529][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.138432][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.151933][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.225971][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.232959][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.260062][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.271927][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.279330][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.306261][ T5166] Bluetooth: hci0: command tx timeout [ 90.306501][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.325204][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.332178][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.359051][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.392494][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.399948][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.425956][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.454650][ T5852] Bluetooth: hci1: command tx timeout [ 90.460519][ T5166] Bluetooth: hci3: command tx timeout [ 90.473979][ T5849] team0: Port device team_slave_0 added [ 90.507196][ T5844] hsr_slave_0: entered promiscuous mode [ 90.513694][ T5844] hsr_slave_1: entered promiscuous mode [ 90.522004][ T5849] team0: Port device team_slave_1 added [ 90.534584][ T5166] Bluetooth: hci2: command tx timeout [ 90.579986][ T5851] hsr_slave_0: entered promiscuous mode [ 90.586539][ T5851] hsr_slave_1: entered promiscuous mode [ 90.592842][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 90.598763][ T5851] Cannot create hsr debugfs directory [ 90.621174][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.628925][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.654987][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.703383][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.710568][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.737072][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.782359][ T5854] hsr_slave_0: entered promiscuous mode [ 90.789344][ T5854] hsr_slave_1: entered promiscuous mode [ 90.795849][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 90.801595][ T5854] Cannot create hsr debugfs directory [ 90.877594][ T5849] hsr_slave_0: entered promiscuous mode [ 90.884365][ T5849] hsr_slave_1: entered promiscuous mode [ 90.891024][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 90.896977][ T5849] Cannot create hsr debugfs directory [ 91.362205][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.377501][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.389709][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.410044][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.463778][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.484181][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.496543][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.507787][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.616404][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.629715][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.655694][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.669512][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.768900][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.791914][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.802578][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.822360][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.858513][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.961375][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.997207][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.010891][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.018220][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.060211][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.061690][ T3098] cfg80211: failed to load regulatory.db [ 92.067449][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.106702][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.127510][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.140463][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.155673][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.162894][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.207313][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.214552][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.241530][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.264692][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.287155][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.306465][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.313608][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.339827][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.347172][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.364172][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.371501][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.382216][ T5166] Bluetooth: hci0: command tx timeout [ 92.432562][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.439811][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.487463][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.544211][ T5166] Bluetooth: hci3: command tx timeout [ 92.550266][ T5166] Bluetooth: hci1: command tx timeout [ 92.614817][ T5852] Bluetooth: hci2: command tx timeout [ 92.746688][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.859813][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.968823][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.014521][ T5844] veth0_vlan: entered promiscuous mode [ 93.053987][ T5844] veth1_vlan: entered promiscuous mode [ 93.076318][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.160020][ T5854] veth0_vlan: entered promiscuous mode [ 93.199537][ T5854] veth1_vlan: entered promiscuous mode [ 93.214285][ T5844] veth0_macvtap: entered promiscuous mode [ 93.245438][ T5844] veth1_macvtap: entered promiscuous mode [ 93.270209][ T5851] veth0_vlan: entered promiscuous mode [ 93.297010][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.312534][ T5851] veth1_vlan: entered promiscuous mode [ 93.355883][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.378262][ T5854] veth0_macvtap: entered promiscuous mode [ 93.388343][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.412616][ T5854] veth1_macvtap: entered promiscuous mode [ 93.429446][ T5851] veth0_macvtap: entered promiscuous mode [ 93.453686][ T5849] veth0_vlan: entered promiscuous mode [ 93.463389][ T5851] veth1_macvtap: entered promiscuous mode [ 93.486332][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.498038][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.508162][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.536318][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.545444][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.567911][ T5849] veth1_vlan: entered