last executing test programs: 5.646747878s ago: executing program 0 (id=243): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300000600000000000000030000000000000000000000000000070000000002000100000004d60209bc04"], 0x30}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x20, 0x0, 0x8010002}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.409441702s ago: executing program 0 (id=245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x40}}}}}}}, 0x0) 5.349207928s ago: executing program 0 (id=246): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0xc0000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) 5.000614943s ago: executing program 0 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x0, 0x0, 0x0, '\x00', 0x2}, {0x0, 0xa, 0x0, '\x00', 0xfd}, {0xfc, 0x12, 0x4}, {0x11, 0x6}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {0x0, 0x0, 0x44}, {0x0, 0xf}, {0x1, 0x6, 0x0, '\x00', 0x1}, {}, {0x5, 0x9, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2}, {0x2, 0x0, 0x6}, {0x8, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x0, 0x80, '\x00', 0x2}, {0x3}, {0x0, 0x0, 0x6, '\x00', 0x10}, {0x4}, {0x0, 0x80}, {0x0, 0x4, 0x0, '\x00', 0x37}, {0xfd, 0xd, 0x0, '\x00', 0x1}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3}]}}) 3.162912188s ago: executing program 1 (id=267): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00', 0x96}) io_uring_enter(r0, 0x47f6, 0x0, 0x4b, 0x0, 0x0) 3.120707398s ago: executing program 0 (id=268): r0 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 2.827011831s ago: executing program 0 (id=271): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x62, @lang_id={0x0, 0x3, 0x804}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 2.687412078s ago: executing program 2 (id=273): socket(0x2a, 0x2, 0xffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.682618019s ago: executing program 3 (id=274): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x3, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) 2.537516679s ago: executing program 3 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}}, 0x0) 2.530223252s ago: executing program 3 (id=277): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x83, @any, 0x3}}}, 0xb) 2.467627483s ago: executing program 3 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x0, 0x0, 0x0, '\x00', 0x2}, {0x0, 0xa, 0x0, '\x00', 0xfd}, {0xfc, 0x12, 0x4}, {0x11, 0x6}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {0x0, 0x0, 0x44}, {0x0, 0xf}, {0x1, 0x6, 0x0, '\x00', 0x1}, {}, {0x5, 0x9, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2}, {0x2, 0x0, 0x6}, {0x8, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x0, 0x80, '\x00', 0x2}, {0x3}, {0x0, 0x0, 0x6, '\x00', 0x10}, {0x4}, {0x0, 0x80}, {0x0, 0x4, 0x0, '\x00', 0x37}, {0xfd, 0xd, 0x0, '\x00', 0x1}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3}]}}) 2.313661839s ago: executing program 2 (id=279): syz_usb_connect(0x0, 0x25c, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161900, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x0, 0x0) 2.279390423s ago: executing program 1 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r1, 0xb03, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 2.245965773s ago: executing program 4 (id=281): r0 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 2.006710724s ago: executing program 1 (id=282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept(r0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, r1, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) 2.005971292s ago: executing program 4 (id=283): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) 1.586239236s ago: executing program 2 (id=284): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x96, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00\b', 0x60, 0x6, 0xff, @remote, @remote, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0x70, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2a, [0xfff, 0x8, 0xc, 0x5, 0x200, 0x9aa3, 0x5, 0x4, 0x9f, 0x80000000]}, @mptcp=@add_addr={0x1e, 0xc, 0x0, 0xc, 0xe, @multicast2, 0xc, "f386"}, @exp_fastopen={0xfe, 0x13, 0xf989, "eb84eeed134f3e690f0d1fe8fb6113"}]}}}}}}}}, 0x0) 1.025735631s ago: executing program 2 (id=285): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@x={0x94, 0x4, "007fffdfff00"}) 995.724456ms ago: executing program 1 (id=286): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x9, 0x30012080, 0x8, 0xc7e, 0x3, 0x4b0, 0x0, 0x0, 0x8}}, 0x50) 925.168903ms ago: executing program 4 (id=287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x4d) 865.586478ms ago: executing program 2 (id=288): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000080), 0x76e5467) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x2f, 0x24, 0x67, 0x0, 0x7a, 0x21, 0x0, @loopback, @local}, {{0x4e21, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x7, 0x6, "a2be30", 0x3, "5910a5"}}}}}}, 0x0) 826.90059ms ago: executing program 1 (id=289): socket(0x2a, 0x2, 0xffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 796.829765ms ago: executing program 3 (id=290): socket$kcm(0x10, 0x2, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r1], 0x20}}, 0x40816) 749.573983ms ago: executing program 4 (id=291): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, 0x0) ptrace(0x10, 0x0) r2 = syz_usb_connect(0x2, 0x4a, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x22) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000180)=0xe3b) 588.126061ms ago: executing program 3 (id=292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300000600000000000000030000000000000000000000000000070000000002"], 0x30}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x20, 0x0, 0x8010002}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "ae9eab059a455e9f"}}}, 0x11) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 571.383568ms ago: executing program 1 (id=293): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x5, 0x26, {0x26, 0x7, "7f002e74c1fffbe053588f23b5276583e1ee235addb2bb65c22ec6f3ccd7ac8522acb820"}}, 0x0}, 0x0) 281.688825ms ago: executing program 2 (id=294): syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x5541) 149.595262ms ago: executing program 4 (id=295): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200394}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) 0s ago: executing program 4 (id=296): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000008, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x800000edd2, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.171' (ED25519) to the list of known hosts. [ 61.020279][ T5818] cgroup: Unknown subsys name 'net' [ 61.126048][ T5818] cgroup: Unknown subsys name 'cpuset' [ 