last executing test programs: 2m31.987409468s ago: executing program 3 (id=664): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000600)="c8b88651", 0x4}], 0x1}}], 0x1, 0x2000c844) sendto$inet(r0, &(0x7f00000000c0)="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", 0x503, 0x6000000000000000, 0x0, 0x0) 2m31.78844233s ago: executing program 3 (id=667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 2m31.601714437s ago: executing program 3 (id=670): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m31.279493636s ago: executing program 3 (id=674): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x3) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) listen(r4, 0xfff) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2m30.932726235s ago: executing program 3 (id=676): openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}}) 2m30.789012141s ago: executing program 3 (id=677): r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000003c00), 0x2, 0x0) fsync(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="2d64657669636573200064657669636573202b72646d61202b637075202d706572665f6599656e74202d637075202b6e65745f7072696f20"], 0x38) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0xe307a427af1361e6}, 0x24000000) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa) 2m15.658466539s ago: executing program 32 (id=677): r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000003c00), 0x2, 0x0) fsync(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="2d64657669636573200064657669636573202b72646d61202b637075202d706572665f6599656e74202d637075202b6e65745f7072696f20"], 0x38) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0xe307a427af1361e6}, 0x24000000) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa) 6.463537726s ago: executing program 2 (id=1709): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000197, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) exit(0x100000000000035) tkill(r3, 0x12) wait4(0x0, 0x0, 0x8, 0x0) 3.111049003s ago: executing program 5 (id=1729): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 3.044430072s ago: executing program 5 (id=1730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) 2.966381067s ago: executing program 5 (id=1733): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) 2.726058802s ago: executing program 4 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100fffd0900010073797a300000000008000b400000000038000480340001800b000100736f636b6574000024000280080002"], 0xd4}}, 0x24000000) 2.522571828s ago: executing program 0 (id=1736): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000004200)=@delchain={0x10dc, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x10ac, 0x2, [@TCA_TCINDEX_ACT={0x10a8, 0x7, [@m_xt={0xcc, 0x17, 0x0, 0x0, {{0x7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x128, 0x16, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}]}, {0xd1, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0xfffffffe, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x6, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x5}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x9, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1c, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x2000003}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x6, 0x100, 0x1, 0x100000, 0x200005}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x10000007, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x7, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x7, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3fb, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0x7, 0x4}, {0x800005, 0xb0cc, 0x200, 0x80000001, 0x6794, 0x7}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x3, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x5, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0xd, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0x7, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x0, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x10001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x3, 0x2, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x1007, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.495694578s ago: executing program 0 (id=1737): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) lseek(r5, 0x10001, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, 0x2400}}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x152a01) 2.49445484s ago: executing program 1 (id=1738): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4004000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.517077994s ago: executing program 4 (id=1739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48) 1.432858425s ago: executing program 0 (id=1740): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 1.323371737s ago: executing program 5 (id=1741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.227096003s ago: executing program 0 (id=1742): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) 1.219325826s ago: executing program 1 (id=1743): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400040000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d614404208000240000000010c0001"], 0xd0}}, 0x0) 1.19493689s ago: executing program 4 (id=1744): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000080), 0xca, 0xc2300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000000)={0x1}) 1.034966876s ago: executing program 1 (id=1745): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)={0x20, r0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x6a, 0x99, {0x1, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x40090) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYBLOB="e462308449e280a2c8ccea05f27180c2f72c131c4549b4de0435f47ba9cb304b9ded9d8e13cdf9020635966e2f824083a297efbb"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f0000000800)}], 0x3}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b0", 0x21}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000844) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.034654642s ago: executing program 2 (id=1746): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r2, 0x21, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x40, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044080}, 0x840) 996.999741ms ago: executing program 5 (id=1747): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000004200)=@delchain={0x10dc, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x10ac, 0x2, [@TCA_TCINDEX_ACT={0x10a8, 0x7, [@m_xt={0xcc, 0x17, 0x0, 0x0, {{0x7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x128, 0x16, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}]}, {0xd1, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0xfffffffe, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x6, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x5}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x9, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1c, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x2000003}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x6, 0x100, 0x1, 0x100000, 0x200005}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x10000007, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x7, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x7, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3fb, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0x7, 0x4}, {0x800005, 0xb0cc, 0x200, 0x80000001, 0x6794, 0x7}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x3, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x5, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0xd, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0x7, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x0, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x10001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x3, 