promiscuous mode [ 93.584974][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.640699][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.653123][ T1146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.665621][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.694163][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.720773][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.740505][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.781502][ T5849] veth0_macvtap: entered promiscuous mode [ 93.789574][ T1146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.800981][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.804805][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.822248][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.859928][ T1146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.870760][ T1146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.909216][ T5849] veth1_macvtap: entered promiscuous mode [ 93.918216][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.926714][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.011866][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.028753][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.041358][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.071920][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.102517][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.164240][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.185474][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.221849][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.229947][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.245517][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.247453][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.260973][ T1146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.303444][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.368825][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.394050][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.455438][ T5852] Bluetooth: hci0: command tx timeout [ 94.549681][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.571947][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.614765][ T5852] Bluetooth: hci1: command tx timeout [ 94.620260][ T5166] Bluetooth: hci3: command tx timeout [ 94.695091][ T5852] Bluetooth: hci2: command tx timeout [ 94.787755][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.814008][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.335182][ T927] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 95.335986][ T5839] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.574717][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 95.574849][ T927] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.592560][ T5839] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 95.605083][ T927] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 95.614470][ T5839] usb 1-1: config 0 has no interface number 0 [ 95.623723][ T927] usb 4-1: config 0 interface 0 has no altsetting 0 [ 95.623811][ T5839] usb 1-1: config 0 interface 23 has no altsetting 0 [ 95.648235][ T5839] usb 1-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad [ 95.664275][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.673639][ T5839] usb 1-1: Product: syz [ 95.684343][ T5839] usb 1-1: Manufacturer: syz [ 95.690957][ T5839] usb 1-1: SerialNumber: syz [ 95.710031][ T5839] usb 1-1: config 0 descriptor?? [ 95.764150][ T927] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 95.785155][ T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.806046][ T927] usb 4-1: config 0 descriptor?? [ 95.827410][ T5955] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 95.925269][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.953917][ T5839] kaweth 1-1:0.23: Firmware present in device. [ 96.084872][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 96.114600][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.126180][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 96.143083][ T10] usb 2-1: can't read configurations, error -71 [ 96.145013][ T5839] kaweth 1-1:0.23: Statistics collection: 0 [ 96.170965][ T5839] kaweth 1-1:0.23: Multicast filter limit: 0 [ 96.180844][ T5839] kaweth 1-1:0.23: MTU: 0 [ 96.185450][ T5839] kaweth 1-1:0.23: Read MAC address 00:00:00:00:00:00 [ 96.261766][ T927] usbhid 4-1:0.0: can't add hid device: -71 [ 96.281857][ T927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 96.317644][ T927] usb 4-1: USB disconnect, device number 2 [ 96.535674][ T5852] Bluetooth: hci0: command tx timeout [ 96.706719][ T5166] Bluetooth: hci3: command tx timeout [ 96.712306][ T5852] Bluetooth: hci1: command tx timeout [ 96.746661][ T5839] kaweth 1-1:0.23: Error setting receive filter [ 96.756050][ T5839] kaweth 1-1:0.23: probe with driver kaweth failed with error -5 [ 96.774066][ T5839] usb 1-1: USB disconnect, device number 2 [ 96.780929][ T5852] Bluetooth: hci2: command tx timeout [ 96.846720][ T927] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.037057][ T927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.068079][ T927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.091909][ T927] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.102967][ T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.122624][ T927] usb 3-1: SerialNumber: syz [ 97.369247][ T927] usb 3-1: 0:2 : does not exist [ 97.444706][ T927] usb 3-1: USB disconnect, device number 2 [ 97.548606][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.664652][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.824630][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 97.843950][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.865944][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 97.885275][ T10] usb 1-1: can't read configurations, error -71 [ 98.333339][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 98.924623][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.944993][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.134545][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 99.154578][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 99.189679][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=81.ea [ 99.201693][ T10] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 99.221554][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.240211][ T10] usb 1-1: config 0 has no interface number 0 [ 99.270163][ T10] usb 1-1: config 0 interface 23 has no altsetting 0 [ 99.284483][ T9] usb 2-1: Product: syz [ 99.314657][ T9] usb 2-1: Manufacturer: syz [ 99.329740][ T9] usb 2-1: SerialNumber: syz [ 99.345417][ T10] usb 1-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad [ 99.399880][ T9] usb 2-1: config 0 descriptor?? [ 99.405020][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.462988][ T6072] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.468730][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 