last executing test programs: 11.458073734s ago: executing program 2 (id=341): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600894f00"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x0, 0x10}, 0xc) 10.415947628s ago: executing program 2 (id=343): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600894f0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 9.463033485s ago: executing program 2 (id=344): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 9.40627562s ago: executing program 0 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x100, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xe4, 0xc5, "fb4d51a2780bac69375b19ebf04b50693d2fa9b138a0fb817677df3588e36279f4fe0c6d441d91468f8ff2b433295589d887412cde4461a13ab7aac0d2d34905d1b0a0c3f141738116207d3b96f3d8f3346647c8ba346faacada6798e4557f02e192ee5a9126e56c22b8a1921e2325f051966b802cdef25b95063995626f3c8dd5152c43bdaa4afce5798c194bee5f702095cfb376733e295e936c0db8cbd9e321ab208968e43804aece6d8bcbd7f50b03bcb05b0c5bafba58e05a64e971bc1f46f872b9fd54739ad61f673b589f252a6be632764c350cd504f9d62ffc4ae6b8"}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x400c4) 9.222163485s ago: executing program 0 (id=346): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x0) 8.577657257s ago: executing program 1 (id=347): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init() ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) 8.480822395s ago: executing program 3 (id=348): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(0xffffffffffffffff) 7.496001564s ago: executing program 0 (id=349): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b09022400010000000009040000"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000300)={'syz1\x00', {0x0, 0x0, 0x2}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x87, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x514], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffff7, 0x0, 0x2, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x871], [0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xd, 0x10000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 7.017811483s ago: executing program 1 (id=350): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d030000000000000000"], 0x0, 0x4e}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x23, 0x0, 0x6, 0x2, &(0x7f0000000640), 0x8, 0x0, 0x0, {0x1}}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/130, 0x82}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/172, 0xac}], 0x3, &(0x7f0000000780)=""/244, 0xf4}, 0x4}, {{&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000009c0)=""/201, 0xc9}, {&(0x7f0000000b40)=""/210, 0xd2}, {&(0x7f0000000c40)=""/155, 0x9b}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/199, 0xc7}, {&(0x7f0000000f40)=""/87, 0x57}], 0xa}, 0x3}, {{&(0x7f0000001080)=@rc, 0x80, &(0x7f0000002800)=[{&(0x7f0000002140)=""/222, 0xde}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000002240)=""/136, 0x88}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002400)=""/126, 0x7e}, {&(0x7f0000002480)=""/95, 0x5f}, {&(0x7f0000002500)=""/158, 0x9e}, {&(0x7f00000025c0)=""/174, 0xae}, {&(0x7f0000002680)=""/65, 0x41}, {&(0x7f0000002700)=""/203, 0xcb}], 0xa}, 0xff}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f00000028c0)=""/111, 0x6f}], 0x2, &(0x7f0000002940)=""/106, 0x6a}, 0x4}, {{&(0x7f00000029c0)=@un=@abs, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002a40)=""/157, 0x9d}, {&(0x7f0000002b00)=""/87, 0x57}, {&(0x7f0000002b80)=""/226, 0xe2}, {&(0x7f00000006c0)=""/24, 0x18}, {&(0x7f0000002c80)=""/125, 0x7d}, {&(0x7f0000002d00)=""/110, 0x6e}], 0x6, &(0x7f0000002e00)=""/187, 0xbb}, 0x5}], 0x5, 0x120, &(0x7f0000003040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) 6.748266595s ago: executing program 3 (id=351): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='xprtrdma_op_set_cto\x00', r0, 0x0, 0x81}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x88000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xffffffffffffff1d) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000200), 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r6, &(0x7f00000005c0)="e95015e07c5ecb4b1637c768a6b3ffd9e8b2a26c6be65e0f9ee49a09033331929544383e7822e5d6b4f00a97bb9bbb7d253286f29b6685", &(0x7f00000006c0)=""/174}, 0x20) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0xb, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0xb, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x990}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.132087235s ago: executing program 2 (id=352): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600894f00"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x0, 0x10}, 0xc) 4.978563678s ago: executing program 3 (id=353): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600894f0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 3.898030496s ago: executing program 1 (id=354): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.648673285s ago: executing program 2 (id=355): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.508858567s ago: executing program 0 (id=356): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = epoll_create1(0x0) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() 3.506828137s ago: executing program 3 (id=357): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000b31000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000, 0x2}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000200)={"1b00", 0x3, 0x5, 0x2, 0x6397, 0x0, "0400b7e7a2aac9779bf500", "20000100", "032000", "18b637c7", ["8bbb00fda8e45cfe00000900", "ab5286400300000000008516", "400000000000000000fe4800", "000b000000000000001000"]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0xa6) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000540)=[{0x3, 0x0, 0x0, 0x7fff7ffb}]}) 2.746855379s ago: executing program 1 (id=358): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init() ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) 2.2332017s ago: executing program 0 (id=359): socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) 2.11412453s ago: executing program 3 (id=360): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(0xffffffffffffffff) 1.9801543s ago: executing program 0 (id=361): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 1.339228442s ago: executing program 1 (id=362): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='xprtrdma_op_set_cto\x00', r0, 0x0, 0x81}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x88000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xffffffffffffff1d) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000200), 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r6, &(0x7f00000005c0)="e95015e07c5ecb4b1637c768a6b3ffd9e8b2a26c6be65e0f9ee49a09033331929544383e7822e5d6b4f00a97bb9bbb7d253286f29b6685", &(0x7f00000006c0)=""/174}, 0x20) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0xb, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0xb, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x990}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 254.42852ms ago: executing program 2 (id=363): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d030000000000000000"], 0x0, 0x4e}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x23, 0x0, 0x6, 0x2, &(0x7f0000000640), 0x8, 0x0, 0x0, {0x1}}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/130, 0x82}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/172, 0xac}], 0x3, &(0x7f0000000780)=""/244, 0xf4}, 0x4}, {{&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000009c0)=""/201, 0xc9}, {&(0x7f0000000b40)=""/210, 0xd2}, {&(0x7f0000000c40)=""/155, 0x9b}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/199, 0xc7}, {&(0x7f0000000f40)=""/87, 0x57}], 0xa}, 0x3}, {{&(0x7f0000001080)=@rc, 0x80, &(0x7f0000002800)=[{&(0x7f0000002140)=""/222, 0xde}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000002240)=""/136, 0x88}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002400)=""/126, 0x7e}, {&(0x7f0000002480)=""/95, 0x5f}, {&(0x7f0000002500)=""/158, 0x9e}, {&(0x7f00000025c0)=""/174, 0xae}, {&(0x7f0000002680)=""/65, 0x41}, {&(0x7f0000002700)=""/203, 0xcb}], 0xa}, 0xff}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f00000028c0)=""/111, 0x6f}], 0x2, &(0x7f0000002940)=""/106, 0x6a}, 0x4}, {{&(0x7f00000029c0)=@un=@abs, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002a40)=""/157, 0x9d}, {&(0x7f0000002b00)=""/87, 0x57}, {&(0x7f0000002b80)=""/226, 0xe2}, {&(0x7f00000006c0)=""/24, 0x18}, {&(0x7f0000002c80)=""/125, 0x7d}, {&(0x7f0000002d00)=""/110, 0x6e}], 0x6, &(0x7f0000002e00)=""/187, 0xbb}, 0x5}], 0x5, 0x120, &(0x7f0000003040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) 72.400535ms ago: executing program 1 (id=364): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600894f00"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x0, 0x10}, 0xc) 0s ago: executing program 3 (id=365): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b09022400010000000009040000"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000300)={'syz1\x00', {0x0, 0x0, 0x2}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x87, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x514], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffff7, 0x0, 0x2, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x871], [0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xd, 0x10000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. syzkaller login: [ 76.084280][ T5781] cgroup: Unknown subsys name 'net' [ 76.250414][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.926072][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.148443][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.158630][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.159996][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.176968][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.184433][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.192722][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.193431][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.200178][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.217104][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.225025][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.228710][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.232472][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.240882][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.251313][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.253723][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.262923][ T5806] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.268209][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.274286][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.282897][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.288921][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.295549][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.311508][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.319757][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.327198][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.867048][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 80.897844][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 81.048018][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.055541][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.063133][ T5793] bridge_slave_0: entered allmulticast mode [ 81.070147][ T5793] bridge_slave_0: entered promiscuous mode [ 81.078640][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 81.100841][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 81.117290][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.125042][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.132371][ T5793] bridge_slave_1: entered allmulticast mode [ 81.139335][ T5793] bridge_slave_1: entered promiscuous mode [ 81.171556][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.179048][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.186739][ T5790] bridge_slave_0: entered allmulticast mode [ 81.193889][ T5790] bridge_slave_0: entered promiscuous mode [ 81.209569][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.217231][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.224654][ T5790] bridge_slave_1: entered allmulticast mode [ 81.231594][ T5790] bridge_slave_1: entered promiscuous mode [ 81.310196][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.349983][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.393525][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.419062][ T5793] team0: Port device team_slave_0 added [ 81.451061][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.462407][ T5793] team0: Port device team_slave_1 added [ 81.468486][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.476133][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.483406][ T5792] bridge_slave_0: entered allmulticast mode [ 81.490344][ T5792] bridge_slave_0: entered promiscuous mode [ 81.546484][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.554902][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.562131][ T5792] bridge_slave_1: entered allmulticast mode [ 81.569358][ T5792] bridge_slave_1: entered promiscuous mode [ 81.576195][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.584219][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.591413][ T5791] bridge_slave_0: entered allmulticast mode [ 81.599214][ T5791] bridge_slave_0: entered promiscuous mode [ 81.622946][ T5790] team0: Port device team_slave_0 added [ 81.630313][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.637568][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.663955][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.688570][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.695998][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.703770][ T5791] bridge_slave_1: entered allmulticast mode [ 81.710699][ T5791] bridge_slave_1: entered promiscuous mode [ 81.719437][ T5790] team0: Port device team_slave_1 added [ 81.738418][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.745487][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.771517][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.831976][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.839005][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.865331][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.881176][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.894819][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.923172][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.933636][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.941083][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.968097][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.011619][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.066511][ T5793] hsr_slave_0: entered promiscuous mode [ 82.074540][ T5793] hsr_slave_1: entered promiscuous mode [ 82.136260][ T5792] team0: Port device team_slave_0 added [ 82.150208][ T5791] team0: Port device team_slave_0 added [ 82.160622][ T5791] team0: Port device team_slave_1 added [ 82.224386][ T5792] team0: Port device team_slave_1 added [ 82.253015][ T5790] hsr_slave_0: entered promiscuous mode [ 82.259637][ T5790] hsr_slave_1: entered promiscuous mode [ 82.266954][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.275067][ T5790] Cannot create hsr debugfs directory [ 82.368478][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.376278][ T5795] Bluetooth: hci1: command tx timeout [ 82.376298][ T5806] Bluetooth: hci3: command tx timeout [ 82.382323][ T5795] Bluetooth: hci2: command tx timeout [ 82.387912][ T50] Bluetooth: hci0: command tx timeout [ 82.398601][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.425940][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.475185][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.482403][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.508848][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.521619][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.529936][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.557205][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.586741][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.598308][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.624691][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.712450][ T5792] hsr_slave_0: entered promiscuous mode [ 82.718903][ T5792] hsr_slave_1: entered promiscuous mode [ 82.725530][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.733181][ T5792] Cannot create hsr debugfs directory [ 82.771586][ T5791] hsr_slave_0: entered promiscuous mode [ 82.779798][ T5791] hsr_slave_1: entered promiscuous mode [ 82.786652][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.795166][ T5791] Cannot create hsr debugfs directory [ 83.033729][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.046508][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.060979][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.114220][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.216998][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.233293][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.249148][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.259219][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.383567][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.395297][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.406554][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.416953][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.496113][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.517876][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.528977][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.539021][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.591307][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.606213][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.659505][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.684807][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.692207][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.711072][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.750705][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.757854][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.768180][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.775360][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.816787][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.823982][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.875114][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.938768][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.006916][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.014188][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.048232][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.055406][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.094147][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.190208][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.211699][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.244874][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.252101][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.296020][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.303230][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.449200][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.456289][ T5107] Bluetooth: hci2: command tx timeout [ 84.456580][ T50] Bluetooth: hci3: command tx timeout [ 84.462728][ T5107] Bluetooth: hci1: command tx timeout [ 84.473282][ T50] Bluetooth: hci0: command tx timeout [ 84.495532][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.640930][ T5793] veth0_vlan: entered promiscuous mode [ 84.698364][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.745497][ T5793] veth1_vlan: entered promiscuous mode [ 84.760228][ T5790] veth0_vlan: entered promiscuous mode [ 84.784636][ T5790] veth1_vlan: entered promiscuous mode [ 84.861319][ T5793] veth0_macvtap: entered promiscuous mode [ 84.894147][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.903262][ T5793] veth1_macvtap: entered promiscuous mode [ 84.918673][ T5792] veth0_vlan: entered promiscuous mode [ 84.950250][ T5790] veth0_macvtap: entered promiscuous mode [ 84.960753][ T5792] veth1_vlan: entered promiscuous mode [ 84.971368][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.984537][ T5790] veth1_macvtap: entered promiscuous mode [ 