0x2, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x1007, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 867.766936ms ago: executing program 4 (id=1748): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96", 0xb, 0x1, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 856.51333ms ago: executing program 1 (id=1749): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) sendto$inet6(r0, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0xa, 0x4e21, 0xe1, @ipv4={'\x00', '\xff\xff', @local}, 0x50be}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000240)=0x8) 855.773951ms ago: executing program 2 (id=1750): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(r1) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x4008004) 812.227848ms ago: executing program 5 (id=1751): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) 627.110972ms ago: executing program 1 (id=1752): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f00000000c0)="4d59f8def9cb47d77b6a081bdb925dd5db982c12c500001c770000", 0x1b}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000280)="cfc8", 0x2, 0x3b00, 0x0, 0x0) 615.219279ms ago: executing program 0 (id=1753): io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r0, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, 0x0}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x5, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}]) 554.253121ms ago: executing program 2 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x48) 516.610057ms ago: executing program 1 (id=1755): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7ffc}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) syz_open_dev$usbfs(0x0, 0x6, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000280)=[r5], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r7, r6, r7], 0x0, 0x0, 0xffffffffffffffff}) 346.925006ms ago: executing program 4 (id=1756): sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdc01, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x8054) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) 346.634027ms ago: executing program 2 (id=1757): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f00000001c0)=@ethernet={0x1, @broadcast}, 0x80, 0x0}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x2, 0xffffffffffffffff, 0x0) 95.880897ms ago: executing program 0 (id=1758): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a", 0xa}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000000d40)=""/204, 0xcc}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4080, 0xff0}, {&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f0000003100)=""/4099, 0x1003}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/10, 0xa}], 0xc}, 0x0) 73.056521ms ago: executing program 4 (id=1759): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1760): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)={0x20, r0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x6a, 0x99, {0x1, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x40090) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYBLOB="e462308449e280a2c8ccea05f27180c2f72c131c4549b4de0435f47ba9cb304b9ded9d8e13cdf9020635966e2f824083a297efbb"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d", 0x43}, {&(0x7f0000000800)}], 0x3}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b0", 0x21}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000844) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 74.765920][ T5585] cgroup: Unknown subsys name 'net' [ 74.987668][ T5585] cgroup: Unknown subsys name 'cpuset' [ 75.041872][ T5585] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.740806][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.160295][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.163262][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.191469][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.197322][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.199227][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.208035][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.208758][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.208845][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.218143][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.219040][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.219278][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.227189][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.232375][ T4912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.234971][ T4912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.235773][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.239379][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.263629][ T4912] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.296467][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.299087][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.306737][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.323599][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.379088][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.388891][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.499836][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.504072][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.431474][ T5610] Bluetooth: hci1: command tx timeout [ 81.501324][ T5610] Bluetooth: hci4: command tx timeout [ 81.501486][ T5610] Bluetooth: hci2: command tx timeout [ 81.501542][ T5610] Bluetooth: hci0: command tx timeout [ 81.581422][ T5614] Bluetooth: hci3: command tx timeout [ 81.915070][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.915202][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.915381][ T5600] bridge_slave_0: entered allmulticast mode [ 81.928487][ T5600] bridge_slave_0: entered promiscuous mode [ 81.954547][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.954931][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.955078][ T5599] bridge_slave_0: entered allmulticast mode [ 81.957585][ T5599] bridge_slave_0: entered promiscuous mode [ 81.962211][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.962331][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.962473][ T5602] bridge_slave_0: entered allmulticast mode [ 81.965909][ T5602] bridge_slave_0: entered promiscuous mode [ 81.972441][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.972552][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.972785][ T5598] bridge_slave_0: entered allmulticast mode [ 81.976850][ T5598] bridge_slave_0: entered promiscuous mode [ 81.986523][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.986634][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.986830][ T5600] bridge_slave_1: entered allmulticast mode [ 81.992209][ T5600] bridge_slave_1: entered promiscuous mode [ 82.016988][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.017112][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.017246][ T5599] bridge_slave_1: entered allmulticast mode [ 82.020925][ T5599] bridge_slave_1: entered promiscuous mode [ 82.027915][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.028024][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.028475][ T5602] bridge_slave_1: entered allmulticast mode [ 82.031765][ T5602] bridge_slave_1: entered promiscuous mode [ 82.034259][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.034366][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.034877][ T5598] bridge_slave_1: entered allmulticast mode [ 82.038405][ T5598] bridge_slave_1: entered promiscuous mode [ 82.061563][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.061973][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.062124][ T5601] bridge_slave_0: entered allmulticast mode [ 82.064550][ T5601] bridge_slave_0: entered promiscuous mode [ 82.153363][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.153494][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.153663][ T5601] bridge_slave_1: entered allmulticast mode [ 82.158004][ T5601] bridge_slave_1: entered promiscuous mode [ 82.233161][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.259134][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.268715][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.276774][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.284546][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.313212][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.315182][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.317249][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.342688][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.398130][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.440237][ T5600] team0: Port device team_slave_0 added [ 82.457274][ T5599] team0: Port device team_slave_0 added [ 82.459190][ T5602] team0: Port device team_slave_0 added [ 82.461060][ T5598] team0: Port device team_slave_0 added [ 82.465483][ T5600] team0: Port device team_slave_1 added [ 82.488955][ T5599] team0: Port device team_slave_1 added [ 82.490964][ T5602] team0: Port device team_slave_1 added [ 82.515238][ T5598] team0: Port device team_slave_1 added [ 82.516797][ T5601] team0: Port device team_slave_0 added [ 82.567943][ T5601] team0: Port device team_slave_1 added [ 82.595945][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.595957][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.595970][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.658192][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.658207][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.658229][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.660537][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.660552][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.660573][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.670859][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.670874][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.670895][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.674943][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.674957][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.674977][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.698474][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.698489][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.698509][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.705522][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.705535][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.705556][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.727970][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.727985][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.728007][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.729498][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.729509][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.729531][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.784594][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.784609][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.784630][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.976875][ T5600] hsr_slave_0: entered promiscuous mode [ 82.978433][ T5600] hsr_slave_1: entered promiscuous mode [ 82.990269][ T5599] hsr_slave_0: entered promiscuous mode [ 82.992283][ T5599] hsr_slave_1: entered promiscuous mode [ 82.994232][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 82.994367][ T5599] Cannot create hsr debugfs directory [ 83.046835][ T5602] hsr_slave_0: entered promiscuous mode [ 83.048039][ T5602] hsr_slave_1: entered promiscuous mode [ 83.048896][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 83.048916][ T5602] Cannot create hsr debugfs directory [ 83.066565][ T5598] hsr_slave_0: entered promiscuous mode [ 83.067790][ T5598] hsr_slave_1: entered promiscuous mode [ 83.068615][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 83.068647][ T5598] Cannot create hsr debugfs directory [ 83.110337][ T5601] hsr_slave_0: entered promiscuous mode [ 83.113183][ T5601] hsr_slave_1: entered promiscuous mode [ 83.114078][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 83.114098][ T5601] Cannot create hsr debugfs directory [ 83.501501][ T5614] Bluetooth: hci1: command tx timeout [ 83.581564][ T5610] Bluetooth: hci2: command tx timeout [ 83.581595][ T5610] Bluetooth: hci4: command tx timeout [ 83.581764][ T5614] Bluetooth: hci0: command tx timeout [ 83.662989][ T5614] Bluetooth: hci3: command tx timeout [ 84.344947][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.386443][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.397890][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.435732][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.449944][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.477273][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.504289][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.535083][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.696062][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.726016][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.730058][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.773751][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.778688][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.837140][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.860471][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.894198][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.990261][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.046435][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.063136][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.094111][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.101423][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.135309][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.162637][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.205202][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.355496][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.384525][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.399520][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.430724][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.448034][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.489451][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.528536][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.565551][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.583556][ T5614] Bluetooth: hci1: command tx timeout [ 85.636910][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.662049][ T5618] Bluetooth: hci4: command tx timeout [ 85.662078][ T5618] Bluetooth: hci2: command tx timeout [ 85.662203][ T5614] Bluetooth: hci0: command tx timeout [ 85.737776][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.741475][ T5614] Bluetooth: hci3: command tx timeout [ 85.775037][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.787654][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.814308][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.820535][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.854564][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.858085][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.867661][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.870548][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.919921][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.994197][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.994357][ T1430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.034807][ T1430] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.034894][ T1430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.067471][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.115840][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.115996][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.159336][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.168157][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.197513][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.284989][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.342920][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.343092][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.406181][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.410544][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.429598][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.595181][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.703608][ T2143] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.703746][ T2143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.745894][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.777543][ T2143] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.779753][ T2143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.884661][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.888164][ T11] cfg80211: failed to load regulatory.db [ 87.007431][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.007564][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.111712][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.111836][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.549988][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.665316][ T5614] Bluetooth: hci1: command tx timeout [ 87.728225][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.741417][ T5610] Bluetooth: hci2: command tx timeout [ 87.741444][ T5610] Bluetooth: hci4: command tx timeout [ 87.741492][ T5614] Bluetooth: hci0: command tx timeout [ 87.821478][ T5614] Bluetooth: hci3: command tx timeout [ 88.100939][ T5600] veth0_vlan: entered promiscuous mode [ 88.174515][ T5602] veth0_vlan: entered promiscuous mode [ 88.227227][ T5600] veth1_vlan: entered promiscuous mode [ 88.277299][ T5602] veth1_vlan: entered promiscuous mode [ 88.290803][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.423297][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.462564][ T5600] veth0_macvtap: entered promiscuous mode [ 88.467897][ T5602] veth0_macvtap: entered promiscuous mode [ 88.496285][ T5600] veth1_macvtap: entered promiscuous mode [ 88.505618][ T5602] veth1_macvtap: entered promiscuous mode [ 88.616071][ T5598] veth0_vlan: entered promiscuous mode [ 88.636548][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.664941][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.669169][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.683675][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.706562][ T5598] veth1_vlan: entered promiscuous mode [ 88.712565][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.747162][ T146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.773413][ T146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.783649][ T146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.803547][ T146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.810561][ T146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.822400][ T146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.846854][ T146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.943999][ T146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.626725][ T5598] veth0_macvtap: entered promiscuous mode [ 89.658404][ T5599] veth0_vlan: entered promiscuous mode [ 89.670860][ T5598] veth1_macvtap: entered promiscuous mode [ 89.777200][ T5599] veth1_vlan: entered promiscuous mode [ 89.789945][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.789969][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.868759][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.896524][ T5601] veth0_vlan: entered promiscuous mode [ 89.920294][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.931831][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.931849][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.999511][ T1011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.012845][ T5601] veth1_vlan: entered promiscuous mode [ 90.018553][ T1011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.035524][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.035543][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.036926][ T1011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.066353][ T1011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.180902][ T2143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.180921][ T2143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.255108][ T5599] veth0_macvtap: entered promiscuous mode [ 90.313682][ T5599] veth1_macvtap: entered promiscuous mode [ 90.740160][ T5601] veth0_macvtap: entered promiscuous mode [ 90.753682][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.793826][ T3291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.793844][ T3291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.797597][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.825813][ T5601] veth1_macvtap: entered promiscuous mode [ 90.859625][ T1011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.880684][ T1011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.906170][ T1011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.970744][ T1011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.084173][ T1430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.084192][ T1430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.169265][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.235649][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.793528][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.814191][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.850489][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.205883][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.340561][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.340581][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.054521][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.054541][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.306621][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.306641][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.203908][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.203927][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.012798][ T5872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.102291][ T5613] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.181291][ T5865] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.263465][ T5613] usb 1-1: device descriptor read/64, error -71 [ 100.363812][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 100.536362][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.536407][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.536427][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.536467][ T5865] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.536487][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.651424][ T5613] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 100.673346][ T5865] usb 2-1: config 0 descriptor?? [ 100.884668][ T5613] usb 1-1: device descriptor read/64, error -71 [ 101.025522][ T5613] usb usb1-port1: attempt power cycle [ 101.565623][ T5893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.566417][ T5613] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 101.639585][ T5893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.949239][ T5613] usb 1-1: device descriptor read/8, error -71 [ 102.094205][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.094726][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.187592][ T5865] microsoft 0003:045E:07DA.0001: unknown main item tag 0x1 [ 102.187628][ T5865] microsoft 0003:045E:07DA.0001: unknown global tag 0xd [ 102.187647][ T5865] microsoft 0003:045E:07DA.0001: item 0 0 1 13 parsing failed [ 102.190028][ T5865] microsoft 0003:045E:07DA.0001: parse failed [ 102.190123][ T5865] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 102.590091][ T5865] usb 2-1: USB disconnect, device number 2 [ 103.782309][ T5915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.403826][ T5865] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 105.566491][ T5865] usb 5-1: device descriptor read/64, error -71 [ 106.431308][ T5865] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 106.682930][ T5865] usb 5-1: device descriptor read/64, error -71 [ 106.792124][ T5865] usb usb5-port1: attempt power cycle [ 107.161369][ T5865] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 107.181960][ T5865] usb 5-1: device descriptor read/8, error -71 [ 108.291327][ T5865] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 108.331727][ T5865] usb 5-1: device descriptor read/8, error -71 [ 108.455093][ T5865] usb usb5-port1: unable to enumerate USB device [ 110.731224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.361414][ T822] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 112.494827][ T822] usb 5-1: device descriptor read/64, error -71 [ 112.871307][ T822] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 113.181313][ T822] usb 5-1: device descriptor read/64, error -71 [ 113.291794][ T822] usb usb5-port1: attempt power cycle [ 113.681861][ T822] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 113.709491][ T822] usb 5-1: device descriptor read/8, error -71 [ 113.941378][ T822] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 113.970649][ T822] usb 5-1: device descriptor read/8, error -71 [ 114.071796][ T822] usb usb5-port1: unable to enumerate USB device [ 115.281212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.216361][ T5829] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 119.352952][ T5829] usb 2-1: device descriptor read/64, error -71 [ 119.401234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.421254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.431228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.441248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.451259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.461221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.471263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.481249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.042790][ T5829] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 121.927401][ T5829] usb 2-1: device descriptor read/64, error -71 [ 122.375843][ T5829] usb usb2-port1: attempt power cycle [ 124.121309][ T5607] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.375125][ T5607] usb 3-1: Using ep0 maxpacket: 16 [ 124.379576][ T5607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.379606][ T5607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.379625][ T5607] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.379661][ T5607] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.379680][ T5607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.662897][ T5829] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.672818][ T5607] usb 3-1: config 0 descriptor?? [ 124.811832][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 124.814553][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 124.814583][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 124.814604][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 124.814624][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 124.814646][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 124.817758][ T5829] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 124.817788][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.817805][ T5829] usb 2-1: Product: syz [ 124.817816][ T5829] usb 2-1: Manufacturer: syz [ 124.817829][ T5829] usb 2-1: SerialNumber: syz [ 125.005866][ T5829] usb 2-1: config 0 descriptor?? [ 125.197578][ T6109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.198420][ T6109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.295652][ T6109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.303320][ T6109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.355142][ T5607] usbhid 3-1:0.0: can't add hid device: -71 [ 125.355505][ T5607] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 125.459857][ T5607] usb 3-1: USB disconnect, device number 2 [ 125.513597][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.514106][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.516391][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.517853][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.520235][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.520712][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.522905][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.524031][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.525204][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.537148][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.590664][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.591129][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.606346][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.606788][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.607232][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.607659][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.608088][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.608541][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.608967][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 125.609019][ T5829] input input5: Timeout waiting for response from device. [ 125.759893][ T5829] usb 2-1: USB disconnect, device number 6 [ 126.466049][ T5613] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 126.621376][ T5613] usb 3-1: device descriptor read/64, error -71 [ 126.881542][ T5613] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 127.111279][ T5613] usb 3-1: device descriptor read/64, error -71 [ 127.221947][ T5613] usb usb3-port1: attempt power cycle [ 128.094914][ T5613] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 128.126327][ T5613] usb 3-1: device descriptor read/8, error -71 [ 128.373325][ T5613] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 128.401552][ T5613] usb 3-1: device descriptor read/8, error -71 [ 128.438178][ T6178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.139'. [ 128.638503][ T5613] usb usb3-port1: unable to enumerate USB device [ 129.490000][ T6202] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 131.953768][ T6226] block nbd0: shutting down sockets [ 133.158741][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.163424][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.486654][ T5614] Bluetooth: hci3: link tx timeout [ 133.486833][ T5614] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.991356][ T5613] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.171435][ T5613] usb 3-1: Using ep0 maxpacket: 16 [ 134.173726][ T5613] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 134.173748][ T5613] usb 3-1: config 0 has no interface number 0 [ 134.173790][ T5613] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.216155][ T5613] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 134.216182][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 134.216200][ T5613] usb 3-1: Product: syz [ 134.216212][ T5613] usb 3-1: SerialNumber: syz [ 134.558282][ T5613] usb 3-1: config 0 descriptor?? [ 135.015134][ T5613] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 135.079347][ T5613] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6 [ 135.385112][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 135.388420][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.389250][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.390253][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.390499][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.390729][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.390962][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.391251][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.396232][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.396479][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.398131][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 135.514240][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 135.939526][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 135.939568][ T5613] usb 3-1: USB disconnect, device number 7 [ 136.061673][ T5613] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 136.342434][ T6292] overlayfs: upper fs does not support file handles, falling back to index=off. [ 136.407141][ T6292] evm: overlay not supported [ 138.171376][ T199] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 138.393588][ T199] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.393613][ T199] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.396295][ T199] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 138.396321][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.396339][ T199] usb 3-1: Product: syz [ 138.396351][ T199] usb 3-1: Manufacturer: syz [ 138.396364][ T199] usb 3-1: SerialNumber: syz [ 138.983590][ T199] usb 3-1: config 0 descriptor?? [ 139.231684][ T5613] usb 3-1: USB disconnect, device number 8 [ 139.401339][ T5865] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 139.553937][ T5865] usb 1-1: config 3 interface 0 has no altsetting 0 [ 139.565982][ T5865] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=d0.db [ 139.566011][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.566029][ T5865] usb 1-1: Product: syz [ 139.566041][ T5865] usb 1-1: Manufacturer: syz [ 139.566052][ T5865] usb 1-1: SerialNumber: syz [ 140.806868][ T6351] bridge_slave_1: left allmulticast mode [ 140.806898][ T6351] bridge_slave_1: left promiscuous mode [ 140.869831][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.961594][ T5865] usb 1-1: USB disconnect, device number 6 [ 141.170753][ T6351] bridge_slave_0: left allmulticast mode [ 141.170782][ T6351] bridge_slave_0: left promiscuous mode [ 141.185224][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.519402][ T5865] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.941382][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 143.949173][ T5865] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 143.949197][ T5865] usb 1-1: config 0 has no interface number 0 [ 143.949238][ T5865] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 143.949261][ T5865] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 144.005666][ T5865] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 144.005693][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.005711][ T5865] usb 1-1: Product: syz [ 144.005724][ T5865] usb 1-1: Manufacturer: syz [ 144.005738][ T5865] usb 1-1: SerialNumber: syz [ 144.135587][ T5865] usb 1-1: config 0 descriptor?? [ 144.136840][ T6383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.136992][ T6383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.327308][ T6360] syzkaller1: entered promiscuous mode [ 144.327335][ T6360] syzkaller1: entered allmulticast mode [ 144.341779][ T6383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.341902][ T6383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.571502][ T5865] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 145.520463][ T5865] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 145.635904][ T5865] asix 1-1:0.34: probe with driver asix failed with error -71 [ 145.700465][ T5865] usb 1-1: USB disconnect, device number 7 [ 145.918008][ T6418] overlayfs: overlapping lowerdir path [ 145.980777][ T6419] ======================================================= [ 145.980777][ T6419] WARNING: The mand mount option has been deprecated and [ 145.980777][ T6419] and is ignored by this kernel. Remove the mand [ 145.980777][ T6419] option from the mount to silence this warning. [ 145.980777][ T6419] ======================================================= [ 146.349559][ T6407] nbd0: detected capacity change from 0 to 63 [ 146.688127][ T5618] block nbd0: Receive control failed (result -104) [ 146.713726][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 147.291671][ T5865] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 147.454294][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 147.456433][ T5865] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 147.456459][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.456478][ T5865] usb 4-1: Product: syz [ 147.456490][ T5865] usb 4-1: Manufacturer: syz [ 147.456503][ T5865] usb 4-1: SerialNumber: syz [ 147.484153][ T6437] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.484279][ T6437] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.520534][ T5865] usb 4-1: config 0 descriptor?? [ 147.565170][ T5865] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 147.686874][ T6437] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.776514][ T6450] nbd1: detected capacity change from 0 to 63 [ 147.806170][ T6437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.809150][ T6437] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.827371][ T5618] block nbd1: Receive control failed (result -32) [ 147.839115][ T63] block nbd1: Dead connection, failed to find a fallback [ 147.839138][ T63] block nbd1: shutting down sockets [ 147.839227][ T63] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.839431][ T63] Buffer I/O error on dev nbd1, logical block 0, async page read [ 147.839738][ T63] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.839799][ T63] Buffer I/O error on dev nbd1, logical block 1, async page read [ 147.839980][ T63] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.840041][ T63] Buffer I/O error on dev nbd1, logical block 2, async page read [ 147.840169][ T63] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.840229][ T63] Buffer I/O error on dev nbd1, logical block 3, async page read [ 147.844878][ T63] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.844955][ T63] Buffer I/O error on dev nbd1, logical block 0, async page read [ 147.846534][ T63] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.846599][ T63] Buffer I/O error on dev nbd1, logical block 1, async page read [ 147.846719][ T63] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.846776][ T63] Buffer I/O error on dev nbd1, logical block 2, async page read [ 147.847608][ T63] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.847669][ T63] Buffer I/O error on dev nbd1, logical block 3, async page read [ 147.848050][ T63] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.848106][ T63] Buffer I/O error on dev nbd1, logical block 0, async page read [ 147.848636][ T63] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.848700][ T63] Buffer I/O error on dev nbd1, logical block 1, async page read [ 147.895182][ T5795] ldm_validate_partition_table(): Disk read failed. [ 147.906423][ T5795] Dev nbd1: unable to read RDB block 0 [ 147.923981][ T5795] nbd1: unable to read partition table [ 147.942405][ T5587] usb 4-1: USB disconnect, device number 2 [ 148.008308][ T5795] ldm_validate_partition_table(): Disk read failed. [ 148.017896][ T5795] Dev nbd1: unable to read RDB block 0 [ 148.023940][ T5795] nbd1: unable to read partition table [ 148.332563][ T6437] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 148.414842][ T6437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 148.513382][ T6437] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 149.515166][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.583654][ T6437] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 149.659675][ T6437] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.659798][ T6437] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.836518][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.181432][ T6437] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 150.464403][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.507301][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 150.507352][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 150.507367][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 150.558549][ T6437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.571140][ T6437] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 151.521914][ T5587] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 151.595923][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.667775][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.911555][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.231302][ T5587] usb 4-1: Using ep0 maxpacket: 8 [ 152.237210][ T5587] usb 4-1: unable to get BOS descriptor or descriptor too short [ 152.238296][ T5587] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 152.238327][ T5587] usb 4-1: config 142 has no interface number 0 [ 152.238356][ T5587] usb 4-1: config 142 interface 251 has no altsetting 0 [ 152.292941][ T5587] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 152.292979][ T5587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.292997][ T5587] usb 4-1: Product: syz [ 152.293009][ T5587] usb 4-1: Manufacturer: syz [ 152.293022][ T5587] usb 4-1: SerialNumber: syz [ 152.576450][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.360592][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 153.410696][ T5587] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 153.425250][ T5587] cyphidcom ttyUSB0: required endpoint is missing [ 153.476376][ T5587] usb 4-1: USB disconnect, device number 3 [ 153.656485][ T5587] cypress_m8 4-1:142.251: device disconnected [ 153.671644][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.823073][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.991755][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.633212][ T5614] Bluetooth: hci4: command 0x0c1a tx timeout [ 154.835292][ T6516] nbd2: detected capacity change from 0 to 63 [ 154.854325][ T5618] block nbd2: Receive control failed (result -32) [ 154.879539][ T57] block nbd2: Dead connection, failed to find a fallback [ 154.879562][ T57] block nbd2: shutting down sockets [ 154.879573][ T57] blk_print_req_error: 114 callbacks suppressed [ 154.879583][ T57] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 154.879650][ T57] buffer_io_error: 138 callbacks suppressed [ 154.879659][ T57] Buffer I/O error on dev nbd2, logical block 0, async page read [ 154.879714][ T57] Buffer I/O error on dev nbd2, logical block 1, async page read [ 154.879768][ T57] Buffer I/O error on dev nbd2, logical block 2, async page read [ 154.879816][ T57] Buffer I/O error on dev nbd2, logical block 3, async page read [ 154.888632][ T57] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 154.888707][ T57] Buffer I/O error on dev nbd2, logical block 0, async page read [ 154.888774][ T57] Buffer I/O error on dev nbd2, logical block 1, async page read [ 154.888826][ T57] Buffer I/O error on dev nbd2, logical block 2, async page read [ 154.890456][ T57] Buffer I/O error on dev nbd2, logical block 3, async page read [ 154.890756][ T57] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 154.890819][ T57] Buffer I/O error on dev nbd2, logical block 0, async page read [ 154.890874][ T57] Buffer I/O error on dev nbd2, logical block 1, async page read [ 154.899059][ T57] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 155.039573][ T57] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.039787][ T57] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.039955][ T57] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.040141][ T57] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.040306][ T57] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.040508][ T57] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.111628][ T5934] ldm_validate_partition_table(): Disk read failed. [ 155.114766][ T6519] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 155.114789][ T6519] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.115741][ T5934] Dev nbd2: unable to read RDB block 0 [ 155.862247][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 155.901373][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.969947][ T5934] nbd2: unable to read partition table [ 156.065018][ T6521] vhci_hcd: connection closed [ 156.119523][ T5934] ldm_validate_partition_table(): Disk read failed. [ 156.135970][ T5934] Dev nbd2: unable to read RDB block 0 [ 156.138898][ T5934] nbd2: unable to read partition table [ 156.162623][ T6527] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 156.162648][ T6527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.162731][ T6530] vhci_hcd: connection closed [ 156.163092][ T6527] vhci_hcd vhci_hcd.0: Device attached [ 156.634107][ T6519] vhci_hcd vhci_hcd.0: Device attached [ 156.670116][ T67] vhci_hcd vhci_hcd.2: stop threads [ 156.672995][ T6524] vhci_hcd vhci_hcd.0: failed to lookup sock [ 156.676730][ T67] vhci_hcd vhci_hcd.2: release socket [ 156.691283][ T9] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 156.758016][ T67] vhci_hcd vhci_hcd.2: disconnect device [ 156.759715][ T67] vhci_hcd vhci_hcd.2: stop threads [ 156.759738][ T67] vhci_hcd vhci_hcd.2: release socket [ 156.759804][ T67] vhci_hcd vhci_hcd.2: disconnect device [ 157.670586][ T6548] overlayfs: upper fs does not support file handles, falling back to index=off. [ 157.906566][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 158.140293][ T199] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 158.334692][ T199] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.334716][ T199] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.337271][ T199] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.337297][ T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.337315][ T199] usb 5-1: SerialNumber: syz [ 159.367613][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 159.496159][ T6569] nbd3: detected capacity change from 0 to 63 [ 159.522378][ T5618] block nbd3: Receive control failed (result -32) [ 159.522669][ T63] block nbd3: Send control failed (result -32) [ 159.523679][ T63] block nbd3: Request send failed, requeueing [ 159.537934][ T63] block nbd3: Dead connection, failed to find a fallback [ 159.537958][ T63] block nbd3: shutting down sockets [ 159.616778][ T5696] ldm_validate_partition_table(): Disk read failed. [ 159.619146][ T5696] Dev nbd3: unable to read RDB block 0 [ 159.634437][ T5696] nbd3: unable to read partition table [ 159.639383][ T199] usb 5-1: 0:2 : does not exist [ 159.693688][ T5696] ldm_validate_partition_table(): Disk read failed. [ 159.697328][ T5696] Dev nbd3: unable to read RDB block 