last executing test programs: 4.072381816s ago: executing program 3 (id=254): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 3.979758379s ago: executing program 3 (id=255): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 3.735788871s ago: executing program 0 (id=259): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892a0bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1}, 0xf26}], 0x1, 0x40010000, 0x0) 3.728118352s ago: executing program 3 (id=260): socket$kcm(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000480)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x5c, 0x6c, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010101, @local}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x10, 0x4, 0x0, 0x4, 0x6, 0x65, 0x1, 0x8, 0x2, 0xf, @loopback, @broadcast, {[@generic={0x86, 0x5, "c80842"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4, 0xf3, 0x3, 0x8}, @cipso={0x86, 0x1c, 0xfffffffffffffffe, [{0x0, 0x4, "0612"}, {0x7, 0xf, "c43e8c34f8ca4be4cdb6364607"}, {0x1, 0x3, '`'}]}]}}}}}}}}, 0x6e) 3.673156739s ago: executing program 0 (id=261): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88880, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 3.222341869s ago: executing program 3 (id=264): sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) 3.023633619s ago: executing program 3 (id=265): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000001080)={0x1000, 0x4, 0x9, 0xbd75}) 2.884176642s ago: executing program 0 (id=266): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 2.731991786s ago: executing program 3 (id=268): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x81, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0x7f}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.729497171s ago: executing program 0 (id=269): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x400000000000007, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x7, 0x4, 0x34524742, 0x8, 0xc, [{0xfffffffe, 0xb}, {0x40, 0x7}, {0x800, 0x100}, {0x8, 0x1}, {0xfffffffb, 0x676e7560}, {0xc2f8, 0x5}, {0x3, 0x1}, {0x4, 0x4}], 0xe, 0x6, 0x7, 0x0, 0x3}}) 2.679775437s ago: executing program 0 (id=270): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) 2.572291084s ago: executing program 2 (id=271): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) statfs(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000200)) 2.439478095s ago: executing program 2 (id=272): socket$kcm(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000480)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x5c, 0x6c, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010101, @local}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x10, 0x4, 0x0, 0x4, 0x6, 0x65, 0x1, 0x8, 0x2, 0xf, @loopback, @broadcast, {[@generic={0x86, 0x5, "c80842"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4, 0xf3, 0x3, 0x8}, @cipso={0x86, 0x1c, 0xfffffffffffffffe, [{0x0, 0x4, "0612"}, {0x7, 0xf, "c43e8c34f8ca4be4cdb6364607"}, {0x1, 0x3, '`'}]}]}}}}}}}}, 0x6e) 2.203683639s ago: executing program 2 (id=273): sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) 2.075782114s ago: executing program 1 (id=274): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) prlimit64(0x0, 0xe, 0x0, 0x0) 2.075529623s ago: executing program 2 (id=275): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 1.962708749s ago: executing program 2 (id=276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x0, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x10, 0x20003, 0x8, 0x408, 0x8, 0x7e, 0x13, 0x4, 0x8000000000000000, 0x2, 0x0, 0x3, 0x2, 0x3, 0xfffffffffffffffe], 0x0, 0x194d40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.742632219s ago: executing program 1 (id=277): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x1) 1.696292018s ago: executing program 0 (id=278): syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 896.770135ms ago: executing program 2 (id=279): syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) 763.154398ms ago: executing program 1 (id=280): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) 607.885932ms ago: executing program 1 (id=281): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x80, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x5, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 518.633788ms ago: executing program 1 (id=282): ustat(0x9, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000540)=0x17) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000580)=0x8) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x501000, 0x0) ioctl$TCSETSF(r2, 0x5404, 0x0) sendto(r0, 0x0, 0x0, 0xc080, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x2021) ustat(0x7, 0x0) 0s ago: executing program 1 (id=283): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ustat(0x40, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x0, 0x13, r2, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. [ 76.626490][ T5593] cgroup: Unknown subsys name 'net' [ 76.867741][ T5593] cgroup: Unknown subsys name 'cpuset' [ 76.923411][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.630935][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.041660][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.081603][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.082509][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.086113][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.091292][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.091432][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.095859][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.096507][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.111916][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.120334][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.172042][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.205699][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.208319][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.242151][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.251619][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.301443][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.325014][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.327515][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.335004][ T4919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.336127][ T4919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.243753][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.245889][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.246083][ T5605] bridge_slave_0: entered allmulticast mode [ 83.247967][ T5605] bridge_slave_0: entered promiscuous mode [ 83.294294][ T4919] Bluetooth: hci0: command tx timeout [ 83.296253][ T5610] Bluetooth: hci3: command tx timeout [ 83.326667][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.326849][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.327016][ T5605] bridge_slave_1: entered allmulticast mode [ 83.329121][ T5605] bridge_slave_1: entered promiscuous mode [ 83.373824][ T5610] Bluetooth: hci1: command tx timeout [ 83.452880][ T5610] Bluetooth: hci2: command tx timeout [ 83.466517][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.466787][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.467420][ T5608] bridge_slave_0: entered allmulticast mode [ 83.470760][ T5608] bridge_slave_0: entered promiscuous mode [ 83.480848][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.520358][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.520647][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.521044][ T5608] bridge_slave_1: entered allmulticast mode [ 83.528144][ T5608] bridge_slave_1: entered promiscuous mode [ 83.536053][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.557388][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.557923][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.558154][ T5607] bridge_slave_0: entered allmulticast mode [ 83.563623][ T5607] bridge_slave_0: entered promiscuous mode [ 83.622365][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.622532][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.623235][ T5607] bridge_slave_1: entered allmulticast mode [ 83.626840][ T5607] bridge_slave_1: entered promiscuous mode [ 83.662244][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.662607][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.665847][ T5606] bridge_slave_0: entered allmulticast mode [ 83.668828][ T5606] bridge_slave_0: entered promiscuous mode [ 83.709370][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.715098][ T5605] team0: Port device team_slave_0 added [ 83.715597][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.715862][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.716126][ T5606] bridge_slave_1: entered allmulticast mode [ 83.721908][ T5606] bridge_slave_1: entered promiscuous mode [ 83.882491][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.890391][ T5605] team0: Port device team_slave_1 added [ 83.917022][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.973259][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.007953][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.027371][ T5608] team0: Port device team_slave_0 added [ 84.029272][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.029282][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.029296][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.035719][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.064566][ T5608] team0: Port device team_slave_1 added [ 84.066669][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.066684][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.066707][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.096212][ T5607] team0: Port device team_slave_0 added [ 84.164407][ T5607] team0: Port device team_slave_1 added [ 84.192486][ T5606] team0: Port device team_slave_0 added [ 84.209358][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.209369][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.209383][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.216574][ T5606] team0: Port device team_slave_1 added [ 84.244328][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.244345][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.244369][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.295240][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.295256][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.295280][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.357054][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.357065][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.357080][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.371927][ T5605] hsr_slave_0: entered promiscuous mode [ 84.377414][ T5605] hsr_slave_1: entered promiscuous mode [ 84.381921][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.381937][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.381965][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.410756][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.410772][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.410795][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.534634][ T5608] hsr_slave_0: entered promiscuous mode [ 84.535833][ T5608] hsr_slave_1: entered promiscuous mode [ 84.536810][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 84.536889][ T5608] Cannot create hsr debugfs directory [ 84.607574][ T5607] hsr_slave_0: entered promiscuous mode [ 84.608702][ T5607] hsr_slave_1: entered promiscuous mode [ 84.609611][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 84.609632][ T5607] Cannot create hsr debugfs directory [ 84.674816][ T5606] hsr_slave_0: entered promiscuous mode [ 84.676405][ T5606] hsr_slave_1: entered promiscuous mode [ 84.677296][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 84.677317][ T5606] Cannot create hsr debugfs directory [ 85.382812][ T5610] Bluetooth: hci3: command tx timeout [ 85.382844][ T4919] Bluetooth: hci0: command tx timeout [ 85.452874][ T5610] Bluetooth: hci1: command tx timeout [ 85.535356][ T5610] Bluetooth: hci2: command tx timeout [ 85.698471][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.746986][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.763458][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.798675][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.810270][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.848752][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.877116][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.915833][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.035164][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.079323][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.086483][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.127712][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.132338][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.168555][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.197997][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.230027][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.425079][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.469929][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.482977][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.516327][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.522496][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.561431][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.592524][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.639522][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.766028][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.809131][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.839039][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.846654][ T823] cfg80211: failed to load regulatory.db [ 86.858640][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.883687][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.917238][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.941980][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.984644][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.046079][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.154848][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.213927][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.215261][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.240713][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.280537][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.280696][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.388463][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.429214][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.429424][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.454017][ T5610] Bluetooth: hci0: command tx timeout [ 87.454044][ T4919] Bluetooth: hci3: command tx timeout [ 87.462248][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.492763][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.493430][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.535686][ T4919] Bluetooth: hci1: command tx timeout [ 87.604830][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.614583][ T4919] Bluetooth: hci2: command tx timeout [ 87.644383][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.690682][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.690845][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.753798][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.754070][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.824776][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.872243][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.872403][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.961437][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.961597][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.751269][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.085521][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.206711][ T5605] veth0_vlan: entered promiscuous mode [ 89.287886][ T5605] veth1_vlan: entered promiscuous mode [ 89.442079][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.496932][ T5607] veth0_vlan: entered promiscuous mode [ 89.534019][ T4919] Bluetooth: hci0: command tx timeout [ 89.535968][ T4919] Bluetooth: hci3: command tx timeout [ 89.541340][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.569348][ T5607] veth1_vlan: entered promiscuous mode [ 89.588363][ T5605] veth0_macvtap: entered promiscuous mode [ 89.613432][ T4919] Bluetooth: hci1: command tx timeout [ 89.623184][ T5605] veth1_macvtap: entered promiscuous mode [ 89.694122][ T4919] Bluetooth: hci2: command tx timeout [ 89.726833][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.750694][ T5606] veth0_vlan: entered promiscuous mode [ 89.772257][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.784065][ T5607] veth0_macvtap: entered promiscuous mode [ 89.821128][ T5607] veth1_macvtap: entered promiscuous mode [ 89.832553][ T3023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.847894][ T5606] veth1_vlan: entered promiscuous mode [ 89.852454][ T5608] veth0_vlan: entered promiscuous mode [ 89.867382][ T3023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.884768][ T3023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.891471][ T3023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.990194][ T5608] veth1_vlan: entered promiscuous mode [ 90.055714][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.181912][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.349170][ T3023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.351814][ T3023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.359923][ T3023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.367871][ T3023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.392365][ T5606] veth0_macvtap: entered promiscuous mode [ 90.516197][ T5606] veth1_macvtap: entered promiscuous mode [ 90.554055][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.554079][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.622345][ T5608] veth0_macvtap: entered promiscuous mode [ 90.868768][ T5608] veth1_macvtap: entered promiscuous mode [ 90.889267][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.889287][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.914878][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.038065][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.040764][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.040782][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.096366][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.146535][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.164288][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.164577][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.210671][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.227539][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.281550][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.281628][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.281640][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.353181][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.367934][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.369484][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.589393][ T5761] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.286817][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.286836][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.435879][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.435899][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.537936][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.537955][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.602510][ T5766] netlink: zone id is out of range [ 92.762372][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.762405][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.391400][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 96.127454][ T5810] trusted_key: syz.2.18 sent an empty control message without MSG_MORE. [ 97.063070][ T822] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.354516][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 97.399311][ T822] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.399359][ T822] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.399383][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.542074][ T5836] syz.3.28 (5836) used greatest stack depth: 19480 bytes left [ 97.658525][ T822] usb 3-1: config 0 descriptor?? [ 99.221769][ T822] usb 3-1: string descriptor 0 read error: -71 [ 99.394786][ T822] usb 3-1: USB disconnect, device number 2 [ 101.435905][ T5911] netlink: 'syz.0.57': attribute type 10 has an invalid length. [ 101.606311][ T5911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.621875][ T5911] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 101.662792][ T822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.812810][ T822] usb 4-1: device descriptor read/64, error -71 [ 102.066107][ T822] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.204239][ T822] usb 4-1: device descriptor read/64, error -71 [ 102.323328][ T822] usb usb4-port1: attempt power cycle [ 102.693532][ T822] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.775587][ T822] usb 4-1: device descriptor read/8, error -71 [ 103.023205][ T822] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.055270][ T822] usb 4-1: device descriptor read/8, error -71 [ 103.165511][ T822] usb usb4-port1: unable to enumerate USB device [ 105.954764][ T5715] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.102811][ T5715] usb 3-1: device descriptor read/64, error -71 [ 106.352844][ T5715] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.494755][ T5715] usb 3-1: device descriptor read/64, error -71 [ 106.595560][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 106.616548][ T5715] usb usb3-port1: attempt power cycle [ 106.973055][ T5715] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.996800][ T5715] usb 3-1: device descriptor read/8, error -71 [ 107.012828][ T823] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.162782][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 107.164989][ T823] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 107.201303][ T823] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 107.201326][ T823] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 107.201336][ T823] usb 4-1: Product: syz [ 107.201344][ T823] usb 4-1: Manufacturer: syz [ 107.201351][ T823] usb 4-1: SerialNumber: syz [ 107.242886][ T5715] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 107.273737][ T5715] usb 3-1: device descriptor read/8, error -71 [ 107.381442][ T823] usb 4-1: config 0 descriptor?? [ 107.388079][ T5715] usb usb3-port1: unable to enumerate USB device [ 107.400634][ T6038] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.509016][ T823] hub 4-1:0.0: bad descriptor, ignoring hub [ 107.509039][ T823] hub 4-1:0.0: probe with driver hub failed with error -5 [ 107.810226][ T823] usb 4-1: USB disconnect, device number 6 [ 108.333003][ T823] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.483268][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 