85.019296][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.051495][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.061200][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.070484][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.079501][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.119738][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.130997][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.146793][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.180517][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.195282][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.206927][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.219076][ T5792] veth0_macvtap: entered promiscuous mode [ 85.251545][ T5792] veth1_macvtap: entered promiscuous mode [ 85.259800][ T5791] veth0_vlan: entered promiscuous mode [ 85.272709][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.281455][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.290785][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.300620][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.328137][ T5791] veth1_vlan: entered promiscuous mode [ 85.374370][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.385285][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.396271][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.407010][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.419884][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.460148][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.471273][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.481508][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.493385][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.505065][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.567828][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.569986][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.579122][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.590950][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.607868][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.619048][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.662691][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.669426][ T5791] veth0_macvtap: entered promiscuous mode [ 85.670524][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.741318][ T5791] veth1_macvtap: entered promiscuous mode [ 85.751153][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.754901][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.777658][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.802065][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.810649][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.827327][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.837288][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.847783][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.857846][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.869064][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.880793][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.928110][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.939444][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.951173][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.962331][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.972796][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.983803][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.996458][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.014771][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.030164][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.041929][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.050663][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.105422][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.139932][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.277991][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.312300][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.380459][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.416323][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.532670][ T5107] Bluetooth: hci1: command tx timeout [ 86.538165][ T5107] Bluetooth: hci0: command tx timeout [ 86.543728][ T50] Bluetooth: hci3: command tx timeout [ 86.544142][ T5806] Bluetooth: hci2: command tx timeout [ 86.580583][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.598968][ T5888] input: syz1 as /devices/virtual/input/input5 [ 86.627579][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.903224][ T5900] netlink: 'syz.0.7': attribute type 3 has an invalid length. [ 87.026340][ T5905] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 87.842232][ T5879] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.283322][ T5879] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 88.696811][ T5917] mmap: syz.0.9 (5917) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.711452][ T5806] Bluetooth: hci0: command tx timeout [ 88.717368][ T5806] Bluetooth: hci3: command tx timeout [ 88.723282][ T5806] Bluetooth: hci1: command tx timeout [ 88.729141][ T5806] Bluetooth: hci2: command tx timeout [ 88.737432][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.106399][ T5879] usb 4-1: config 0 descriptor?? [ 89.165172][ T5879] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 89.808787][ T5879] usb 4-1: USB disconnect, device number 2 [ 89.888973][ T5923] netlink: 666 bytes leftover after parsing attributes in process `syz.0.11'. [ 90.342975][ T967] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.682181][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 90.765371][ T967] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 90.775249][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.787061][ T967] usb 3-1: Product: syz [ 90.791331][ T967] usb 3-1: Manufacturer: syz [ 90.799041][ T967] usb 3-1: SerialNumber: syz [ 90.801164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.816240][ T967] usb 3-1: config 0 descriptor?? [ 90.852547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.854936][ T967] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 91.071965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 91.241980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 91.295061][ T967] usb 3-1: clie_3_5_startup: get interface number failed: -32 [ 91.303049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.335476][ T967] visor: probe of 3-1:0.0 failed with error -32 [ 91.361984][ T967] usb 3-1: USB disconnect, device number 2 [ 91.477363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.668716][ T5944] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.722706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 92.146964][ T8] cfg80211: failed to load regulatory.db [ 92.399368][ T5949] Zero length message leads to an empty skb [ 94.031238][ T5965] input: syz1 as /devices/virtual/input/input6 [ 94.040720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.112291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.129022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.210920][ T5977] netlink: 666 bytes leftover after parsing attributes in process `syz.0.26'. [ 97.561050][ T6001] bpq0: entered promiscuous mode [ 101.907819][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.41'. [ 103.591400][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.982114][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 104.000617][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 104.038600][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 104.052522][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 104.112885][ T9] usb 2-1: Product: syz [ 104.127864][ T9] usb 2-1: Manufacturer: syz [ 104.137824][ T9] usb 2-1: SerialNumber: syz [ 104.155490][ T9] usb 2-1: config 0 descriptor?? [ 104.169982][ T6041] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 104.189643][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 104.207999][ T9] hub: probe of 2-1:0.0 failed with error -5 [ 104.285896][ T5844] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.482098][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 104.496842][ T5844] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 104.546753][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.572946][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.619186][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.643826][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.678645][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.690231][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.704225][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.716941][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.731435][ T5844] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 104.744510][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 104.752698][ T5844] usb 1-1: SerialNumber: syz [ 104.760726][ T5844] usb 1-1: config 0 descriptor?? [ 104.780569][ T5844] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 104.823354][ T6051] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.991524][ T6048] input: syz1 as /devices/virtual/input/input8 [ 105.037011][ T5147] bcm5974 1-1:0.0: could not read from device [ 105.062481][ T5147] bcm5974 1-1:0.0: could not read from device [ 105.091396][ T5147] bcm5974 1-1:0.0: could not read from device [ 105.118641][ T5147] bcm5974 1-1:0.0: could not read from device [ 105.120836][ T5844] usb 1-1: USB disconnect, device number 2 [ 105.588048][ T6062] netlink: 666 bytes leftover after parsing attributes in process `syz.2.50'. [ 107.062949][ T5796] usb 2-1: USB disconnect, device number 2 [ 108.999546][ T6105] input: syz1 as /devices/virtual/input/input9 [ 109.803065][ T6108] netlink: 666 bytes leftover after parsing attributes in process `syz.2.62'. [ 111.782077][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.974274][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 111.985977][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 112.009710][ T8] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 112.028949][ T8] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 112.042959][ T8] usb 4-1: Product: syz [ 112.047252][ T8] usb 4-1: Manufacturer: syz [ 112.053753][ T8] usb 4-1: SerialNumber: syz [ 112.069537][ T8] usb 4-1: config 0 descriptor?? [ 112.093268][ T6118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.108478][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 112.115587][ T8] hub: probe of 4-1:0.0 failed with error -5 [ 112.146336][ T6133] input: syz1 as /devices/virtual/input/input10 [ 115.342413][ T5796] usb 4-1: USB disconnect, device number 3 [ 115.572508][ T6167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 