61.134780][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.485731][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.453456][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.466340][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.483824][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.495272][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.503671][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.513045][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.518093][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.528083][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.532154][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.536717][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.550820][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.559978][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.567316][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.574773][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.584508][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.592066][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.599486][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.609125][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.612482][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.619075][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.625933][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.631559][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.639171][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.654483][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.661605][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.678940][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.689335][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.711703][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.719593][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.727529][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.997093][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 67.211125][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 67.258830][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 67.281574][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.290654][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.298418][ T5830] bridge_slave_0: entered allmulticast mode [ 67.305241][ T5830] bridge_slave_0: entered promiscuous mode [ 67.321811][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.328948][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.336893][ T5830] bridge_slave_1: entered allmulticast mode [ 67.343771][ T5830] bridge_slave_1: entered promiscuous mode [ 67.417445][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 67.430524][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.458704][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.477143][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 67.520569][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.529812][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.537584][ T5828] bridge_slave_0: entered allmulticast mode [ 67.544992][ T5828] bridge_slave_0: entered promiscuous mode [ 67.591119][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.598538][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.606298][ T5828] bridge_slave_1: entered allmulticast mode [ 67.613817][ T5828] bridge_slave_1: entered promiscuous mode [ 67.624493][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.631597][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.639049][ T5837] bridge_slave_0: entered allmulticast mode [ 67.645988][ T5837] bridge_slave_0: entered promiscuous mode [ 67.654183][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.661311][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.668866][ T5837] bridge_slave_1: entered allmulticast mode [ 67.676072][ T5837] bridge_slave_1: entered promiscuous mode [ 67.688645][ T5830] team0: Port device team_slave_0 added [ 67.723620][ T5830] team0: Port device team_slave_1 added [ 67.783058][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.799752][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.820646][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.827770][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.854291][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.867032][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.874311][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.881488][ T5839] bridge_slave_0: entered allmulticast mode [ 67.888485][ T5839] bridge_slave_0: entered promiscuous mode [ 67.896743][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.918937][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.937161][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.944482][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.970599][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.987634][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.994879][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.002581][ T5839] bridge_slave_1: entered allmulticast mode [ 68.009234][ T5839] bridge_slave_1: entered promiscuous mode [ 68.046675][ T5837] team0: Port device team_slave_0 added [ 68.071327][ T5828] team0: Port device team_slave_0 added [ 68.086679][ T5837] team0: Port device team_slave_1 added [ 68.105997][ T5830] hsr_slave_0: entered promiscuous mode [ 68.115864][ T5830] hsr_slave_1: entered promiscuous mode [ 68.130622][ T5828] team0: Port device team_slave_1 added [ 68.138134][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.145407][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.152999][ T5840] bridge_slave_0: entered allmulticast mode [ 68.159513][ T5840] bridge_slave_0: entered promiscuous mode [ 68.167534][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.175128][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.182397][ T5840] bridge_slave_1: entered allmulticast mode [ 68.190261][ T5840] bridge_slave_1: entered promiscuous mode [ 68.207257][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.250730][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.275579][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.285618][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.312357][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.324832][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.332124][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.358168][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.383857][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.390849][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.416940][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.429970][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.462219][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.469732][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.496782][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.509476][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.545985][ T5839] team0: Port device team_slave_0 added [ 68.570757][ T5840] team0: Port device team_slave_0 added [ 68.582309][ T5839] team0: Port device team_slave_1 added [ 68.617438][ T5840] team0: Port device team_slave_1 added [ 68.635713][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.643064][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.669028][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.689814][ T5837] hsr_slave_0: entered promiscuous mode [ 68.699393][ T5837] hsr_slave_1: entered promiscuous mode [ 68.705992][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.717020][ T5837] Cannot create hsr debugfs directory [ 68.723356][ T5835] Bluetooth: hci2: command tx timeout [ 68.723362][ T5831] Bluetooth: hci1: command tx timeout [ 68.723701][ T5831] Bluetooth: hci0: command tx timeout [ 68.729275][ T5841] Bluetooth: hci4: command tx timeout [ 68.773738][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.780738][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.807778][ T5841] Bluetooth: hci3: command tx timeout [ 68.816351][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.830123][ T5828] hsr_slave_0: entered promiscuous mode [ 68.837204][ T5828] hsr_slave_1: entered promiscuous mode [ 68.844268][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.852284][ T5828] Cannot create hsr debugfs directory [ 68.865354][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.872429][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.899895][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.915522][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.922557][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.948614][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.024038][ T5839] hsr_slave_0: entered promiscuous mode [ 69.030728][ T5839] hsr_slave_1: entered promiscuous mode [ 69.037471][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.045216][ T5839] Cannot create hsr debugfs directory [ 69.113839][ T5840] hsr_slave_0: entered promiscuous mode [ 69.120074][ T5840] hsr_slave_1: entered promiscuous mode [ 69.129279][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.137135][ T5840] Cannot create hsr debugfs directory [ 69.350397][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.400004][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.422427][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.436665][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.447126][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.461568][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.473037][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.489067][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.530560][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.557035][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.574994][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.586386][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.646265][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.656227][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.678324][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.689337][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.775235][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.805543][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.826251][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.835981][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.851098][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.929093][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.939068][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.956215][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.972317][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.979623][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.003020][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.042232][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.061253][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.068389][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.100417][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.107580][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.133241][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.140350][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.166193][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.173389][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.184923][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.192173][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.225211][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.258821][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.304293][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.311479][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.348071][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.368708][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.375867][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.394440][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.446070][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.502556][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.509743][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.567183][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.574382][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.688641][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.773959][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.804223][ T5841] Bluetooth: hci0: command tx timeout [ 70.806161][ T5831] Bluetooth: hci4: command tx timeout [ 70.809659][ T5841] Bluetooth: hci2: command tx timeout [ 70.815535][ T5846] Bluetooth: hci1: command tx timeout [ 70.827466][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.884752][ T5831] Bluetooth: hci3: command tx timeout [ 70.899669][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.970604][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.990905][ T5837] veth0_vlan: entered promiscuous mode [ 71.069248][ T5828] veth0_vlan: entered promiscuous mode [ 71.085890][ T5837] veth1_vlan: entered promiscuous mode [ 71.136582][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.149894][ T5828] veth1_vlan: entered promiscuous mode [ 71.193595][ T5837] veth0_macvtap: entered promiscuous mode [ 71.218340][ T5837] veth1_macvtap: entered promiscuous mode [ 71.230627][ T5839] veth0_vlan: entered promiscuous mode [ 71.252661][ T5828] veth0_macvtap: entered promiscuous mode [ 71.279500][ T5839] veth1_vlan: entered promiscuous mode [ 71.295168][ T5830] veth0_vlan: entered promiscuous mode [ 71.306718][ T5830] veth1_vlan: entered promiscuous mode [ 71.319475][ T5828] veth1_macvtap: entered promiscuous mode [ 71.331381][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.367413][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.377515][ T5840] veth0_vlan: entered promiscuous mode [ 71.400076][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.410341][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.421648][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.431360][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.456094][ T5839] veth0_macvtap: entered promiscuous mode [ 71.463818][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.474736][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.486049][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.496934][ T5840] veth1_vlan: entered promiscuous mode [ 71.508665][ T5839] veth1_macvtap: entered promiscuous mode [ 71.525317][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.536432][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.547405][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.558193][ T5830] veth0_macvtap: entered promiscuous mode [ 71.596835][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.607247][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.618645][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.627683][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.640802][ T5830] veth1_macvtap: entered promiscuous mode [ 71.649364][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.660709][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.670815][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.681542][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.693882][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.731272][ T5840] veth0_macvtap: entered promiscuous mode [ 71.751524][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.772537][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.772738][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.782884][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.789110][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.812203][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.826271][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.838021][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.847153][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.856203][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.865146][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.892483][ T5840] veth1_macvtap: entered promiscuous mode [ 71.902461][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.910601][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.948089][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.958928][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.969339][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.980293][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.990751][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.001803][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.015021][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.027240][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.038319][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.048564][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.059242][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.069427][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.080266][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.091894][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.127748][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.139098][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.148995][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.157905][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.177374][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.200220][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.233284][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.244795][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.255248][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.265827][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.276224][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.286872][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.296780][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.307601][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.319814][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.377961][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.408815][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.419434][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.429403][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.440016][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.449913][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.460547][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.470553][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.481324][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.492775][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.526216][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.529038][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.543503][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.552790][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.561550][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.591885][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.613100][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.621442][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.710076][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.712019][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.719318][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.734057][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.829024][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.843555][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.882170][ T5831] Bluetooth: hci2: command tx timeout [ 72.889209][ T5831] Bluetooth: hci0: command tx timeout [ 72.895319][ T5846] Bluetooth: hci4: command tx timeout [ 72.899448][ T5841] Bluetooth: hci1: command tx timeout [ 72.910990][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.921976][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.970614][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.980802][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.995086][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.003369][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.015850][ T5835] Bluetooth: hci3: command tx timeout [ 73.509397][ T5928] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.731693][ T5936] vivid-002: disconnect [ 73.862378][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.906882][ T5933] vivid-002: reconnect [ 74.049463][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 74.077560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.089287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.109886][ T5884] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 74.153248][ T5884] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.165549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.174192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.185380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.205043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.223204][ T5884] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.233560][ T5884] usb 5-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 74.248648][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.270956][ T5884] usb 5-1: config 0 descriptor?? [ 74.704179][ T5884] usbhid 5-1:0.0: can't add hid device: -71 [ 74.710988][ T5884] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 74.756273][ T5884] usb 5-1: USB disconnect, device number 2 [ 74.961903][ T5835] Bluetooth: hci0: command tx timeout [ 74.968041][ T5841] Bluetooth: hci4: command tx timeout [ 74.968069][ T5831] Bluetooth: hci2: command tx timeout [ 74.974870][ T5841] Bluetooth: hci1: command tx timeout [ 75.012036][ T5963] sctp: [Deprecated]: syz.0.14 (pid 5963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.012036][ T5963] Use struct sctp_sack_info instead [ 75.042444][ T5841] Bluetooth: hci3: command tx timeout [ 75.529659][ T5968] kvm: kvm [5967]: vcpu0, guest rIP: 0x19d Unhandled WRMSR(0xc2) = 0x8000 [ 75.635828][ T5972] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 75.952235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.961328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.092208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.182240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.362174][ T5935] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.451874][ T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.505707][ T5998] Zero length message leads to an empty skb [ 76.615790][ T5935] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.627454][ T5935] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.637793][ T5935] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.653812][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.701977][ T46] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 76.711067][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.723854][ T46] usb 5-1: Product: syz [ 76.728083][ T46] usb 5-1: Manufacturer: syz [ 76.738212][ T5987] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.746056][ T46] usb 5-1: SerialNumber: syz [ 76.753528][ T46] usb 5-1: config 0 descriptor?? [ 76.778065][ T5935] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 77.000365][ T46] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 77.096530][ T46] asix 5-1:0.0: probe with driver asix failed with error -71 [ 77.133389][ T46] usb 5-1: USB disconnect, device number 3 [ 77.191222][ T6009] kvm: kvm [6006]: vcpu0, guest rIP: 0x19d Unhandled WRMSR(0xc2) = 0x8000 [ 78.306888][ T6044] netlink: 6 bytes leftover after parsing attributes in process `syz.4.41'. [ 78.337369][ T6044] bridge: RTM_NEWNEIGH with invalid ether address [ 78.391181][ T6050] netlink: 6 bytes leftover after parsing attributes in process `syz.4.41'. [ 78.663701][ T29] audit: type=1326 audit(1736141678.693:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.43" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfb9f85d29 code=0x0 [ 78.677209][ T6050] bridge: RTM_NEWNEIGH with invalid ether address [ 78.948667][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'. [ 78.958856][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.981083][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.995542][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.024478][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.252762][ T6065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 79.695553][ T5882] usb 2-1: USB disconnect, device number 2 [ 79.798213][ T6084] netlink: 6 bytes leftover after parsing attributes in process `syz.1.54'. [ 79.828402][ T6084] bridge: RTM_NEWNEIGH with invalid ether address [ 79.857442][ T6084] netlink: 6 bytes leftover after parsing attributes in process `syz.1.54'. [ 79.880341][ T6084] bridge: RTM_NEWNEIGH with invalid ether address [ 80.180705][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.60'. [ 80.194059][ T5935] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.373226][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 80.396437][ T6109] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.449133][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.469526][ T5935] usb 4-1: config 0 has no interfaces? [ 80.492488][ T5935] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 80.501823][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.507533][ T6114] netlink: 'syz.1.64': attribute type 21 has an invalid length. [ 80.509825][ T5935] usb 4-1: Product: syz [ 80.525463][ T5935] usb 4-1: Manufacturer: syz [ 80.530117][ T5935] usb 4-1: SerialNumber: syz [ 80.539578][ T5935] usb 4-1: config 0 descriptor?? [ 80.569994][ T6114] netlink: 128 bytes leftover after parsing attributes in process `syz.1.64'. [ 80.643794][ T6114] netlink: 'syz.1.64': attribute type 4 has an invalid length. [ 80.689099][ T6114] netlink: 3 bytes leftover after parsing attributes in process `syz.1.64'. [ 80.738044][ T6118] netlink: 'syz.1.64': attribute type 21 has an invalid length. [ 80.785299][ T6118] netlink: 128 bytes leftover after parsing attributes in process `syz.1.64'. [ 80.796304][ T6120] process 'syz.2.66' launched '/dev/fd/3' with NULL argv: empty string added [ 80.832196][ T6118] netlink: 'syz.1.64': attribute type 4 has an invalid length. [ 81.119293][ T6126] bridge: RTM_NEWNEIGH with invalid ether address [ 81.126922][ T6126] bridge: RTM_NEWNEIGH with invalid ether address [ 81.511889][ T5882] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 81.688542][ T5882] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.721009][ T5882] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.741675][ T5882] usb 3-1: config 0 interface 0 has no altsetting 0 [ 81.762252][ T5882] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 81.771340][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.788609][ T5882] usb 3-1: config 0 descriptor?? [ 81.810048][ T6146] kvm: kvm [6143]: vcpu0, guest rIP: 0x19d Unhandled WRMSR(0xc2) = 0x8000 [ 82.010334][ T8] cfg80211: failed to load regulatory.db [ 82.228954][ T5882] saitek 0003:06A3:0621.0001: unknown main item tag 0x0 [ 82.262419][ T5882] saitek 0003:06A3:0621.0001: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0 [ 82.432922][ T5935] usb 3-1: USB disconnect, device number 2 [ 82.945731][ T5935] usb 4-1: USB disconnect, device number 2 [ 83.877436][ T6226] __nla_validate_parse: 3 callbacks suppressed [ 83.877457][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 83.877543][ T6226] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 83.877583][ T6226] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 83.927716][ T6226] syz.4.107 (6226) used greatest stack depth: 19344 bytes left [ 83.935923][ T6230] netlink: 6 bytes leftover after parsing attributes in process `syz.1.108'. [ 84.002306][ T6230] bridge: RTM_NEWNEIGH with invalid ether address [ 84.023160][ T6230] netlink: 6 bytes leftover after parsing attributes in process `syz.1.108'. [ 84.048166][ T6230] bridge: RTM_NEWNEIGH with invalid ether address [ 84.532079][ T3912] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.742483][ T3912] usb 2-1: Using ep0 maxpacket: 8 [ 84.760160][ T3912] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 84.771593][ T3912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.790266][ T3912] usb 2-1: config 0 descriptor?? [ 84.817823][ T3912] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 84.952173][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.019995][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.057256][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.094396][ T3912] cxusb: set interface failed [ 85.099600][ T3912] dvb-usb: bulk message failed: -22 (1/0) [ 85.113301][ T3912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.118784][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 85.149714][ T3912] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 85.149838][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 85.168384][ T3912] usb 2-1: media controller created [ 85.173297][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.215323][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.222702][ T3912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.247875][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.269001][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.349958][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 85.359411][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.385498][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.413397][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.418904][ T3912] DVB: Unable to find symbol lgdt330x_attach() [ 85.438379][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.454063][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 85.461523][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.467289][ T3912] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 85.473700][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.513183][ T3912] dvb-usb: bulk message failed: -22 (1/0) [ 85.525706][ T3912] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 85.529792][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.550196][ T3912] usb 2-1: USB disconnect, device number 3 [ 85.592149][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.608286][ T8] usb 3-1: string descriptor 0 read error: -22 [ 85.614884][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.624286][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.654405][ T3912] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 85.709315][ T6276] netlink: 6 bytes leftover after parsing attributes in process `syz.4.124'. [ 85.778287][ T8] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 85.793764][ T6276] bridge: RTM_NEWNEIGH with invalid ether address [ 85.827074][ T6276] netlink: 6 bytes leftover after parsing attributes in process `syz.4.124'. [ 85.933281][ T6276] bridge: RTM_NEWNEIGH with invalid ether address [ 87.715150][ T6313] netlink: 6 bytes leftover after parsing attributes in process `syz.3.139'. [ 87.731936][ T6313] bridge: RTM_NEWNEIGH with invalid ether address [ 87.740418][ T6313] netlink: 6 bytes leftover after parsing attributes in process `syz.3.139'. [ 87.750271][ T6313] bridge: RTM_NEWNEIGH with invalid ether address [ 88.084709][ T8] usb 3-1: USB disconnect, device number 3 [ 88.556188][ T6343] netlink: 6 bytes leftover after parsing attributes in process `syz.3.151'. [ 88.577068][ T6343] bridge: RTM_NEWNEIGH with invalid ether address [ 88.603248][ T6345] netlink: 6 bytes leftover after parsing attributes in process `syz.3.151'. [ 88.635682][ T6345] bridge: RTM_NEWNEIGH with invalid ether address [ 88.769798][ T6348] netlink: 44 bytes leftover after parsing attributes in process `syz.4.154'. [ 89.159281][ T6360] kvm: kvm [6358]: vcpu0, guest rIP: 0x19d Unhandled WRMSR(0xc2) = 0x8000 [ 89.380335][ T6379] netlink: 44 bytes leftover after parsing attributes in process `syz.0.167'. [ 89.612219][ T6392] sg_write: process 72 (syz.2.169) changed security contexts after opening file descriptor, this is not allowed. [ 90.212047][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.344320][ T6413] kvm: kvm [6412]: vcpu0, guest rIP: 0x19d Unhandled WRMSR(0xc2) = 0x8000 [ 90.370007][ T6418] netlink: 44 bytes leftover after parsing attributes in process `syz.1.180'. [ 90.434907][ T8] usb 1-1: config 0 has no interfaces? [ 90.507797][ T8] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 90.555113][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.597808][ T8] usb 1-1: Product: syz [ 90.616099][ T8] usb 1-1: Manufacturer: syz [ 90.620762][ T8] usb 1-1: SerialNumber: syz [ 90.773778][ T8] usb 1-1: config 0 descriptor?? [ 91.120739][ T6437] kvm: kvm [6436]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5500000800 [ 91.601234][ T6450] netlink: 6 bytes leftover after parsing attributes in process `syz.3.192'. [ 91.703707][ T6450] bridge: RTM_NEWNEIGH with invalid ether address [ 91.815927][ T6453] netlink: 6 bytes leftover after parsing attributes in process `syz.3.192'. [ 91.839913][ T6453] bridge: RTM_NEWNEIGH with invalid ether address [ 91.862389][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 92.802229][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.032082][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 93.055210][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.073412][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.088909][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.098970][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.107445][ T8] usb 2-1: Product: syz [ 93.112150][ T8] usb 2-1: Manufacturer: syz [ 93.116868][ T8] usb 2-1: SerialNumber: syz [ 93.561320][ T8] usb 2-1: cannot find UAC_HEADER [ 93.638257][ T8] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 93.669464][ T8] usb 2-1: USB disconnect, device number 4 [ 93.711909][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.739882][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.765363][ T5884] usb 1-1: USB disconnect, device number 2 [ 93.956757][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 94.010276][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.036572][ T9] usb 3-1: config 0 has no interface number 0 [ 94.080081][ T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 