99.501442][ T10] usb 1-1: Product: syz [ 99.512698][ T10] usb 1-1: Manufacturer: syz [ 99.524653][ T10] usb 1-1: SerialNumber: syz [ 99.533654][ T10] usb 1-1: config 0 descriptor?? [ 99.543271][ T9] usb 2-1: setting power ON [ 99.556609][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 99.577209][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.587628][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 99.597081][ T9] usb 2-1: media controller created [ 99.623369][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.650805][ T9] usb 2-1: selecting invalid altsetting 6 [ 99.658091][ T9] usb 2-1: digital interface selection failed (-22) [ 99.665192][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 99.685533][ T9] usb 2-1: setting power OFF [ 99.690446][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 99.714962][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 99.735439][ T9] (NULL device *): no alternate interface [ 99.764684][ T5839] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.772591][ T10] kaweth 1-1:0.23: Firmware present in device. [ 99.809367][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 99.827136][ T9] usb 2-1: USB disconnect, device number 4 [ 99.934621][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 99.947361][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.956249][ T5839] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 99.965577][ T5839] usb 3-1: can't read configurations, error -71 [ 99.975239][ T10] kaweth 1-1:0.23: Statistics collection: 0 [ 99.981192][ T10] kaweth 1-1:0.23: Multicast filter limit: 0 [ 99.990661][ T10] kaweth 1-1:0.23: MTU: 0 [ 99.995115][ T10] kaweth 1-1:0.23: Read MAC address 00:00:00:00:00:00 [ 100.590536][ T10] kaweth 1-1:0.23: Error setting receive filter [ 100.612807][ T10] kaweth 1-1:0.23: probe with driver kaweth failed with error -5 [ 100.658225][ T10] usb 1-1: USB disconnect, device number 4 [ 101.524526][ T3098] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.594577][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.706810][ T3098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.718604][ T3098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.731938][ T3098] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 101.741513][ T3098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.766537][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.768992][ T3098] usb 1-1: config 0 descriptor?? [ 101.782293][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.799366][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.822852][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.840372][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.861080][ T9] usb 3-1: config 0 descriptor?? [ 102.218116][ T3098] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 102.339383][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 102.376201][ T3098] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 102.383358][ T3098] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 102.434637][ T3098] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 102.443534][ T3098] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 102.460613][ T3098] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 102.482810][ T3098] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 102.518051][ T3098] pyra 0003:1E7D:2CF6.0001: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 102.597066][ T5839] usb 3-1: USB disconnect, device number 5 [ 102.974619][ T3098] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 102.982112][ T3098] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 103.002766][ T3098] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71 [ 103.035183][ T3098] usb 1-1: USB disconnect, device number 5 [ 103.356402][ T6144] overlayfs: failed to resolve './file1': -2 [ 104.657142][ T6174] overlayfs: failed to resolve './file1': -2 [ 104.856379][ T5839] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.018881][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 105.030759][ T5839] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 105.049625][ T5839] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 105.074775][ T5839] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 105.090074][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.104780][ T5839] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.115048][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.231852][ T5839] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 105.253282][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.365706][ T5839] usb 3-1: config 0 descriptor?? [ 105.586710][ T5839] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 105.878947][ T5839] usb 3-1: USB disconnect, device number 6 [ 105.906018][ T5839] usblp0: removed [ 105.989364][ T6203] overlayfs: failed to resolve './file1': -2 [ 106.224835][ T5839] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.420301][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 106.431641][ T5839] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.450839][ T5839] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.511137][ T5839] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.520657][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.530858][ T5839] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.545891][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.564020][ T5839] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 106.577784][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.609861][ T5839] usb 3-1: config 0 descriptor?? [ 106.844166][ T5839] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.924566][ T927] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.143675][ T927] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.155876][ T927] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.202413][ T927] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.214545][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.233721][ T927] usb 1-1: SerialNumber: syz [ 107.498079][ T927] usb 1-1: 0:2 : does not exist [ 107.588255][ T927] usb 1-1: USB disconnect, device number 6 [ 107.676949][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.984948][ T5839] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.107775][ T3098] usb 3-1: USB disconnect, device number 7 [ 108.127278][ T3098] usblp0: removed [ 108.144996][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 108.155864][ T5839] usb 4-1: config 15 has an invalid interface number: 2 but max is 0 [ 108.171837][ T5839] usb 4-1: config 15 has no interface number 0 [ 108.204550][ T5839] usb 4-1: config 15 interface 2 has no altsetting 0 [ 108.218776][ T5839] usb 4-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=83.e9 [ 108.244800][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.252858][ T5839] usb 4-1: Product: syz [ 