115.675884][ T6162] kvm: pic: non byte write [ 116.428757][ T6178] input: syz1 as /devices/virtual/input/input11 [ 118.262697][ T5834] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.512138][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 118.572665][ T5834] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 118.720285][ T5834] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 119.377925][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 119.386429][ T5834] usb 1-1: Product: syz [ 119.390686][ T5834] usb 1-1: Manufacturer: syz [ 119.395667][ T5834] usb 1-1: SerialNumber: syz [ 119.435265][ T5834] usb 1-1: config 0 descriptor?? [ 119.509820][ T6188] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.563252][ T5834] hub 1-1:0.0: bad descriptor, ignoring hub [ 119.712066][ T5834] hub: probe of 1-1:0.0 failed with error -5 [ 119.797594][ T6198] netlink: 566 bytes leftover after parsing attributes in process `syz.3.87'. [ 120.242296][ T5834] usb 1-1: USB disconnect, device number 3 [ 121.243938][ T5834] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.514489][ T5834] usb 3-1: device descriptor read/64, error -71 [ 121.892429][ T5834] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.105485][ T5834] usb 3-1: device descriptor read/64, error -71 [ 122.263046][ T5834] usb usb3-port1: attempt power cycle [ 122.796693][ T6229] netlink: 566 bytes leftover after parsing attributes in process `syz.0.98'. [ 122.847334][ T5834] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.937852][ T5834] usb 3-1: device descriptor read/8, error -71 [ 123.212392][ T5834] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.271237][ T5834] usb 3-1: device descriptor read/8, error -71 [ 123.432974][ T5834] usb usb3-port1: unable to enumerate USB device [ 124.462235][ T5834] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.990046][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 125.116639][ T5834] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 125.137271][ T5834] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 125.146597][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 125.160260][ T5834] usb 2-1: Product: syz [ 125.164842][ T5834] usb 2-1: Manufacturer: syz [ 125.169669][ T5834] usb 2-1: SerialNumber: syz [ 125.180710][ T5834] usb 2-1: config 0 descriptor?? [ 125.188271][ T6244] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.269335][ T5834] hub 2-1:0.0: bad descriptor, ignoring hub [ 125.288063][ T5834] hub: probe of 2-1:0.0 failed with error -5 [ 128.283576][ T8] usb 2-1: USB disconnect, device number 3 [ 128.320401][ T6269] netlink: 666 bytes leftover after parsing attributes in process `syz.2.110'. [ 128.812176][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.953631][ T6285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.113'. [ 128.972005][ T8] usb 3-1: device descriptor read/64, error -71 [ 129.904883][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.081971][ T8] usb 3-1: device descriptor read/64, error -71 [ 130.214713][ T8] usb usb3-port1: attempt power cycle [ 130.272994][ T5844] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.432049][ T5844] usb 1-1: device descriptor read/64, error -71 [ 130.652062][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.693898][ T8] usb 3-1: device descriptor read/8, error -71 [ 130.732047][ T5844] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.892118][ T5844] usb 1-1: device descriptor read/64, error -71 [ 130.962056][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 131.002575][ T8] usb 3-1: device descriptor read/8, error -71 [ 131.012161][ T5844] usb usb1-port1: attempt power cycle [ 131.122237][ T8] usb usb3-port1: unable to enumerate USB device [ 131.432022][ T5844] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.494956][ T5844] usb 1-1: device descriptor read/8, error -71 [ 131.674786][ T6299] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 131.782595][ T5844] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.824550][ T5844] usb 1-1: device descriptor read/8, error -71 [ 131.892073][ T967] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.007488][ T5844] usb usb1-port1: unable to enumerate USB device [ 132.112125][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 132.124430][ T967] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 132.148827][ T6301] netlink: 666 bytes leftover after parsing attributes in process `syz.3.120'. [ 132.160017][ T967] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 132.169324][ T967] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 132.180706][ T967] usb 3-1: Product: syz [ 132.185287][ T967] usb 3-1: Manufacturer: syz [ 132.190008][ T967] usb 3-1: SerialNumber: syz [ 132.202727][ T967] usb 3-1: config 0 descriptor?? [ 132.218760][ T6298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.250257][ T967] hub 3-1:0.0: bad descriptor, ignoring hub [ 132.283488][ T967] hub: probe of 3-1:0.0 failed with error -5 [ 133.096418][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.104358][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.287367][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.125'. [ 134.432300][ T5796] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.622005][ T5796] usb 4-1: device descriptor read/64, error -71 [ 134.862260][ T967] usb 3-1: USB disconnect, device number 11 [ 134.922032][ T5796] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.081985][ T5796] usb 4-1: device descriptor read/64, error -71 [ 135.885589][ T5796] usb usb4-port1: attempt power cycle [ 136.322035][ T5796] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.484704][ T5796] usb 4-1: device descriptor read/8, error -71 [ 136.563039][ T6341] bpq0: left promiscuous mode [ 136.567908][ T6341] bpq0: entered allmulticast mode [ 136.799161][ T5796] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.911822][ T5796] usb 4-1: device descriptor read/8, error -71 [ 137.386143][ T6344] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 137.462344][ T5796] usb usb4-port1: unable to enumerate USB device [ 138.175149][ T6359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'. [ 139.587694][ T5879] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.782022][ T5879] usb 1-1: device descriptor read/64, error -71 [ 140.683800][ T5879] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.892389][ T5879] usb 1-1: device descriptor read/64, error -71 [ 141.042217][ T5879] usb usb1-port1: attempt power cycle [ 141.492342][ T5879] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 141.524532][ T5879] usb 1-1: device descriptor read/8, error -71 [ 142.162114][ T5879] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 142.204859][ T5879] usb 1-1: device descriptor read/8, error -71 [ 142.332329][ T5879] usb usb1-port1: unable to enumerate USB device [ 142.682417][ T6404] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 143.367154][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 145.872001][ T5844] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 146.055361][ T5844] usb 3-1: device descriptor read/64, error -71 [ 146.331983][ T5844] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 146.522215][ T5844] usb 3-1: device descriptor read/64, error -71 [ 146.642544][ T5844] usb usb3-port1: attempt power cycle [ 147.082302][ T5844] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 147.112739][ T5844] usb 3-1: device descriptor read/8, error -71 [ 147.422093][ T5844] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 147.488732][ T5844] usb 3-1: device descriptor read/8, error -71 [ 147.642268][ T5844] usb usb3-port1: unable to enumerate USB device [ 147.961976][ T5844] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 148.181935][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 148.195119][ T5844] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.209945][ T5844] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 148.232074][ T5844] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 148.244504][ T5844] usb 1-1: config 1 interface 0 has no altsetting 0 [ 148.254804][ T5844] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 148.272077][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.280106][ T5844] usb 1-1: Product: syz [ 148.286924][ T5844] usb 1-1: Manufacturer: syz [ 148.292694][ T5844] usb 1-1: SerialNumber: syz [ 148.297760][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.306834][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.315695][ T6452] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 148.411976][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.570360][ T6447] trusted_key: encrypted_key: insufficient parameters specified [ 148.602040][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 148.611290][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 148.634726][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 148.685114][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.746022][ T8] usb 2-1: Product: syz [ 148.790301][ T8] usb 2-1: Manufacturer: syz [ 148.834428][ T8] usb 2-1: SerialNumber: syz [ 148.870642][ T8] usb 2-1: config 0 descriptor?? [ 148.908975][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 150.693313][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.845103][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.492547][ T6448] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.501532][ T6448] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.514657][ T6448] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.524937][ T6448] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.795549][ T6464] bpq0: entered promiscuous mode [ 151.800600][ T6464] bpq0: left allmulticast mode [ 152.063997][ T8] gspca_zc3xx: reg_r err -32 [ 152.068288][ T5844] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 152.114555][ T5147] bcm5974 1-1:1.0: could not read from device [ 152.130029][ T5844] usb 1-1: USB disconnect, device number 12 [ 152.231497][ T6479] netlink: 666 bytes leftover after parsing attributes in process `syz.0.169'. [ 152.682201][ T8] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 152.797460][ T8] gspca_zc3xx: probe of 2-1:0.0 failed with error -32 [ 153.144523][ T5844] usb 2-1: USB disconnect, device number 4 [ 153.192026][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 153.498468][ T8] usb 1-1: device descriptor read/64, error -71 [ 