94.130608][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.177420][ T9] usb 3-1: Product: syz [ 94.221936][ T9] usb 3-1: Manufacturer: syz [ 94.226609][ T9] usb 3-1: SerialNumber: syz [ 94.286437][ T9] usb 3-1: config 0 descriptor?? [ 94.328488][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 94.341218][ T6497] mmap: syz.1.209 (6497) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.370429][ T6494] kvm: kvm [6493]: vcpu0, guest rIP: 0x19d Unhandled WRMSR(0xc2) = 0x8000 [ 94.626282][ T5935] hid-generic 0005:0005:0000.0002: item fetching failed at offset 3/4 [ 94.645083][ T5935] hid-generic 0005:0005:0000.0002: probe with driver hid-generic failed with error -22 [ 95.191953][ T5935] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.354612][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 95.374732][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 95.408915][ T5935] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 95.423322][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.461960][ T5885] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.472532][ T5935] usb 1-1: Product: syz [ 95.476750][ T5935] usb 1-1: Manufacturer: syz [ 95.481371][ T5935] usb 1-1: SerialNumber: syz [ 95.504057][ T5935] usb 1-1: config 0 descriptor?? [ 95.646041][ T5885] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 95.681311][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.709998][ T5885] usb 2-1: Product: syz [ 95.715267][ T5885] usb 2-1: Manufacturer: syz [ 95.719942][ T5885] usb 2-1: SerialNumber: syz [ 95.771238][ T5885] usb 2-1: config 0 descriptor?? [ 95.817209][ T5935] usb 1-1: USB disconnect, device number 3 [ 96.190868][ T5885] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 96.198968][ T5885] usb 2-1: Firmware version (0.0) predates our first public release. [ 96.207184][ T5885] usb 2-1: Please update to version 0.2 or newer [ 96.307751][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.486571][ T9] gspca_spca1528: reg_r err -71 [ 96.491495][ T9] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 96.519841][ T5885] usb 2-1: USB disconnect, device number 5 [ 96.623175][ T9] usb 3-1: USB disconnect, device number 4 [ 97.069334][ T6539] netlink: 6 bytes leftover after parsing attributes in process `syz.4.224'. [ 97.079369][ T6539] bridge_slave_0: default FDB implementation only supports local addresses [ 97.089034][ T6539] netlink: 6 bytes leftover after parsing attributes in process `syz.4.224'. [ 97.098359][ T6539] bridge_slave_0: default FDB implementation only supports local addresses [ 97.862632][ T5884] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.145382][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 98.198858][ T5884] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.222078][ T5884] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.252649][ T5884] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.270015][ T5884] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.331853][ T5884] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.340955][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.566997][ T5884] usb 4-1: GET_CAPABILITIES returned 0 [ 98.572850][ T5884] usbtmc 4-1:16.0: can't read capabilities [ 98.616183][ T6568] xt_connbytes: Forcing CT accounting to be enabled [ 98.624752][ T6566] : renamed from pim6reg1 [ 98.661694][ T6568] Cannot find set identified by id 0 to match [ 98.771140][ T5841] Bluetooth: hci3: Unknown advertising packet type: 0x33 [ 98.771196][ T5841] Bluetooth: hci3: Malformed LE Event: 0x0d [ 98.773770][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.809254][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.818454][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.827582][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.836715][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.858752][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.868924][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.878084][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.887225][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.896436][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.905575][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.917134][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.926297][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.935498][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.944634][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.954521][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.968717][ T5884] usb 4-1: USB disconnect, device number 3 [ 99.954411][ T6597] netlink: 6 bytes leftover after parsing attributes in process `syz.3.247'. [ 100.046363][ T6598] netlink: 6 bytes leftover after parsing attributes in process `syz.3.247'. [ 100.497548][ T6610] loop8: detected capacity change from 0 to 7 [ 100.539337][ T6610] Dev loop8: unable to read RDB block 7 [ 100.551496][ T6610] loop8: unable to read partition table [ 100.571910][ T5935] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.587434][ T6610] loop8: partition table beyond EOD, truncated [ 100.602613][ T6610] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 100.602613][ T6610] ) failed (rc=-5) [ 100.762086][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 100.798205][ T5935] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 100.821820][ T5935] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.856773][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.864017][ T5935] usb 1-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 100.881964][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.911292][ T5935] usb 1-1: config 0 descriptor?? [ 101.136444][ T5935] usbhid 1-1:0.0: can't add hid device: -71 [ 101.176406][ T5935] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 101.204773][ T5935] usb 1-1: USB disconnect, device number 4 [ 101.374155][ T6636] netlink: 6 bytes leftover after parsing attributes in process `syz.4.261'. [ 101.395884][ T6636] netlink: 6 bytes leftover after parsing attributes in process `syz.4.261'. [ 102.357465][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 102.397235][ T6669] netlink: 'syz.2.273': attribute type 21 has an invalid length. [ 102.432206][ T6669] netlink: 128 bytes leftover after parsing attributes in process `syz.2.273'. [ 102.450256][ T6669] netlink: 'syz.2.273': attribute type 4 has an invalid length. [ 102.470105][ T6669] netlink: 3 bytes leftover after parsing attributes in process `syz.2.273'. [ 102.542321][ T9] usb 1-1: device descriptor read/64, error -71 [ 102.601061][ T29] audit: type=1326 audit(1736141702.663:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c1f85d29 code=0x7ffc0000 [ 102.641882][ T29] audit: type=1326 audit(1736141702.663:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c1f85d29 