108.287376][ T5839] usb 4-1: Manufacturer: syz [ 108.297564][ T5839] usb 4-1: SerialNumber: syz [ 108.563212][ T5839] usb 4-1: Found UVC 0.00 device syz (1b3b:2951) [ 108.574497][ T5839] usb 4-1: No valid video chain found. [ 108.600277][ T5839] usb 4-1: USB disconnect, device number 3 [ 109.054522][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 109.137029][ T927] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 109.304633][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 109.309883][ T927] usb 3-1: Using ep0 maxpacket: 32 [ 109.324821][ T927] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 109.340762][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 109.353478][ T927] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 109.362542][ T10] usb 1-1: config 0 has no interface number 0 [ 109.376094][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 109.383124][ T927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 109.392808][ T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.404682][ T927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.416094][ T927] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.434561][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 109.444185][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.452544][ T927] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 109.461981][ T10] usb 1-1: Product: syz [ 109.466244][ T10] usb 1-1: Manufacturer: syz [ 109.470863][ T10] usb 1-1: SerialNumber: syz [ 109.475756][ T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.488042][ T927] usb 3-1: config 0 descriptor?? [ 109.494351][ T10] usb 1-1: config 0 descriptor?? [ 109.741478][ T927] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 109.805080][ T927] usb 3-1: USB disconnect, device number 8 [ 109.838629][ T927] usblp0: removed [ 110.129728][ T6272] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1113132006 (1113132006 ns) > initial count (497682314 ns). Using initial count to start timer. [ 110.256694][ T927] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.424604][ T927] usb 3-1: Using ep0 maxpacket: 32 [ 110.435672][ T927] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 110.446818][ T927] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 110.463209][ T927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 110.475910][ T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.485919][ T927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.495650][ T927] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.508927][ T927] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 110.514636][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.518229][ T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.539579][ T10] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 110.548815][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 110.557338][ T927] usb 3-1: config 0 descriptor?? [ 110.562639][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 110.571429][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 110.589407][ T10] usb 1-1: USB disconnect, device number 7 [ 110.615206][ T5839] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.684796][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 110.692005][ T24] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 110.709621][ T24] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 110.718820][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.726911][ T24] usb 2-1: Product: syz [ 110.731108][ T24] usb 2-1: Manufacturer: syz [ 110.739121][ T24] usb 2-1: SerialNumber: syz [ 110.747755][ T24] usb 2-1: config 0 descriptor?? [ 110.757204][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 110.765619][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 110.770938][ T24] usb 2-1: setting power ON [ 110.777530][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 110.780331][ T927] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 110.789194][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.803679][ T5839] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 110.811996][ T5839] usb 4-1: config 0 has no interface number 0 [ 110.818446][ T5839] usb 4-1: config 0 interface 23 has no altsetting 0 [ 110.825811][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 110.834319][ T24] usb 2-1: media controller created [ 110.844044][ T5839] usb 4-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad [ 110.864461][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.872509][ T5839] usb 4-1: Product: syz [ 110.880679][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.889146][ T5839] usb 4-1: Manufacturer: syz [ 110.893766][ T5839] usb 4-1: SerialNumber: syz [ 110.905523][ T5839] usb 4-1: config 0 descriptor?? [ 110.920548][ T24] usb 2-1: selecting invalid altsetting 6 [ 110.926447][ T24] usb 2-1: digital interface selection failed (-22) [ 110.933087][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 110.944637][ T24] usb 2-1: setting power OFF [ 110.949345][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 110.955281][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 110.960845][ T6276] dvb-usb: bulk message failed: -22 (3/0) [ 110.964693][ T24] (NULL device *): no alternate interface [ 110.976256][ T6276] dvb-usb: bulk message failed: -22 (37/0) [ 110.989301][ T6276] dvb-usb: bulk message failed: -22 (3/0) [ 110.999492][ T6276] dvb-usb: bulk message failed: -22 (3/0) [ 111.020204][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 111.063851][ T24] usb 2-1: USB disconnect, device number 5 [ 111.138132][ T5839] kaweth 4-1:0.23: Firmware present in device. [ 111.191336][ T927] usb 3-1: USB disconnect, device number 9 [ 111.202783][ T927] usblp0: removed [ 111.325806][ T5839] kaweth 4-1:0.23: Error reading configuration (-32), no net device created [ 111.336425][ T5839] kaweth 4-1:0.23: probe with driver kaweth failed with error -5 [ 111.834090][ T6296] overlayfs: failed to resolve './file0': -2 [ 112.303110][ T6317] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.379611][ T6319] overlayfs: failed to resolve './file0': -2 [ 112.484996][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.655332][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 112.663058][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 112.671555][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 112.681852][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 112.691012][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.700764][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.710476][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 112.723649][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 112.733538][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.741676][ T927] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.753056][ T10] usb 1-1: config 0 descriptor?? [ 112.784662][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 