154.138964][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 154.462487][ T8] usb 1-1: device descriptor read/64, error -71 [ 154.582221][ T8] usb usb1-port1: attempt power cycle [ 155.647537][ T6503] bpq0: left promiscuous mode [ 155.652575][ T6503] bpq0: entered allmulticast mode [ 155.692113][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 155.745812][ T8] usb 1-1: device descriptor read/8, error -71 [ 156.052294][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 156.500105][ T8] usb 1-1: device descriptor read/8, error -71 [ 156.632248][ T8] usb usb1-port1: unable to enumerate USB device [ 157.629677][ T6510] bpq0: entered promiscuous mode [ 157.640848][ T6510] bpq0: left allmulticast mode [ 160.826086][ T6547] bpq0: left promiscuous mode [ 160.830920][ T6547] bpq0: entered allmulticast mode [ 161.648675][ T6549] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 164.105828][ T6565] bpq0: entered promiscuous mode [ 164.110960][ T6565] bpq0: left allmulticast mode [ 164.479270][ T6570] binder: 6569:6570 ioctl 4018620d 0 returned -22 [ 166.194169][ T6591] bpq0: left promiscuous mode [ 166.198992][ T6591] bpq0: entered allmulticast mode [ 167.246673][ T6595] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 169.473808][ T6605] bpq0: entered promiscuous mode [ 169.478825][ T6605] bpq0: left allmulticast mode [ 169.775141][ T6617] binder: 6616:6617 ioctl 4018620d 0 returned -22 [ 169.931194][ T6621] bpq0: left promiscuous mode [ 169.936090][ T6621] bpq0: entered allmulticast mode [ 173.135255][ T6643] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 174.131772][ T6651] bpq0: entered promiscuous mode [ 174.148739][ T6651] bpq0: left allmulticast mode [ 174.553157][ T6660] bpq0: left promiscuous mode [ 174.558041][ T6660] bpq0: entered allmulticast mode [ 175.399249][ T6662] binder: 6661:6662 ioctl 4018620d 0 returned -22 [ 177.981449][ T6686] bpq0: entered promiscuous mode [ 177.987580][ T6686] bpq0: left allmulticast mode [ 178.767403][ T6690] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 180.106570][ T6701] bpq0: left promiscuous mode [ 180.118928][ T6701] bpq0: entered allmulticast mode [ 180.130431][ T6705] binder: BINDER_SET_CONTEXT_MGR already set [ 180.137851][ T6705] binder: 6704:6705 ioctl 4018620d 200000004a80 returned -16 [ 181.068258][ T6722] kvm: pic: non byte write [ 183.407847][ T6731] bpq0: entered promiscuous mode [ 183.498506][ T6731] bpq0: left allmulticast mode [ 183.879445][ T6741] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 184.141975][ T5178] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.395008][ T5178] usb 4-1: device descriptor read/64, error -71 [ 184.503614][ T6751] bpq0: left promiscuous mode [ 184.508456][ T6751] bpq0: entered allmulticast mode [ 185.401940][ T5178] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.155067][ T5178] usb 4-1: device descriptor read/64, error -71 [ 186.272621][ T5178] usb usb4-port1: attempt power cycle [ 186.768759][ T6762] binder: BINDER_SET_CONTEXT_MGR already set [ 186.775105][ T6762] binder: 6761:6762 ioctl 4018620d 200000004a80 returned -16 [ 186.821982][ T5178] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 186.853547][ T5178] usb 4-1: device descriptor read/8, error -71 [ 187.162087][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 187.410261][ T9] usb 1-1: device descriptor read/64, error -71 [ 187.490088][ T6773] bpq0: entered promiscuous mode [ 187.495433][ T6773] bpq0: left allmulticast mode [ 188.499697][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 188.671981][ T9] usb 1-1: device descriptor read/64, error -71 [ 188.792315][ T9] usb usb1-port1: attempt power cycle [ 189.961993][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 190.118366][ T6787] bpq0: left promiscuous mode [ 190.123217][ T6787] bpq0: entered allmulticast mode [ 190.913643][ T9] usb 1-1: device not accepting address 19, error -71 [ 191.418083][ T6798] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 191.472053][ T6471] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 191.662651][ T6471] usb 2-1: Using ep0 maxpacket: 8 [ 191.679601][ T6471] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 191.716786][ T6471] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 191.738002][ T6471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.762129][ T6471] usb 2-1: Product: syz [ 191.777573][ T6471] usb 2-1: Manufacturer: syz [ 191.787023][ T6471] usb 2-1: SerialNumber: syz [ 191.927035][ T6471] usb 2-1: config 0 descriptor?? [ 191.964965][ T6471] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 193.732608][ T6810] bpq0: entered promiscuous mode [ 193.737636][ T6810] bpq0: left allmulticast mode [ 193.861973][ T967] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 194.566060][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.573737][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.653587][ T6812] binder: BINDER_SET_CONTEXT_MGR already set [ 194.659803][ T6812] binder: 6811:6812 ioctl 4018620d 200000004a80 returned -16 [ 194.692027][ T967] usb 3-1: device descriptor read/64, error -71 [ 194.992015][ T967] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 195.152128][ T967] usb 3-1: device descriptor read/64, error -71 [ 195.256058][ T6471] gspca_zc3xx: reg_r err -32 [ 195.282590][ T967] usb usb3-port1: attempt power cycle [ 195.692772][ T967] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 195.762686][ T967] usb 3-1: device descriptor read/8, error -71 [ 195.821944][ T6467] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 195.882036][ T6471] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 195.930134][ T6824] bpq0: left promiscuous mode [ 195.935050][ T6824] bpq0: entered allmulticast mode [ 196.012084][ T6467] usb 1-1: Using ep0 maxpacket: 16 [ 196.039304][ T6467] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 196.087837][ T6467] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 196.101506][ T6467] usb 1-1: can't read configurations, error -61 [ 196.298600][ T6467] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 196.551971][ T967] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 196.554809][ T6467] usb 1-1: Using ep0 maxpacket: 16 [ 196.672129][ T6467] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 196.736164][ T6471] gspca_zc3xx: probe of 2-1:0.0 failed with error -32 [ 196.750559][ T6471] usb 2-1: USB disconnect, device number 5 [ 196.770487][ T6467] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 196.829417][ T6467] usb 1-1: can't read configurations, error -61 [ 196.856575][ T967] usb 3-1: device descriptor read/8, error -71 [ 196.876682][ T6467] usb usb1-port1: attempt power cycle [ 197.125175][ T967] usb usb3-port1: unable to enumerate USB device [ 198.216570][ T6831] sched: RT throttling activated [ 198.365476][ T6467] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 198.981997][ T6467] usb 1-1: device not accepting address 23, error -71 [ 199.727231][ T6847] bpq0: entered promiscuous mode [ 199.740868][ T6847] bpq0: left allmulticast mode [ 200.127176][ T6854] binder: 6853:6854 ioctl c0306201 0 returned -14 [ 201.218026][ T6869] bpq0: left promiscuous mode [ 201.222910][ T6869] bpq0: entered allmulticast mode [ 202.023207][ T6868] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 202.572021][ T6469] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 202.681997][ T6467] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 202.782188][ T6469] usb 4-1: Using ep0 maxpacket: 8 [ 202.793910][ T6469] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 202.853451][ T6467] usb 1-1: device descriptor read/64, error -71 [ 202.861116][ T6469] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 202.870646][ T6469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.880168][ T6469] usb 4-1: Product: syz [ 202.910550][ T6469] usb 4-1: Manufacturer: syz [ 202.925633][ T6469] usb 4-1: SerialNumber: syz [ 202.936404][ T6469] usb 4-1: config 0 descriptor?? [ 202.945582][ T6469] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 203.122324][ T967] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 203.311939][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 203.314088][ T6467] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 203.319674][ T967] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 203.340873][ T967] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 203.348569][ T967] usb 3-1: can't read configurations, error -61 [ 203.746898][ T6467] usb 1-1: device descriptor read/64, error -71 [ 203.915063][ T6467] usb usb1-port1: attempt power cycle [ 204.283498][ T967] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 204.452357][ T6467] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 204.499537][ T6467] usb 1-1: device descriptor read/8, error -71 [ 204.682250][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 204.816804][ T967] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 204.948421][ T967] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 205.096152][ T967] usb 3-1: can't read configurations, error -61 [ 205.158670][ T967] usb usb3-port1: attempt power cycle [ 205.351947][ T6467] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 205.418123][ T6467] usb 1-1: device descriptor read/8, error -71 [ 205.555173][ T6467] usb usb1-port1: unable to enumerate USB device [ 205.572443][ T6892] bpq0: entered promiscuous mode [ 205.577542][ T6892] bpq0: left allmulticast mode [ 205.633460][ T967] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 206.379063][ T6469] gspca_zc3xx: reg_r err -32 [ 206.488814][ T6896] binder: 6895:6896 ioctl c0306201 0 returned -14 [ 206.520785][ T6896] binder: BINDER_SET_CONTEXT_MGR already set [ 206.534830][ T6896] binder: 6895:6896 ioctl 4018620d 200000004a80 returned -16 [ 206.592060][ T967] usb 3-1: device not accepting address 22, error -71 [ 206.869413][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 206.872233][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 206.876191][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 206.882019][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 207.001979][ T6469] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 207.013172][ T6469] gspca_zc3xx: probe of 4-1:0.0 failed with error -32 [ 207.308214][ T5178] usb 4-1: USB disconnect, device number 12 [ 207.524725][ T6902] bpq0: left promiscuous mode [ 207.529594][ T6902] bpq0: entered allmulticast mode [ 208.942706][ T6917] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 210.984264][ T6931] bpq0: entered promiscuous mode [ 210.989371][ T6931] bpq0: left allmulticast mode [ 211.462168][ T6469] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 212.032049][ T6469] usb 1-1: device descriptor read/64, error -71 [ 212.121953][ T5178] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 212.301952][ T5178] usb 3-1: Using ep0 maxpacket: 16 [ 212.308180][ T5178] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 212.317520][ T6467] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 212.331262][ T5178] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 212.340210][ T5178] usb 3-1: can't read configurations, error -61 [ 212.472520][ T6469] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 212.682118][ T6469] usb 1-1: device descriptor read/64, error -71 [ 212.844715][ T6469] usb usb1-port1: attempt power cycle [ 213.232010][ T5178] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 213.262088][ T6467] usb 2-1: Using ep0 maxpacket: 8 [ 213.269635][ T6467] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 213.281812][ T6467] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 213.290948][ T6467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.299026][ T6467] usb 2-1: Product: syz [ 213.303247][ T6467] usb 2-1: Manufacturer: syz [ 213.307860][ T6467] usb 2-1: SerialNumber: syz [ 213.317113][ T6467] usb 2-1: config 0 descriptor?? [ 213.321993][ T6469] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 213.326651][ T6467] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 213.352807][ T6469] usb 1-1: device descriptor read/8, error -71 [ 213.411930][ T5178] usb 3-1: Using ep0 maxpacket: 16 [ 213.417912][ T5178] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 213.428205][ T5178] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 213.436070][ T5178] usb 3-1: can't read configurations, error -61 [ 213.442855][ T5178] usb usb3-port1: attempt power cycle [ 213.622003][ T6469] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 213.652862][ T6469] usb 1-1: device descriptor read/8, error -71 [ 213.773349][ T6469] usb usb1-port1: unable to enumerate USB device [ 213.862398][ T5178] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 213.902602][ T6942] bpq0: left promiscuous mode [ 213.907485][ T6942] bpq0: entered allmulticast mode [ 213.966941][ T5178] usb 3-1: Using ep0 maxpacket: 16 [ 213.998469][ T5178] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 214.070451][ T5178] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 214.103232][ T5178] usb 3-1: can't read configurations, error -61 [ 214.332585][ T5178] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 214.468578][ T5178] usb 3-1: Using ep0 maxpacket: 16 [ 214.514139][ T5178] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 214.586191][ T5178] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 214.641755][ T5178] usb 3-1: can't read configurations, error -61 [ 214.682994][ T5178] usb usb3-port1: unable to enumerate USB device [ 214.785905][ T6944] binder: 6943:6944 ioctl c0306201 0 returned -14 [ 216.363781][ T6961] bpq0: entered promiscuous mode [ 216.374946][ T6961] bpq0: left allmulticast mode [ 216.743422][ T6467] gspca_zc3xx: reg_r err -32 [ 217.417869][ T6975] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 217.664318][ T6467] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 217.691011][ T6467] gspca_zc3xx: probe of 2-1:0.0 failed with error -32 [ 217.752851][ T6467] usb 2-1: USB disconnect, device number 6 [ 218.821991][ T6469] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 219.012526][ T6469] usb 4-1: device descriptor read/64, error -71 [ 219.176276][ T6983] bpq0: left promiscuous mode [ 219.181057][ T6983] bpq0: entered allmulticast mode [ 219.404704][ T6469] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 220.127522][ T6469] usb 4-1: device descriptor read/64, error -71 [ 220.406078][ T6469] usb usb4-port1: attempt power cycle [ 220.658360][ T5178] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 221.766911][ T6469] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 221.862061][ T5178] usb 2-1: Using ep0 maxpacket: 16 [ 221.881418][ T5178] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 221.918441][ T5178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.959402][ T5178] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.007178][ T5178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.029901][ T5178] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.057056][ T5178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.071150][ T5178] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.087768][ T5178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.100810][ T5178] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.114568][ T5178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.133413][ T5178] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.156046][ T5178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.186835][ T5178] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.206885][ T5178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.220696][ T5178] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.231744][ T5178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.251738][ T5178] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.262515][ T5178] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 222.271603][ T5178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 222.280316][ T5178] usb 2-1: SerialNumber: syz [ 222.289484][ T5178] usb 2-1: config 0 descriptor?? [ 222.352261][ T6469] usb 4-1: device not accepting address 15, error -71 [ 222.501942][ T6471] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 222.522373][ T6989] input: syz1 as /devices/virtual/input/input13 [ 222.556423][ T8] usb 2-1: USB disconnect, device number 7 [ 222.692995][ T6471] usb 3-1: Using ep0 maxpacket: 8 [ 222.706056][ T6471] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 222.720468][ T6471] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 222.729795][ T6471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.738185][ T6471] usb 3-1: Product: syz [ 222.742654][ T6471] usb 3-1: Manufacturer: syz [ 222.747290][ T6471] usb 3-1: SerialNumber: syz [ 222.754635][ T6471] usb 3-1: config 0 descriptor?? [ 222.765928][ T6471] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 223.020702][ T7005] bpq0: entered promiscuous mode [ 223.025984][ T7005] bpq0: left allmulticast mode [ 224.115852][ T7014] bpq0: left promiscuous mode [ 224.120766][ T7014] bpq0: entered allmulticast mode [ 224.592685][ T6471] gspca_zc3xx: reg_w_i err -110 [ 225.511915][ T6471] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 225.518290][ T6471] gspca_zc3xx: probe of 3-1:0.0 failed with error -110 [ 225.992772][ T6469] usb 3-1: USB disconnect, device number 28 [ 227.300062][ T7038] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 227.862047][ T6467] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 228.102359][ T6467] usb 2-1: device descriptor read/64, error -71 [ 229.209296][ T6467] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 229.412167][ T6467] usb 2-1: device descriptor read/64, error -71 [ 229.423674][ T7053] bpq0: entered promiscuous mode [ 229.428745][ T7053] bpq0: left allmulticast mode [ 229.664158][ T5834] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 229.896237][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 229.927122][ T5834] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 229.978931][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.023266][ T5834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.096334][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.135868][ T5834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.200298][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.238480][ T5834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.272165][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.307558][ T5834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.343710][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.359589][ T7056] bpq0: left promiscuous mode [ 230.364508][ T7056] bpq0: entered allmulticast mode [ 230.416532][ T5834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.465933][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.515170][ T5834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.559014][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.632657][ T5834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.714603][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.812553][ T5834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.896860][ T5834] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 230.935387][ T6467] usb usb2-port1: attempt power cycle [ 230.941068][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 231.014934][ T5834] usb 1-1: SerialNumber: syz [ 231.242370][ T5834] usb 1-1: config 0 descriptor?? [ 231.470009][ T7052] input: syz1 as /devices/virtual/input/input14 [ 231.505010][ T5834] usb 1-1: USB disconnect, device number 33 [ 231.701160][ T785] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 231.961986][ T785] usb 3-1: Using ep0 maxpacket: 8 [ 231.971534][ T785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 231.990273][ T785] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 232.015386][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.034775][ T785] usb 3-1: Product: syz [ 232.078876][ T785] usb 3-1: Manufacturer: syz [ 232.093157][ T785] usb 3-1: SerialNumber: syz [ 232.100585][ T785] usb 3-1: config 0 descriptor?? [ 232.124237][ T785] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 234.053905][ T785] gspca_zc3xx: reg_w_i err -110 [ 234.574759][ T7091] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 234.686888][ T7094] bpq0: entered promiscuous mode [ 234.692247][ T7094] bpq0: left allmulticast mode [ 235.572725][ T785] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 235.579057][ T785] gspca_zc3xx: probe of 3-1:0.0 failed with error -110 [ 235.644541][ T785] usb 3-1: USB disconnect, device number 29 [ 235.739969][ T7097] bpq0: left promiscuous mode [ 235.744944][ T7097] bpq0: entered allmulticast mode [ 237.603603][ T5178] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 237.771940][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 237.941983][ T5178] usb 