108.487815][ T823] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.491060][ T823] usb 4-1: string descriptor 0 read error: -22 [ 108.491288][ T823] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.491312][ T823] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.629026][ T823] usb 4-1: config 0 descriptor?? [ 108.631242][ T6038] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.746543][ T823] hub 4-1:0.0: bad descriptor, ignoring hub [ 108.746580][ T823] hub 4-1:0.0: probe with driver hub failed with error -5 [ 109.031157][ T823] usb 4-1: USB disconnect, device number 7 [ 109.434090][ T6097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.032874][ T5595] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 110.173533][ T5595] usb 3-1: device descriptor read/64, error -71 [ 110.455308][ T5595] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.583193][ T5595] usb 3-1: device descriptor read/64, error -71 [ 110.587375][ T6133] input: syz1 as /devices/virtual/input/input6 [ 110.649902][ T6127] syzkaller1: entered promiscuous mode [ 110.649919][ T6127] syzkaller1: entered allmulticast mode [ 110.718241][ T5595] usb usb3-port1: attempt power cycle [ 111.103748][ T5595] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 111.123662][ T5595] usb 3-1: device descriptor read/8, error -71 [ 111.363413][ T5595] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 111.387374][ T5595] usb 3-1: device descriptor read/8, error -71 [ 111.493612][ T5595] usb usb3-port1: unable to enumerate USB device [ 111.684949][ T6163] syzkaller1: entered promiscuous mode [ 111.684975][ T6163] syzkaller1: entered allmulticast mode [ 112.431098][ T38] audit: type=1326 audit(1782056992.876:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.3.163" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b9650ce59 code=0x0 [ 112.502452][ T38] audit: type=1326 audit(1782056992.936:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.3.163" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f4b9650ce59 code=0x0 [ 112.935009][ T6199] syzkaller1: entered promiscuous mode [ 112.935034][ T6199] syzkaller1: entered allmulticast mode [ 114.274561][ T6233] syzkaller1: entered promiscuous mode [ 114.274605][ T6233] syzkaller1: entered allmulticast mode [ 114.382328][ T6235] process 'syz.0.181' launched './file2' with NULL argv: empty string added [ 115.944775][ T6269] binder: 6263:6269 ioctl c0306201 0 returned -14 [ 116.679237][ T6278] syzkaller1: entered promiscuous mode [ 116.679253][ T6278] syzkaller1: entered allmulticast mode [ 118.085470][ T6269] syz.0.191 (6269): drop_caches: 2 [ 118.100467][ T6293] syz.3.199 (6293) used greatest stack depth: 18232 bytes left [ 118.456543][ T6304] syzkaller1: entered promiscuous mode [ 118.456570][ T6304] syzkaller1: entered allmulticast mode [ 119.215604][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.208'. [ 119.215654][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.208'. [ 119.352830][ T5595] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 119.504715][ T5595] usb 3-1: Using ep0 maxpacket: 8 [ 119.506839][ T5595] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 119.506867][ T5595] usb 3-1: config 179 has no interface number 0 [ 119.506911][ T5595] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 119.506937][ T5595] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 119.506965][ T5595] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.506990][ T5595] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 119.507016][ T5595] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.507053][ T5595] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.507073][ T5595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.587066][ T6314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.355655][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 120.355723][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 120.356011][ T5595] usb 3-1: USB disconnect, device number 11 [ 120.533963][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7 [ 121.071884][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.222'. [ 121.071909][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.222'. [ 121.849913][ T6376] raw_sendmsg: syz.0.230 forgot to set AF_INET. Fix it! [ 122.063008][ T6378] nbd: must specify a device to reconfigure [ 122.362421][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'. [ 122.362446][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'. [ 123.980345][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 123.980374][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 124.775713][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 124.775740][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 124.944462][ T5336] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.098211][ T5336] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.098245][ T5336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 125.098271][ T5336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 125.098297][ T5336] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.098339][ T5336] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.098362][ T5336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.184664][ T5336] usb 2-1: config 0 descriptor?? [ 125.185430][ T6439] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.668262][ T5336] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.668300][ T5336] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.668327][ T5336] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.668352][ T5336] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.668375][ T5336] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.668399][ T5336] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.670137][ T5336] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.670168][ T5336] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.670195][ T5336] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.670222][ T5336] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.764238][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 125.764261][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 125.809583][ T5336] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 126.006722][ T822] usb 2-1: USB disconnect, device number 2 [ 126.131087][ T6475] fido_id[6475]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:047F:FFFF.0001/report_descriptor': No such device [ 127.373494][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.532890][ T32] usb 1-1: device descriptor read/64, error -71 [ 127.802815][ T32] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.955991][ T32] usb 1-1: device descriptor read/64, error -71 [ 128.076552][ T32] usb usb1-port1: attempt power cycle [ 128.427167][ T32] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.457129][ T32] usb 1-1: device descriptor read/8, error -71 [ 128.702854][ T32] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.733358][ T32] usb 1-1: device descriptor read/8, error -71 [ 128.863777][ T0] ------------[ cut here ]------------ [ 128.863788][ T0] rq->clock_update_flags < RQCF_ACT_SKIP [ 128.863798][ T0] WARNING: kernel/sched/sched.h:1792 at update_curr_idle+0x1cf/0x260, CPU#1: swapper/1/0 [ 128.863833][ T0] Modules linked in: [ 128.863864][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.863879][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.863891][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 128.863943][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 3a 98 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 4c [ 128.863955][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 128.863966][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 128.863976][ T0] RDX: ffff888035863e00 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 128.863986][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 128.863995][ T0] R10: ffff8880b873c910 R11: ffffffff819a0020 R12: dffffc0000000000 [ 128.864005][ T0] R13: ffffffff8dc14a58 R14: ffff88801e29dd00 R15: ffff8880b873c620 [ 128.864015][ T0] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 128.864027][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.864036][ T0] CR2: 00002000003c5030 CR3: 0000000053aaa000 CR4: 00000000003526f0 [ 128.864049][ T0] Call Trace: [ 128.864059][ T0] [ 128.864067][ T0] put_prev_task_idle+0xd/0x20 [ 128.864088][ T0] __schedule+0x3da0/0x5550 [ 128.864123][ T0] ? __pfx___schedule+0x10/0x10 [ 128.864137][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 128.864161][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 128.864183][ T0] schedule_idle+0x51/0x90 [ 128.864199][ T0] do_idle+0x4a6/0x540 [ 128.864220][ T0] ? __pfx_do_idle+0x10/0x10 [ 128.864245][ T0] cpu_startup_entry+0x43/0x60 [ 128.864265][ T0] start_secondary+0x101/0x110 [ 128.864281][ T0] common_startup_64+0x13e/0x157 [ 128.864313][ T0] [ 128.864320][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.864330][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.864346][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.864354][ T0] Call Trace: [ 128.864359][ T0] [ 128.864364][ T0] vpanic+0x56c/0xa60 [ 128.864384][ T0] ? __pfx__printk+0x10/0x10 [ 128.864399][ T0] ? __pfx_vpanic+0x10/0x10 [ 128.864418][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 128.864438][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 128.864462][ T0] panic+0xc5/0xd0 [ 128.864488][ T0] ? __pfx_panic+0x10/0x10 [ 128.864519][ T0] ? common_startup_64+0x13e/0x157 [ 128.864536][ T0] __warn+0x315/0x4c0 [ 128.864550][ T0] ? update_curr_idle+0x1cf/0x260 [ 128.864565][ T0] ? update_curr_idle+0x1cf/0x260 [ 128.864580][ T0] __report_bug+0x339/0x540 [ 128.864597][ T0] ? update_curr_idle+0x1cf/0x260 [ 128.864611][ T0] ? __pfx___report_bug+0x10/0x10 [ 128.864629][ T0] ? pick_task_fair+0x21a/0x1410 [ 128.864646][ T0] ? update_curr_idle+0x1cf/0x260 [ 128.864660][ T0] report_bug+0x16a/0x220 [ 128.864673][ T0] ? update_curr_idle+0x1cf/0x260 [ 128.864686][ T0] ? update_curr_idle+0x1d1/0x260 [ 128.864700][ T0] handle_bug+0x9c/0x200 [ 128.864715][ T0] exc_invalid_op+0x1a/0x50 [ 128.864729][ T0] asm_exc_invalid_op+0x1a/0x20 [ 128.864740][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 128.864754][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 3a 98 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 4c [ 128.864762][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 128.864771][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 128.864777][ T0] RDX: ffff888035863e00 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 128.864784][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 128.864791][ T0] R10: ffff8880b873c910 R11: ffffffff819a0020 R12: dffffc0000000000 [ 128.864798][ T0] R13: ffffffff8dc14a58 R14: ffff88801e29dd00 R15: ffff8880b873c620 [ 128.864808][ T0] ? __pfx_put_prev_task_idle+0x10/0x10 [ 128.864826][ T0] ? update_curr_idle+0xab/0x260 [ 128.864841][ T0] put_prev_task_idle+0xd/0x20 [ 128.864855][ T0] __schedule+0x3da0/0x5550 [ 128.864878][ T0] ? __pfx___schedule+0x10/0x10 [ 128.864888][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 128.864905][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 128.864925][ T0] schedule_idle+0x51/0x90 [ 128.864937][ T0] do_idle+0x4a6/0x540 [ 128.864952][ T0] ? __pfx_do_idle+0x10/0x10 [ 128.864973][ T0] cpu_startup_entry+0x43/0x60 [ 128.864987][ T0] start_secondary+0x101/0x110 [ 128.864998][ T0] common_startup_64+0x13e/0x157 [ 128.865020][ T0] [ 129.936661][ T0] Shutting down cpus with NMI [ 129.936986][ T0] Kernel Offset: disabled