112.885326][ T927] usb 2-1: device descriptor read/64, error -71 [ 112.936346][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.947449][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.957361][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.970444][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.980809][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.990073][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 113.013614][ T9] usb 3-1: config 0 descriptor?? [ 113.020775][ T10] usb 1-1: USB disconnect, device number 8 [ 113.038958][ T10] usblp0: removed [ 113.124949][ T927] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.254849][ T927] usb 2-1: device descriptor read/64, error -71 [ 113.328246][ T5905] usb 4-1: USB disconnect, device number 4 [ 113.371852][ T927] usb usb2-port1: attempt power cycle [ 113.459916][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 113.472549][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.624555][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 113.631636][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 113.640261][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 113.659179][ T5905] usb 3-1: USB disconnect, device number 10 [ 113.665248][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 113.674262][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.730922][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.743930][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.757357][ T927] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 113.766347][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 113.775609][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.785299][ T927] usb 2-1: device descriptor read/8, error -71 [ 113.793613][ T10] usb 1-1: config 0 descriptor?? [ 113.949396][ T6340] kvm: MONITOR instruction emulated as NOP! [ 114.005592][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 114.035656][ T927] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 114.078693][ T927] usb 2-1: device descriptor read/8, error -71 [ 114.090173][ T6343] overlayfs: failed to resolve './file0': -2 [ 114.198966][ T927] usb usb2-port1: unable to enumerate USB device [ 114.422985][ T5905] usb 1-1: USB disconnect, device number 9 [ 114.437419][ T5905] usblp0: removed [ 114.476822][ T927] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.554738][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 114.634557][ T927] usb 4-1: Using ep0 maxpacket: 32 [ 114.641439][ T927] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 114.649892][ T927] usb 4-1: config 0 has no interface number 0 [ 114.656271][ T927] usb 4-1: config 0 interface 23 has no altsetting 0 [ 114.667293][ T927] usb 4-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad [ 114.676565][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.685229][ T927] usb 4-1: Product: syz [ 114.689454][ T927] usb 4-1: Manufacturer: syz [ 114.694077][ T927] usb 4-1: SerialNumber: syz [ 114.702762][ T927] usb 4-1: config 0 descriptor?? [ 114.707886][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 114.722280][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 114.732291][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.740409][ T9] usb 3-1: Product: syz [ 114.744658][ T9] usb 3-1: Manufacturer: syz [ 114.749306][ T9] usb 3-1: SerialNumber: syz [ 114.758254][ T9] usb 3-1: config 0 descriptor?? [ 114.767725][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 114.776305][ T9] usb 3-1: setting power ON [ 114.780866][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 114.790668][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.800574][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 114.809390][ T9] usb 3-1: media controller created [ 114.834264][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.857216][ T9] usb 3-1: selecting invalid altsetting 6 [ 114.863026][ T9] usb 3-1: digital interface selection failed (-22) [ 114.869876][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 114.879003][ T9] usb 3-1: setting power OFF [ 114.883642][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 114.889622][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 114.899116][ T9] (NULL device *): no alternate interface [ 114.939236][ T927] kaweth 4-1:0.23: Firmware present in device. [ 114.953812][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 115.015333][ T24] usb 3-1: USB disconnect, device number 11 [ 115.122847][ T927] kaweth 4-1:0.23: Error reading configuration (-32), no net device created [ 115.132340][ T927] kaweth 4-1:0.23: probe with driver kaweth failed with error -5 [ 115.364607][ T3098] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 115.525546][ T3098] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.555516][ T3098] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.568477][ T3098] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.599310][ T3098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.614079][ T3098] usb 1-1: SerialNumber: syz [ 115.805050][ T6365] overlayfs: failed to resolve './file0': -2 [ 115.852771][ T3098] usb 1-1: 0:2 : does not exist [ 115.936576][ T3098] usb 1-1: USB disconnect, device number 10 [ 116.214745][ T927] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 116.304648][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 116.377718][ T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.401629][ T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.416358][ T927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.432374][ T927] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.443342][ T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.454702][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 116.463805][ T927] usb 3-1: config 0 descriptor?? [ 116.472086][ T24] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 116.482170][ T24] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 116.491173][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 116.500579][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.510359][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.520250][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.533396][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 116.542653][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.553833][ T24] usb 2-1: config 0 descriptor?? [ 116.771689][ T24] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.790734][ T24] usb 2-1: USB disconnect, device number 10 [ 116.803864][ T24] usblp0: removed [ 116.883742][ T927] usbhid 3-1:0.0: can't add hid device: -71 [ 116.891176][ T927] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 116.901717][ T927] usb 3-1: USB disconnect, device number 12 [ 117.253184][ T5839] usb 4-1: USB disconnect, device number 5 [ 117.264714][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 117.425299][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 