1-1: Using ep0 maxpacket: 32 [ 237.950286][ T5178] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.960807][ T5178] usb 1-1: config 0 has no interfaces? [ 237.970546][ T5178] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 237.980126][ T5178] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 237.988927][ T5178] usb 1-1: Product: syz [ 237.993504][ T5178] usb 1-1: Manufacturer: syz [ 237.998135][ T5178] usb 1-1: SerialNumber: syz [ 238.006514][ T5178] usb 1-1: config 0 descriptor?? [ 238.012468][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 238.020724][ T8] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 238.040125][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.055833][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.066719][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.077614][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.104552][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.117677][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.130150][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.143524][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.157960][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.177547][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.192819][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.205692][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.218053][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.293054][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.305848][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.317030][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.330535][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 238.340643][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 238.351387][ T8] usb 4-1: SerialNumber: syz [ 238.368528][ T8] usb 4-1: config 0 descriptor?? [ 238.468419][ T8] usb 1-1: USB disconnect, device number 34 [ 238.641643][ T7106] input: syz1 as /devices/virtual/input/input15 [ 238.668251][ T5178] usb 4-1: USB disconnect, device number 17 [ 240.374480][ T7131] bpq0: entered promiscuous mode [ 240.379600][ T7131] bpq0: left allmulticast mode [ 241.331334][ T7137] bpq0: left promiscuous mode [ 241.337045][ T7137] bpq0: entered allmulticast mode [ 242.355210][ T5178] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 242.553145][ T5178] usb 3-1: Using ep0 maxpacket: 8 [ 242.564714][ T5178] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 242.590571][ T5178] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 242.607507][ T5178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.623903][ T7148] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 242.641219][ T5178] usb 3-1: Product: syz [ 242.645792][ T5178] usb 3-1: Manufacturer: syz [ 242.650410][ T5178] usb 3-1: SerialNumber: syz [ 242.694388][ T5178] usb 3-1: config 0 descriptor?? [ 242.715641][ T5178] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 243.412012][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 243.672324][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 243.709348][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.725696][ T8] usb 4-1: config 0 has no interfaces? [ 243.747496][ T8] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 243.763260][ T8] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 243.771742][ T8] usb 4-1: Product: syz [ 243.780557][ T8] usb 4-1: Manufacturer: syz [ 243.785520][ T8] usb 4-1: SerialNumber: syz [ 243.798574][ T8] usb 4-1: config 0 descriptor?? [ 244.233388][ T8] usb 4-1: USB disconnect, device number 18 [ 244.411958][ T6469] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 244.744802][ T5178] gspca_zc3xx: reg_r err -32 [ 244.822145][ T6469] usb 1-1: Using ep0 maxpacket: 16 [ 244.831111][ T6469] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 244.899059][ T6469] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.035017][ T6469] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.638303][ T6469] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.649913][ T6469] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.661240][ T6469] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.672596][ T6469] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.684612][ T6469] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.699644][ T6469] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.714856][ T6469] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 245.724223][ T6469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 245.775881][ T6469] usb 1-1: SerialNumber: syz [ 246.233729][ T5178] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 246.258413][ T6469] usb 1-1: config 0 descriptor?? [ 246.304469][ T5178] gspca_zc3xx: probe of 3-1:0.0 failed with error -32 [ 246.361690][ T5178] usb 3-1: USB disconnect, device number 30 [ 246.578634][ T7158] input: syz1 as /devices/virtual/input/input16 [ 246.820825][ T9] usb 1-1: USB disconnect, device number 35 [ 247.480392][ T7177] bpq0: entered promiscuous mode [ 247.517755][ T7177] bpq0: left allmulticast mode [ 247.938680][ T7181] bpq0: left promiscuous mode [ 247.945022][ T7181] bpq0: entered allmulticast mode [ 248.206310][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 248.372228][ T9] usb 3-1: device descriptor read/64, error -71 [ 248.651984][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 248.823438][ T9] usb 3-1: device descriptor read/64, error -71 [ 248.957350][ T9] usb usb3-port1: attempt power cycle [ 249.393660][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 249.462709][ T9] usb 3-1: device descriptor read/8, error -71 [ 249.491326][ T7209] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 249.721966][ T6471] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 249.752008][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 249.782642][ T9] usb 3-1: device descriptor read/8, error -71 [ 249.861947][ T785] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 249.905108][ T9] usb usb3-port1: unable to enumerate USB device [ 249.912073][ T6471] usb 4-1: Using ep0 maxpacket: 32 [ 249.929572][ T6471] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.975809][ T6471] usb 4-1: config 0 has no interfaces? [ 249.987446][ T6471] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 250.008583][ T6471] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 250.016909][ T6471] usb 4-1: Product: syz [ 250.021296][ T6471] usb 4-1: Manufacturer: syz [ 250.029620][ T6471] usb 4-1: SerialNumber: syz [ 250.045793][ T6471] usb 4-1: config 0 descriptor?? [ 250.052704][ T785] usb 1-1: Using ep0 maxpacket: 8 [ 250.069672][ T785] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 250.140338][ T785] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 250.149924][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.158335][ T785] usb 1-1: Product: syz [ 250.164449][ T785] usb 1-1: Manufacturer: syz [ 250.169089][ T785] usb 1-1: SerialNumber: syz [ 250.181076][ T785] usb 1-1: config 0 descriptor?? [ 250.195553][ T785] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 250.497088][ T6471] usb 4-1: USB disconnect, device number 19 [ 251.862051][ T5834] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 252.489631][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 252.503361][ T5834] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 252.515410][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.529257][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.544252][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.563511][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.604898][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.658704][ T7227] bpq0: entered promiscuous mode [ 252.664431][ T7227] bpq0: left allmulticast mode [ 252.695609][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.779314][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.837965][ T7228] ================================================================== [ 252.846090][ T7228] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5ba/0x740 [ 252.854303][ T7228] Read of size 1 at addr ffff8880248c5832 by task syz.1.364/7228 [ 252.862047][ T7228] [ 252.864406][ T7228] CPU: 1 PID: 7228 Comm: syz.1.364 Not tainted 6.6.101-syzkaller #0 [ 252.872498][ T7228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.882582][ T7228] Call Trace: [ 252.885873][ T7228] [ 252.888839][ T7228] dump_stack_lvl+0x16c/0x230 [ 252.893555][ T7228] ? __lock_acquire+0x7c80/0x7c80 [ 252.898617][ T7228] ? show_regs_print_info+0x20/0x20 [ 252.903849][ T7228] ? load_image+0x3b0/0x3b0 [ 252.908399][ T7228] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 252.913821][ T7228] ? __virt_addr_valid+0x18c/0x540 [ 252.918966][ T7228] ? __virt_addr_valid+0x469/0x540 [ 252.924120][ T7228] print_report+0xac/0x220 [ 252.928577][ T7228] ? rose_transmit_link+0x5ba/0x740 [ 252.933831][ T7228] kasan_report+0x117/0x150 [ 252.938375][ T7228] ? kmem_cache_alloc_node+0x17f/0x330 [ 252.943885][ T7228] ? rose_transmit_link+0x5ba/0x740 [ 252.949137][ T7228] rose_transmit_link+0x5ba/0x740 [ 252.954197][ T7228] ? skb_put+0x11b/0x210 [ 252.958498][ T7228] rose_write_internal+0x11d1/0x1ab0 [ 252.963839][ T7228] ? rose_validate_nr+0x120/0x120 [ 252.968898][ T7228] ? __timer_delete+0x6b/0x290 [ 252.973725][ T7228] ? skb_queue_purge_reason+0x6c/0x1c0 [ 252.979250][ T7228] rose_release+0x24e/0x510 [ 252.983798][ T7228] sock_close+0xbd/0x230 [ 252.988083][ T7228] ? sock_mmap+0xa0/0xa0 [ 252.992367][ T7228] __fput+0x234/0x970 [ 252.996417][ T7228] task_work_run+0x1ce/0x250 [ 253.001049][ T7228] ? task_work_cancel+0x240/0x240 [ 253.006114][ T7228] get_signal+0x1235/0x1400 [ 253.010665][ T7228] ? task_work_add+0x3a3/0x440 [ 253.015494][ T7228] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 253.020921][ T7228] ? wake_bit_function+0x200/0x200 [ 253.026165][ T7228] ? security_socket_connect+0x79/0xa0 [ 253.031681][ T7228] arch_do_signal_or_restart+0x96/0x780 [ 253.037287][ T7228] ? __sys_connect+0x240/0x420 [ 253.042202][ T7228] ? get_sigframe_size+0x20/0x20 [ 253.047190][ T7228] ? exit_to_user_mode_loop+0x3b/0x110 [ 253.052707][ T7228] exit_to_user_mode_loop+0x70/0x110 [ 253.058029][ T7228] exit_to_user_mode_prepare+0xb1/0x140 [ 253.063698][ T7228] syscall_exit_to_user_mode+0x1a/0x50 [ 253.069200][ T7228] do_syscall_64+0x61/0xb0 [ 253.073659][ T7228] ? clear_bhb_loop+0x40/0x90 [ 253.078375][ T7228] ? clear_bhb_loop+0x40/0x90 [ 253.083093][ T7228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.089039][ T7228] RIP: 0033:0x7fad33b8ebe9 [ 253.093498][ T7228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.113137][ T7228] RSP: 002b:00007fad34a70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 253.121603][ T7228] RAX: fffffffffffffe00 RBX: 00007fad33db6180 RCX: 00007fad33b8ebe9 [ 253.129680][ T7228] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000010 [ 253.137680][ T7228] RBP: 00007fad33c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 253.145681][ T7228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.153673][ T7228] R13: 00007fad33db6218 R14: 00007fad33db6180 R15: 00007fff1c5158f8 [ 253.161689][ T7228] [ 253.164735][ T7228] [ 253.167078][ T7228] Allocated by task 7228: [ 253.171449][ T7228] kasan_set_track+0x4e/0x70 [ 253.176082][ T7228] __kasan_kmalloc+0x8f/0xa0 [ 253.180704][ T7228] rose_add_node+0x23a/0xdd0 [ 253.185316][ T7228] rose_rt_ioctl+0xa42/0xfb0 [ 253.189923][ T7228] rose_ioctl+0x3cf/0x8b0 [ 253.194284][ T7228] sock_do_ioctl+0xd7/0x2f0 [ 253.198843][ T7228] sock_ioctl+0x623/0x7a0 [ 253.203231][ T7228] __se_sys_ioctl+0xfd/0x170 [ 253.207865][ T7228] do_syscall_64+0x55/0xb0 [ 253.212326][ T7228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.218278][ T7228] [ 253.220638][ T7228] Freed by task 7227: [ 253.224653][ T7228] kasan_set_track+0x4e/0x70 [ 253.229287][ T7228] kasan_save_free_info+0x2e/0x50 [ 253.234367][ T7228] ____kasan_slab_free+0x126/0x1e0 [ 253.239526][ T7228] slab_free_freelist_hook+0x130/0x1b0 [ 253.245027][ T7228] __kmem_cache_free+0xba/0x1f0 [ 253.249938][ T7228] rose_rt_device_down+0x43d/0x490 [ 253.255105][ T7228] rose_device_event+0x604/0x690 [ 253.260122][ T7228] notifier_call_chain+0x197/0x390 [ 253.265272][ T7228] __dev_notify_flags+0x18e/0x2e0 [ 253.270326][ T7228] dev_change_flags+0xe8/0x1a0 [ 253.275127][ T7228] dev_ifsioc+0x6a7/0xe20 [ 253.279487][ T7228] dev_ioctl+0x7e2/0x1170 [ 253.283845][ T7228] sock_do_ioctl+0x226/0x2f0 [ 253.288462][ T7228] sock_ioctl+0x623/0x7a0 [ 253.292831][ T7228] __se_sys_ioctl+0xfd/0x170 [ 253.297178][ T785] gspca_zc3xx: reg_r err -32 [ 253.297446][ T7228] do_syscall_64+0x55/0xb0 [ 253.297472][ T7228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.312416][ T7228] [ 253.314766][ T7228] Last potentially related work creation: [ 253.320503][ T7228] kasan_save_stack+0x3e/0x60 [ 253.325220][ T7228] __kasan_record_aux_stack+0xaf/0xc0 [ 253.330713][ T7228] kvfree_call_rcu+0xee/0x780 [ 253.335408][ T7228] ipv6_mc_destroy_dev+0x3c1/0x590 [ 253.340533][ T7228] addrconf_ifdown+0x139f/0x1880 [ 253.345480][ T7228] addrconf_notify+0x6c6/0x1010 [ 253.350344][ T7228] notifier_call_chain+0x197/0x390 [ 253.355466][ T7228] unregister_netdevice_many_notify+0xf36/0x1810 [ 253.361901][ T7228] ip6gre_exit_batch_net+0x449/0x490 [ 253.367241][ T7228] cleanup_net+0x77f/0xb90 [ 253.371787][ T7228] process_scheduled_works+0xa45/0x15b0 [ 253.377375][ T7228] worker_thread+0xa55/0xfc0 [ 253.382015][ T7228] kthread+0x2fa/0x390 [ 253.386120][ T7228] ret_from_fork+0x48/0x80 [ 253.390580][ T7228] ret_from_fork_asm+0x11/0x20 [ 253.395359][ T7228] [ 253.397699][ T7228] Second to last potentially related work creation: [ 253.404297][ T7228] kasan_save_stack+0x3e/0x60 [ 253.408986][ T7228] __kasan_record_aux_stack+0xaf/0xc0 [ 253.414384][ T7228] kvfree_call_rcu+0xee/0x780 [ 253.419092][ T7228] drop_sysctl_table+0x356/0x4b0 [ 253.424130][ T7228] drop_sysctl_table+0x36d/0x4b0 [ 253.429081][ T7228] unregister_sysctl_table+0x41/0x60 [ 253.434389][ T7228] mpls_dev_sysctl_unregister+0x8b/0xc0 [ 253.439974][ T7228] mpls_dev_notify+0x533/0x7a0 [ 253.444770][ T7228] notifier_call_chain+0x197/0x390 [ 253.449892][ T7228] unregister_netdevice_many_notify+0xf36/0x1810 [ 253.456240][ T7228] vti6_exit_batch_net+0x3ca/0x410 [ 253.461364][ T7228] setup_net+0x83a/0xa00 [ 253.465619][ T7228] copy_net_ns+0x36d/0x5e0 [ 253.470335][ T7228] create_new_namespaces+0x3d3/0x6f0 [ 253.475645][ T7228] unshare_nsproxy_namespaces+0x11a/0x160 [ 253.481400][ T7228] ksys_unshare+0x4c0/0x890 [ 253.485918][ T7228] __x64_sys_unshare+0x38/0x40 [ 253.490699][ T7228] do_syscall_64+0x55/0xb0 [ 253.495125][ T7228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.501043][ T7228] [ 253.503397][ T7228] The buggy address belongs to the object at ffff8880248c5800 [ 253.503397][ T7228] which belongs to the cache kmalloc-512 of size 512 [ 253.518413][ T7228] The buggy address is located 50 bytes inside of [ 253.518413][ T7228] freed 512-byte region [ffff8880248c5800, ffff8880248c5a00) [ 253.532140][ T7228] [ 253.534484][ T7228] The buggy address belongs to the physical page: [ 253.540911][ T7228] page:ffffea0000923100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x248c4 [ 253.551077][ T7228] head:ffffea0000923100 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 253.560027][ T7228] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 253.568052][ T7228] page_type: 0xffffffff() [ 253.572418][ T7228] raw: 00fff00000000840 ffff888017841c80 dead000000000100 dead000000000122 [ 253.581034][ T7228] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 253.589632][ T7228] page dumped because: kasan: bad access detected [ 253.596052][ T7228] page_owner tracks the page as allocated [ 253.601771][ T7228] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10157281323, free_ts 0 [ 253.621525][ T7228] post_alloc_hook+0x1cd/0x210 [ 253.626311][ T7228] get_page_from_freelist+0x195c/0x19f0 [ 253.631919][ T7228] __alloc_pages+0x1e3/0x460 [ 253.636534][ T7228] alloc_page_interleave+0x24/0x1e0 [ 253.641755][ T7228] alloc_slab_page+0x5d/0x170 [ 253.646451][ T7228] new_slab+0x87/0x2e0 [ 253.650538][ T7228] ___slab_alloc+0xc6d/0x12f0 [ 253.655853][ T7228] __kmem_cache_alloc_node+0x1a2/0x260 [ 253.661371][ T7228] kmalloc_trace+0x2a/0xe0 [ 253.665829][ T7228] device_add+0xbe/0xc20 [ 253.670088][ T7228] platform_device_add+0x4bd/0x830 [ 253.675231][ T7228] dummy_hcd_init+0x294/0x1070 [ 253.680005][ T7228] do_one_initcall+0x1fd/0x750 [ 253.684789][ T7228] do_initcall_level+0x137/0x1f0 [ 253.689743][ T7228] do_initcalls+0x69/0xd0 [ 253.694096][ T7228] kernel_init_freeable+0x3d2/0x570 [ 253.699320][ T7228] page_owner free stack trace missing [ 253.704700][ T7228] [ 253.707067][ T7228] Memory state around the buggy address: [ 253.712708][ T7228] ffff8880248c5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.720808][ T7228] ffff8880248c5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.729338][ T7228] >ffff8880248c5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.737408][ T7228] ^ [ 253.743052][ T7228] ffff8880248c5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.751128][ T7228] ffff8880248c5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.759191][ T7228] ================================================================== [ 253.769580][ T7228] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 253.771749][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.773596][ T5834] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 253.773623][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 253.773644][ T5834] usb 4-1: SerialNumber: syz [ 253.777339][ T5834] usb 4-1: config 0 descriptor?? [ 253.813481][ T7228] CPU: 0 PID: 7228 Comm: syz.1.364 Not tainted 6.6.101-syzkaller #0 [ 253.821479][ T7228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.831544][ T7228] Call Trace: [ 253.834837][ T7228] [ 253.838569][ T7228] dump_stack_lvl+0x16c/0x230 [ 253.843620][ T7228] ? show_regs_print_info+0x20/0x20 [ 253.848882][ T7228] ? load_image+0x3b0/0x3b0 [ 253.853442][ T7228] panic+0x2c0/0x710 [ 253.857369][ T7228] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 253.863561][ T7228] ? bpf_jit_dump+0xd0/0xd0 [ 253.868101][ T7228] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 253.874028][ T7228] ? _raw_spin_unlock+0x40/0x40 [ 253.878922][ T7228] ? rose_transmit_link+0x5ba/0x740 [ 253.884146][ T7228] check_panic_on_warn+0x84/0xa0 [ 253.889111][ T7228] ? rose_transmit_link+0x5ba/0x740 [ 253.894331][ T7228] end_report+0x6f/0x140 [ 253.898601][ T7228] kasan_report+0x128/0x150 [ 253.903130][ T7228] ? kmem_cache_alloc_node+0x17f/0x330 [ 253.908621][ T7228] ? rose_transmit_link+0x5ba/0x740 [ 253.913849][ T7228] rose_transmit_link+0x5ba/0x740 [ 253.918910][ T7228] ? skb_put+0x11b/0x210 [ 253.923191][ T7228] rose_write_internal+0x11d1/0x1ab0 [ 253.928516][ T7228] ? rose_validate_nr+0x120/0x120 [ 253.933571][ T7228] ? __timer_delete+0x6b/0x290 [ 253.938370][ T7228] ? skb_queue_purge_reason+0x6c/0x1c0 [ 253.943866][ T7228] rose_release+0x24e/0x510 [ 253.948404][ T7228] sock_close+0xbd/0x230 [ 253.952678][ T7228] ? sock_mmap+0xa0/0xa0 [ 253.956953][ T7228] __fput+0x234/0x970 [ 253.960975][ T7228] task_work_run+0x1ce/0x250 [ 253.965599][ T7228] ? task_work_cancel+0x240/0x240 [ 253.970653][ T7228] get_signal+0x1235/0x1400 [ 253.975185][ T7228] ? task_work_add+0x3a3/0x440 [ 253.979980][ T7228] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 253.985380][ T7228] ? wake_bit_function+0x200/0x200 [ 253.990513][ T7228] ? security_socket_connect+0x79/0xa0 [ 253.996005][ T7228] arch_do_signal_or_restart+0x96/0x780 [ 254.001587][ T7228] ? __sys_connect+0x240/0x420 [ 254.006379][ T7228] ? get_sigframe_size+0x20/0x20 [ 254.011351][ T7228] ? exit_to_user_mode_loop+0x3b/0x110 [ 254.016842][ T7228] exit_to_user_mode_loop+0x70/0x110 [ 254.022167][ T7228] exit_to_user_mode_prepare+0xb1/0x140 [ 254.027744][ T7228] syscall_exit_to_user_mode+0x1a/0x50 [ 254.033725][ T7228] do_syscall_64+0x61/0xb0 [ 254.038180][ T7228] ? clear_bhb_loop+0x40/0x90 [ 254.042889][ T7228] ? clear_bhb_loop+0x40/0x90 [ 254.047673][ T7228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.053603][ T7228] RIP: 0033:0x7fad33b8ebe9 [ 254.058041][ T7228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.077757][ T7228] RSP: 002b:00007fad34a70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 254.086199][ T7228] RAX: fffffffffffffe00 RBX: 00007fad33db6180 RCX: 00007fad33b8ebe9 [ 254.094195][ T7228] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000010 [ 254.102185][ T7228] RBP: 00007fad33c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 254.110177][ T7228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.118167][ T7228] R13: 00007fad33db6218 R14: 00007fad33db6180 R15: 00007fff1c5158f8 [ 254.126254][ T7228] [ 254.129597][ T7228] Kernel Offset: disabled [ 254.133935][ T7228] Rebooting in 86400 seconds..