code=0x7ffc0000 [ 102.701469][ T29] audit: type=1326 audit(1736141702.663:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70c1f85d29 code=0x7ffc0000 [ 102.740352][ T29] audit: type=1326 audit(1736141702.663:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c1f85d29 code=0x7ffc0000 [ 102.777108][ T29] audit: type=1326 audit(1736141702.663:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f70c1f85d29 code=0x7ffc0000 [ 102.800514][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.822104][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 102.850281][ T29] audit: type=1326 audit(1736141702.663:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c1f85d29 code=0x7ffc0000 [ 102.892224][ T29] audit: type=1326 audit(1736141702.663:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f70c1f85d29 code=0x7ffc0000 [ 102.921353][ T29] audit: type=1326 audit(1736141702.663:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c1f85d29 code=0x7ffc0000 [ 102.972311][ T9] usb 1-1: device descriptor read/64, error -71 [ 102.975783][ T29] audit: type=1326 audit(1736141702.663:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c1f85d29 code=0x7ffc0000 [ 102.978779][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 103.020425][ T8] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 103.032546][ T8] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.043721][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.050447][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 103.079210][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.107074][ T8] usb 4-1: config 0 descriptor?? [ 103.113052][ T9] usb usb1-port1: attempt power cycle [ 103.378974][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 103.388661][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 103.413889][ T8] usb 4-1: USB disconnect, device number 4 [ 103.453107][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 103.491144][ T9] usb 1-1: device descriptor read/8, error -71 [ 103.772186][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 103.802424][ T9] usb 1-1: device descriptor read/8, error -71 [ 103.925005][ T9] usb usb1-port1: unable to enumerate USB device [ 104.144162][ T6714] netlink: 'syz.1.289': attribute type 21 has an invalid length. [ 104.165853][ T6714] netlink: 128 bytes leftover after parsing attributes in process `syz.1.289'. [ 104.180640][ T6714] netlink: 'syz.1.289': attribute type 4 has an invalid length. [ 104.232460][ T6714] netlink: 3 bytes leftover after parsing attributes in process `syz.1.289'. [ 104.518184][ T6716] syz.2.288 (6716) used greatest stack depth: 19168 bytes left [ 104.622147][ T5935] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.716876][ T5882] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 104.793819][ T5935] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 104.807862][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.820220][ T5935] usb 2-1: config 0 descriptor?? [ 104.853920][ T5882] usb 1-1: device descriptor read/64, error -71 [ 104.976890][ T6735] [ 104.979588][ T6735] ============================= [ 104.984876][ T6735] WARNING: suspicious RCU usage [ 104.989750][ T6735] 6.13.0-rc3-next-20241220-syzkaller #0 Not tainted [ 104.996448][ T6735] ----------------------------- [ 105.001315][ T6735] net/ethtool/common.c:873 suspicious rcu_dereference_protected() usage! [ 105.009937][ T6735] [ 105.009937][ T6735] other info that might help us debug this: [ 105.009937][ T6735] [ 105.020502][ T6735] [ 105.020502][ T6735] rcu_scheduler_active = 2, debug_locks = 1 [ 105.028735][ T6735] 1 lock held by syz.4.296/6735: [ 105.033923][ T6735] #0: ffff8880318dc5d8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xebc/0x3290 [ 105.046066][ T6735] [ 105.046066][ T6735] stack backtrace: [ 105.052716][ T6735] CPU: 0 UID: 0 PID: 6735 Comm: syz.4.296 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 105.052747][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.052762][ T6735] Call Trace: [ 105.052768][ T6735] [ 105.052776][ T6735] dump_stack_lvl+0x241/0x360 [ 105.052802][ T6735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.052821][ T6735] ? __pfx__printk+0x10/0x10 [ 105.052865][ T6735] lockdep_rcu_suspicious+0x226/0x340 [ 105.052892][ T6735] __ethtool_get_ts_info+0x97/0x410 [ 105.052922][ T6735] ethtool_get_phc_vclocks+0xa1/0x160 [ 105.052945][ T6735] ? __pfx_ethtool_get_phc_vclocks+0x10/0x10 [ 105.052966][ T6735] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.052990][ T6735] ? dev_get_by_index+0x23/0x2d0 [ 105.053011][ T6735] sock_set_timestamping+0x3e2/0xab0 [ 105.053037][ T6735] ? __pfx_sock_set_timestamping+0x10/0x10 [ 105.053067][ T6735] sk_setsockopt+0x1fe7/0x3290 [ 105.053098][ T6735] ? __pfx_sk_setsockopt+0x10/0x10 [ 105.053124][ T6735] ? aa_sk_perm+0x96d/0xab0 [ 105.053147][ T6735] ? __pfx_aa_sk_perm+0x10/0x10 [ 105.053167][ T6735] ? __pfx_lock_acquire+0x10/0x10 [ 105.053186][ T6735] ? aa_sock_opt_perm+0x79/0x120 [ 105.053207][ T6735] do_sock_setsockopt+0x2fb/0x720 [ 105.053234][ T6735] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 105.053261][ T6735] ? __fget_files+0x395/0x410 [ 105.053277][ T6735] ? __fget_files+0x2a/0x410 [ 105.053300][ T6735] __x64_sys_setsockopt+0x1ee/0x280 [ 105.053322][ T6735] do_syscall_64+0xf3/0x230 [ 105.053340][ T6735] ? clear_bhb_loop+0x35/0x90 [ 105.053364][ T6735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.053387][ T6735] RIP: 0033:0x7fbc9d585d29 [ 105.053412][ T6735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.053428][ T6735] RSP: 002b:00007fbc9e3b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.053447][ T6735] RAX: ffffffffffffffda RBX: 00007fbc9d776080 RCX: 00007fbc9d585d29 [ 105.053461][ T6735] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000003 [ 105.053471][ T6735] RBP: 00007fbc9d601b08 R08: 0000000000000004 R09: 0000000000000000 [ 105.053483][ T6735] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000 [ 105.053494][ T6735] R13: 0000000000000001 R14: 00007fbc9d776080 R15: 00007ffc484eab58 [ 105.053518][ T6735] [ 105.326396][ T5935] [drm] vendor descriptor length:c3 data:26 07 7f 00 2e 74 c1 ff fb e0 53 [ 105.335309][ T5935] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 105.371959][ T5882] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 105.523816][ T5935] [drm:udl_init] *ERROR* Selecting channel failed [ 105.541284][ T5935] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 105.549588][ T5935] [drm] Initialized udl on minor 2 [ 105.558094][ T5935] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 105.571315][ T5935] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 105.580387][ T5885] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 105.591495][ T5935] usb 2-1: USB disconnect, device number 6 [ 105.604928][ T5885] udl 2-1:0.0: [drm] Cannot find any crtc or sizes