117.443613][ T24] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.480108][ T24] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.502114][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.520592][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.537725][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.548616][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.572310][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.584484][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.607885][ T24] usb 2-1: config 0 descriptor?? [ 117.644157][ T6388] overlayfs: failed to resolve './file0': -2 [ 117.830279][ T24] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 117.979479][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 118.194573][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.234660][ T5839] usb 2-1: USB disconnect, device number 11 [ 118.255403][ T5839] usblp0: removed [ 118.316107][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 118.354769][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 118.376622][ T24] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 118.384914][ T24] usb 4-1: config 0 has no interface number 0 [ 118.391035][ T24] usb 4-1: config 0 interface 23 has no altsetting 0 [ 118.400486][ T24] usb 4-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad [ 118.409691][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.419180][ T24] usb 4-1: Product: syz [ 118.423388][ T24] usb 4-1: Manufacturer: syz [ 118.428038][ T24] usb 4-1: SerialNumber: syz [ 118.441545][ T24] usb 4-1: config 0 descriptor?? [ 118.486627][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.497789][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.507653][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.521663][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.530826][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.542522][ T9] usb 3-1: config 0 descriptor?? [ 118.663852][ T24] kaweth 4-1:0.23: Firmware present in device. [ 118.821136][ T6409] overlayfs: failed to resolve './file0': -2 [ 118.858943][ T24] kaweth 4-1:0.23: Error reading configuration (-32), no net device created [ 118.880753][ T24] kaweth 4-1:0.23: probe with driver kaweth failed with error -5 [ 118.970758][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 118.980232][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 119.017978][ T9] usb 3-1: USB disconnect, device number 13 [ 120.284703][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 120.297429][ T30] audit: type=1326 audit(1752673880.407:2): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.0.194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa80618e929 code=0x0 [ 120.446931][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.458337][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.469259][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.482260][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.491389][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.502678][ T9] usb 3-1: config 0 descriptor?? [ 120.926201][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 120.939978][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 120.961712][ T9] usb 3-1: USB disconnect, device number 14 [ 121.018487][ T24] usb 4-1: USB disconnect, device number 6 [ 121.684794][ T3098] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 121.850655][ T3098] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.850685][ T3098] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.851893][ T3098] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.851923][ T3098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.851944][ T3098] usb 2-1: SerialNumber: syz [ 121.969438][ T6479] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.004667][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 122.075347][ T3098] usb 2-1: 0:2 : does not exist [ 122.110406][ T3098] usb 2-1: USB disconnect, device number 12 [ 122.158770][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.175276][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 122.186431][ T9] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 122.195073][ T9] usb 3-1: config 0 has no interface number 0 [ 122.211635][ T9] usb 3-1: config 0 interface 23 has no altsetting 0 [ 122.221369][ T9] usb 3-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad [ 122.230698][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.249330][ T9] usb 3-1: Product: syz [ 122.253559][ T9] usb 3-1: Manufacturer: syz [ 122.268192][ T9] usb 3-1: SerialNumber: syz [ 122.311011][ T9] usb 3-1: config 0 descriptor?? [ 122.446088][ T6491] overlayfs: failed to resolve './file1': -2 [ 122.562608][ T9] kaweth 3-1:0.23: Firmware present in device. [ 123.150880][ T9] kaweth 3-1:0.23: Error reading configuration (-32), no net device created [ 123.160146][ T9] kaweth 3-1:0.23: probe with driver kaweth failed with error -5 [ 123.481356][ T6514] overlayfs: failed to resolve './file1': -2 [ 123.802857][ T6526] warning: `syz.3.227' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.884524][ T927] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 124.048539][ T927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.061607][ T927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.072363][ T927] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.081536][ T927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.094117][ T927] usb 2-1: SerialNumber: syz [ 124.312669][ T927] usb 2-1: 0:2 : does not exist [ 124.359707][ T927] usb 2-1: USB disconnect, device number 13 [ 124.378374][ T6540] overlayfs: failed to resolve './file1': -2 [ 124.403544][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.792709][ T24] usb 3-1: USB disconnect, device number 15 [ 124.875053][ T6552] 9pnet_fd: Insufficient options for proto=fd [ 125.133612][ T6563] Zero length message leads to an empty skb [ 125.440741][ T6576] program syz.3.250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.576299][ T6581] 9pnet_fd: Insufficient options for proto=fd [ 125.707204][ T6586] kvm: user requested TSC rate below hardware speed [ 126.054880][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 126.236013][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 126.268078][ T6607] ================================================================== [ 126.274590][ T24] usb 2-1: config 15 has an invalid interface number: 2 but max is 0 [ 126.276202][ T6607] BUG: KASAN: slab-use-after-free in tcp_prune_ofo_queue+0x37e/0x6e0 [ 126.292355][ T6607] Read of size 4 at addr ffff8880729415d0 by task syz.3.265/6607 [ 126.300096][ T6607] [ 126.302471][ T6607] CPU: 0 UID: 0 PID: 6607 Comm: syz.3.265 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 126.302499][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.302519][ T6607] Call Trace: [ 126.302527][ T6607] [ 126.302536][ T6607] dump_stack_lvl+0x189/0x250 [ 126.302569][ T6607] ? __virt_addr_valid+0x1c8/0x5c0 [ 126.302600][ T6607] ? rcu_is_watching+0x15/0xb0 [ 126.302626][ T6607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.302654][ T6607] ? rcu_is_watching+0x15/0xb0 [ 126.302678][ T6607] ? lock_release+0x4b/0x3e0 [ 126.302698][ T6607] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 126.302730][ T6607] ? __virt_addr_valid+0x1c8/0x5c0 [ 126.302762][ T6607] ? __virt_addr_valid+0x4a5/0x5c0 [ 126.302793][ T6607] print_report+0xca/0x230 [ 126.302813][ T6607] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 126.302845][ T6607] kasan_report+0x118/0x150 [ 126.302865][ T6607] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 126.302900][ T6607] tcp_prune_ofo_queue+0x37e/0x6e0 [ 126.302935][ T6607] tcp_try_rmem_schedule+0xb6b/0x1830 [ 126.302974][ T6607] tcp_data_queue+0x4e3/0x6380 [ 126.303013][ T6607] ? __pfx_tcp_data_queue+0x10/0x10 [ 126.303056][ T6607] ? __pfx_tcp_urg+0x10/0x10 [ 126.303083][ T6607] ? read_tsc+0x9/0x20 [ 126.303106][ T6607] tcp_rcv_established+0xf9e/0x1eb0 [ 126.303146][ T6607] ? rt_is_expired+0x1c/0x2d0 [ 126.303174][ T6607] ? __pfx_tcp_rcv_established+0x10/0x10 [ 126.303202][ T6607] ? rt_is_expired+0x1c/0x2d0 [ 126.303225][ T6607] ? rt_is_expired+0x1c/0x2d0 [ 126.303248][ T6607] ? rt_is_expired+0x250/0x2d0 [ 126.303271][ T6607] ? __pfx_ipv4_dst_check+0x10/0x10 [ 126.303295][ T6607] ? __pfx_ipv4_dst_check+0x10/0x10 [ 126.303320][ T6607] tcp_v4_do_rcv+0xa23/0xce0 [ 126.303343][ T6607] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 126.303364][ T6607] __release_sock+0x21c/0x350 [ 126.303397][ T6607] release_sock+0x5f/0x1f0 [ 126.303416][ T6607] sk_stream_wait_memory+0x724/0xf70 [ 126.303458][ T6607] ? __pfx_sk_stream_wait_memory+0x10/0x10 [ 126.303488][ T6607] ? __pfx_woken_wake_function+0x10/0x10 [ 126.303513][ T6607] ? __tcp_push_pending_frames+0xd2/0x360 [ 126.303537][ T6607] ? tcp_push+0x40f/0x660 [ 126.303565][ T6607] tcp_sendmsg_locked+0x1c62/0x56d0 [ 126.303624][ T6607] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 126.303654][ T6607] ? __local_bh_enable_ip+0x12d/0x1c0 [ 126.303681][ T6607] ? __local_bh_enable_ip+0x12d/0x1c0 [ 126.303712][ T6607] tcp_sendmsg+0x2f/0x50 [ 126.303742][ T6607] __sock_sendmsg+0x19c/0x270 [ 126.303774][ T6607] __sys_sendto+0x3bd/0x520 [ 126.303798][ T6607] ? __pfx___sys_sendto+0x10/0x10 [ 126.303818][ T6607] ? do_futex+0x395/0x420 [ 126.303865][ T6607] ? rcu_is_watching+0x15/0xb0 [ 126.303892][ T6607] __x64_sys_sendto+0xde/0x100 [ 126.303917][ T6607] do_syscall_64+0xfa/0x3b0 [ 126.303938][ T6607] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.303957][ T6607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.303977][ T6607] ? clear_bhb_loop+0x60/0xb0 [ 126.304012][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.304032][ T6607] RIP: 0033:0x7f011458e929 [ 126.304060][ T6607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.304077][ T6607] RSP: 002b:00007f01154b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 126.304099][ T6607] RAX: ffffffffffffffda RBX: 00007f01147b5fa0 RCX: 00007f011458e929 [ 126.304115][ T6607] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 126.304137][ T6607] RBP: 00007f0114610b39 R08: 0000000000000000 R09: 0000000000000000 [ 126.304149][ T6607] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 126.304161][ T6607] R13: 0000000000000000 R14: 00007f01147b5fa0 R15: 00007fff123088f8 [ 126.304183][ T6607] [ 126.304191][ T6607] [ 126.309686][ T24] usb 2-1: config 15 has no interface number 0 [ 126.315577][ T6607] Allocated by task 6607: [ 126.315593][ T6607] kasan_save_track+0x3e/0x80 [ 126.315625][ T6607] __kasan_slab_alloc+0x6c/0x80 [ 126.315653][ T6607] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 126.315683][ T6607] __alloc_skb+0x112/0x2d0 [ 126.315701][ T6607] tcp_stream_alloc_skb+0x3d/0x340 [ 126.315729][ T6607] tcp_write_xmit+0xeec/0x67f0 [ 126.315750][ T6607] __tcp_push_pending_frames+0x97/0x360 [ 126.315772][ T6607] tcp_rcv_established+0x1012/0x1eb0 [ 126.719161][ T6607] tcp_v4_do_rcv+0xa23/0xce0 [ 126.723768][ T6607] tcp_v4_rcv+0x2676/0x2f00 [ 126.728277][ T6607] ip_protocol_deliver_rcu+0x221/0x440 [ 126.733747][ T6607] ip_local_deliver_finish+0x3bb/0x6f0 [ 126.739240][ T6607] NF_HOOK+0x30c/0x3a0 [ 126.743316][ T6607] NF_HOOK+0x30c/0x3a0 [ 126.747393][ T6607] __netif_receive_skb+0x143/0x380 [ 126.752518][ T6607] process_backlog+0x60e/0x14f0 [ 126.757372][ T6607] __napi_poll+0xc4/0x480 [ 126.761700][ T6607] net_rx_action+0x707/0xe30 [ 126.766292][ T6607] handle_softirqs+0x286/0x870 [ 126.771063][ T6607] do_softirq+0xec/0x180 [ 126.775316][ T6607] __local_bh_enable_ip+0x17d/0x1c0 [ 126.780520][ T6607] tcp_sendmsg+0x39/0x50 [ 126.784779][ T6607] __sock_sendmsg+0x19c/0x270 [ 126.789469][ T6607] ____sys_sendmsg+0x52d/0x830 [ 126.794242][ T6607] ___sys_sendmsg+0x21f/0x2a0 [ 126.798940][ T6607] __sys_sendmmsg+0x227/0x430 [ 126.803624][ T6607] __x64_sys_sendmmsg+0xa0/0xc0 [ 126.808484][ T6607] do_syscall_64+0xfa/0x3b0 [ 126.812995][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.818896][ T6607] [ 126.821226][ T6607] Freed by task 6607: [ 126.825209][ T6607] kasan_save_track+0x3e/0x80 [ 126.829898][ T6607] kasan_save_free_info+0x46/0x50 [ 126.834930][ T6607] __kasan_slab_free+0x62/0x70 [ 126.839708][ T6607] kmem_cache_free+0x18f/0x400 [ 126.844484][ T6607] tcp_prune_ofo_queue+0x198/0x6e0 [ 126.849610][ T6607] tcp_try_rmem_schedule+0xb6b/0x1830 [ 126.854995][ T6607] tcp_data_queue+0x4e3/0x6380 [ 126.859768][ T6607] tcp_rcv_established+0xf9e/0x1eb0 [ 126.865024][ T6607] tcp_v4_do_rcv+0xa23/0xce0 [ 126.869625][ T6607] __release_sock+0x21c/0x350 [ 126.874316][ T6607] release_sock+0x5f/0x1f0 [ 126.878739][ T6607] sk_stream_wait_memory+0x724/0xf70 [ 126.884037][ T6607] tcp_sendmsg_locked+0x1c62/0x56d0 [ 126.889261][ T6607] tcp_sendmsg+0x2f/0x50 [ 126.893515][ T6607] __sock_sendmsg+0x19c/0x270 [ 126.898207][ T6607] __sys_sendto+0x3bd/0x520 [ 126.902721][ T6607] __x64_sys_sendto+0xde/0x100 [ 126.907491][ T6607] do_syscall_64+0xfa/0x3b0 [ 126.912003][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.917905][ T6607] [ 126.920238][ T6607] The buggy address belongs to the object at ffff888072941400 [ 126.920238][ T6607] which belongs to the cache skbuff_fclone_cache of size 488 [ 126.934990][ T6607] The buggy address is located 464 bytes inside of [ 126.934990][ T6607] freed 488-byte region [ffff888072941400, ffff8880729415e8) [ 126.948793][ T6607] [ 126.951125][ T6607] The buggy address belongs to the physical page: [ 126.957536][ T6607] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72940 [ 126.966302][ T6607] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 126.974804][ T6607] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 126.982725][ T6607] page_type: f5(slab) [ 126.986720][ T6607] raw: 00fff00000000040 ffff8881412dea00 ffffea0001ca5200 0000000000000003 [ 126.995307][ T6607] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 127.003897][ T6607] head: 00fff00000000040 ffff8881412dea00 ffffea0001ca5200 0000000000000003 [ 127.012575][ T6607] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 127.021253][ T6607] head: 00fff00000000001 ffffea0001ca5001 00000000ffffffff 00000000ffffffff [ 127.029930][ T6607] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 127.038602][ T6607] page dumped because: kasan: bad access detected [ 127.045032][ T6607] page_owner tracks the page as allocated [ 127.050755][ T6607] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5834, tgid 5834 (syz-executor), ts 86389773007, free_ts 31075772327 [ 127.072121][ T6607] post_alloc_hook+0x240/0x2a0 [ 127.076904][ T6607] get_page_from_freelist+0x21e4/0x22c0 [ 127.082455][ T6607] __alloc_frozen_pages_noprof+0x181/0x370 [ 127.088266][ T6607] alloc_pages_mpol+0x232/0x4a0 [ 127.093127][ T6607] allocate_slab+0x8a/0x370 [ 127.097646][ T6607] ___slab_alloc+0xbeb/0x1410 [ 127.102339][ T6607] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 127.108248][ T6607] __alloc_skb+0x112/0x2d0 [ 127.112669][ T6607] tcp_stream_alloc_skb+0x3d/0x340 [ 127.117798][ T6607] tcp_sendmsg_locked+0xefc/0x56d0 [ 127.122976][ T6607] tcp_sendmsg+0x2f/0x50 [ 127.127232][ T6607] __sock_sendmsg+0x19c/0x270 [ 127.131932][ T6607] sock_write_iter+0x258/0x330 [ 127.136711][ T6607] vfs_write+0x54b/0xa90 [ 127.140963][ T6607] ksys_write+0x145/0x250 [ 127.145299][ T6607] do_syscall_64+0xfa/0x3b0 [ 127.149809][ T6607] page last free pid 1 tgid 1 stack trace: [ 127.155614][ T6607] __free_frozen_pages+0xbc4/0xd30 [ 127.160733][ T6607] free_contig_range+0x1bd/0x4a0 [ 127.165690][ T6607] destroy_args+0x7e/0x5d0 [ 127.170111][ T6607] debug_vm_pgtable+0x404/0x420 [ 127.174979][ T6607] do_one_initcall+0x233/0x820 [ 127.179761][ T6607] do_initcall_level+0x137/0x1f0 [ 127.184710][ T6607] do_initcalls+0x69/0xd0 [ 127.189062][ T6607] kernel_init_freeable+0x3d9/0x590 [ 127.194264][ T6607] kernel_init+0x1d/0x1d0 [ 127.198603][ T6607] ret_from_fork+0x3f9/0x770 [ 127.203209][ T6607] ret_from_fork_asm+0x1a/0x30 [ 127.207992][ T6607] [ 127.210348][ T6607] Memory state around the buggy address: [ 127.215978][ T6607] ffff888072941480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.224046][ T6607] ffff888072941500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.232121][ T6607] >ffff888072941580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 127.240196][ T6607] ^ [ 127.246966][ T6607] ffff888072941600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.255041][ T6607] ffff888072941680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.263115][ T6607] ================================================================== [ 127.282142][ T6607] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.289385][ T6607] CPU: 0 UID: 0 PID: 6607 Comm: syz.3.265 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 127.300771][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.310842][ T6607] Call Trace: [ 127.314132][ T6607] [ 127.317073][ T6607] dump_stack_lvl+0x99/0x250 [ 127.321684][ T6607] ? __asan_memcpy+0x40/0x70 [ 127.326295][ T6607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.331613][ T6607] ? __pfx__printk+0x10/0x10 [ 127.336241][ T6607] vpanic+0x281/0x750 [ 127.340245][ T6607] ? preempt_schedule+0xae/0xc0 [ 127.345123][ T6607] ? __pfx_vpanic+0x10/0x10 [ 127.349642][ T6607] ? preempt_schedule_common+0x83/0xd0 [ 127.355129][ T6607] ? preempt_schedule+0xae/0xc0 [ 127.360017][ T6607] ? __pfx_preempt_schedule+0x10/0x10 [ 127.365413][ T6607] panic+0xb9/0xc0 [ 127.369148][ T6607] ? __pfx_panic+0x10/0x10 [ 127.373577][ T6607] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 127.379488][ T6607] ? is_module_address+0x17/0xf0 [ 127.384451][ T6607] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 127.389764][ T6607] check_panic_on_warn+0x89/0xb0 [ 127.394750][ T6607] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 127.400060][ T6607] end_report+0x78/0x160 [ 127.404317][ T6607] kasan_report+0x129/0x150 [ 127.408840][ T6607] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 127.414154][ T6607] tcp_prune_ofo_queue+0x37e/0x6e0 [ 127.419296][ T6607] tcp_try_rmem_schedule+0xb6b/0x1830 [ 127.424695][ T6607] tcp_data_queue+0x4e3/0x6380 [ 127.429488][ T6607] ? __pfx_tcp_data_queue+0x10/0x10 [ 127.434711][ T6607] ? __pfx_tcp_urg+0x10/0x10 [ 127.439334][ T6607] ? read_tsc+0x9/0x20 [ 127.443420][ T6607] tcp_rcv_established+0xf9e/0x1eb0 [ 127.448643][ T6607] ? rt_is_expired+0x1c/0x2d0 [ 127.453352][ T6607] ? __pfx_tcp_rcv_established+0x10/0x10 [ 127.459018][ T6607] ? rt_is_expired+0x1c/0x2d0 [ 127.463727][ T6607] ? rt_is_expired+0x1c/0x2d0 [ 127.468441][ T6607] ? rt_is_expired+0x250/0x2d0 [ 127.473232][ T6607] ? __pfx_ipv4_dst_check+0x10/0x10 [ 127.478452][ T6607] ? __pfx_ipv4_dst_check+0x10/0x10 [ 127.483691][ T6607] tcp_v4_do_rcv+0xa23/0xce0 [ 127.488316][ T6607] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 127.493439][ T6607] __release_sock+0x21c/0x350 [ 127.498142][ T6607] release_sock+0x5f/0x1f0 [ 127.502573][ T6607] sk_stream_wait_memory+0x724/0xf70 [ 127.507896][ T6607] ? __pfx_sk_stream_wait_memory+0x10/0x10 [ 127.513737][ T6607] ? __pfx_woken_wake_function+0x10/0x10 [ 127.519395][ T6607] ? __tcp_push_pending_frames+0xd2/0x360 [ 127.525147][ T6607] ? tcp_push+0x40f/0x660 [ 127.529502][ T6607] tcp_sendmsg_locked+0x1c62/0x56d0 [ 127.534754][ T6607] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 127.540333][ T6607] ? __local_bh_enable_ip+0x12d/0x1c0 [ 127.545727][ T6607] ? __local_bh_enable_ip+0x12d/0x1c0 [ 127.551117][ T6607] tcp_sendmsg+0x2f/0x50 [ 127.555375][ T6607] __sock_sendmsg+0x19c/0x270 [ 127.560076][ T6607] __sys_sendto+0x3bd/0x520 [ 127.564592][ T6607] ? __pfx___sys_sendto+0x10/0x10 [ 127.569623][ T6607] ? do_futex+0x395/0x420 [ 127.573988][ T6607] ? rcu_is_watching+0x15/0xb0 [ 127.578767][ T6607] __x64_sys_sendto+0xde/0x100 [ 127.583548][ T6607] do_syscall_64+0xfa/0x3b0 [ 127.588062][ T6607] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.593273][ T6607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.599350][ T6607] ? clear_bhb_loop+0x60/0xb0 [ 127.604042][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.609965][ T6607] RIP: 0033:0x7f011458e929 [ 127.614389][ T6607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.634015][ T6607] RSP: 002b:00007f01154b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 127.642457][ T6607] RAX: ffffffffffffffda RBX: 00007f01147b5fa0 RCX: 00007f011458e929 [ 127.650442][ T6607] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 127.658427][ T6607] RBP: 00007f0114610b39 R08: 0000000000000000 R09: 0000000000000000 [ 127.666405][ T6607] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 127.674384][ T6607] R13: 0000000000000000 R14: 00007f01147b5fa0 R15: 00007fff123088f8 [ 127.682374][ T6607] [ 127.685727][ T6607] Kernel Offset: disabled [ 127.690053][ T6607] Rebooting in 86400 seconds..