0 [ 159.772783][ T5696] nbd3: unable to read partition table [ 160.133451][ T63] blk_print_req_error: 244 callbacks suppressed [ 160.133470][ T63] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 160.133538][ T63] buffer_io_error: 267 callbacks suppressed [ 160.133547][ T63] Buffer I/O error on dev nbd3, logical block 1, async page read [ 160.133605][ T63] Buffer I/O error on dev nbd3, logical block 2, async page read [ 160.133658][ T63] Buffer I/O error on dev nbd3, logical block 3, async page read [ 160.138549][ T63] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 160.138622][ T63] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.138670][ T63] Buffer I/O error on dev nbd3, logical block 1, async page read [ 160.138719][ T63] Buffer I/O error on dev nbd3, logical block 2, async page read [ 160.138764][ T63] Buffer I/O error on dev nbd3, logical block 3, async page read [ 160.139907][ T63] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 160.139961][ T63] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.140003][ T63] Buffer I/O error on dev nbd3, logical block 1, async page read [ 160.140067][ T63] Buffer I/O error on dev nbd3, logical block 2, async page read [ 160.149036][ T199] usb 5-1: unit 5: unexpected type 0x09 [ 160.190703][ T63] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.192875][ T63] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.193050][ T63] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.193222][ T63] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.193946][ T63] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.194187][ T63] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.194338][ T63] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.501406][ T5607] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 160.654994][ T5607] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.655017][ T5607] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 160.704126][ T6589] overlayfs: upper fs does not support file handles, falling back to index=off. [ 160.715004][ T5607] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 160.715031][ T5607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.715049][ T5607] usb 2-1: Product: syz [ 160.715061][ T5607] usb 2-1: Manufacturer: syz [ 160.715074][ T5607] usb 2-1: SerialNumber: syz [ 160.768747][ T5607] usb 2-1: config 0 descriptor?? [ 161.027525][ T5607] usb 2-1: USB disconnect, device number 7 [ 161.483414][ T199] usb 5-1: USB disconnect, device number 10 [ 161.540539][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 162.287648][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 162.450387][ T5618] block nbd4: Receive control failed (result -32) [ 162.471299][ T6606] nbd4: detected capacity change from 0 to 63 [ 162.515140][ T63] block nbd4: Dead connection, failed to find a fallback [ 162.515163][ T63] block nbd4: shutting down sockets [ 162.518294][ T5696] ldm_validate_partition_table(): Disk read failed. [ 162.519901][ T5696] Dev nbd4: unable to read RDB block 0 [ 162.560258][ T5696] nbd4: unable to read partition table [ 162.670476][ T5696] ldm_validate_partition_table(): Disk read failed. [ 162.682327][ T5696] Dev nbd4: unable to read RDB block 0 [ 162.685863][ T5696] nbd4: unable to read partition table [ 162.749363][ T6620] overlayfs: upper fs does not support file handles, falling back to index=off. [ 162.844129][ T822] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 162.876958][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.991318][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 162.993830][ T822] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 162.993854][ T822] usb 3-1: config 0 has no interface number 0 [ 162.999913][ T822] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 162.999939][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.999954][ T822] usb 3-1: Product: syz [ 162.999966][ T822] usb 3-1: Manufacturer: syz [ 162.999978][ T822] usb 3-1: SerialNumber: syz [ 163.057744][ T822] usb 3-1: config 0 descriptor?? [ 163.213469][ T822] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 163.392055][ T5587] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 163.524029][ T822] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 163.566973][ T822] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 163.590902][ T5587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 163.608088][ T5587] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 163.608115][ T5587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.608132][ T5587] usb 1-1: Product: syz [ 163.608144][ T5587] usb 1-1: Manufacturer: syz [ 163.608155][ T5587] usb 1-1: SerialNumber: syz [ 163.654539][ T5587] usb 1-1: config 0 descriptor?? [ 163.690885][ T5587] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 163.731835][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 163.774552][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 163.787907][ T822] usb 3-1: USB disconnect, device number 9 [ 163.883155][ T9] usb 2-1: config 3 interface 0 has no altsetting 0 [ 163.889659][ T9] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=d0.db [ 163.889684][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.889701][ T9] usb 2-1: Product: syz [ 163.889713][ T9] usb 2-1: Manufacturer: syz [ 163.889725][ T9] usb 2-1: SerialNumber: syz [ 163.976619][ T5728] usb 1-1: USB disconnect, device number 8 [ 164.011009][ T822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 164.157007][ T822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 164.219276][ T822] quatech2 3-1:0.51: device disconnected [ 164.262570][ T9] usb 2-1: USB disconnect, device number 8 [ 167.275795][ T6668] capability: warning: `syz.1.321' uses deprecated v2 capabilities in a way that may be insecure [ 167.761293][ T5712] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 167.913769][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 167.916108][ T5712] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 167.916134][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.916151][ T5712] usb 4-1: Product: syz [ 167.916163][ T5712] usb 4-1: Manufacturer: syz [ 167.916175][ T5712] usb 4-1: SerialNumber: syz [ 168.026423][ T5712] usb 4-1: config 0 descriptor?? [ 168.040375][ T5712] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 168.625433][ T9] usb 4-1: USB disconnect, device number 4 [ 170.652651][ T6740] program syz.3.349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.812653][ T5728] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 171.326413][ T37] audit: type=1326 audit(1783113857.289:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6747 comm="syz.4.353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c4559de59 code=0x0 [ 171.792819][ T5728] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.798629][ T5728] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 171.814109][ T5728] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 171.814136][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.814153][ T5728] usb 2-1: Product: syz [ 171.814165][ T5728] usb 2-1: Manufacturer: syz [ 171.814177][ T5728] usb 2-1: SerialNumber: syz [ 172.217091][ T5728] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 172.361938][ T6771] process 'syz.4.363' launched './file1' with NULL argv: empty string added [ 172.801378][ T5865] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 172.801689][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 172.951499][ T5865] usb 5-1: device descriptor read/64, error -32 [ 173.158062][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.219533][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.351318][ T5865] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 173.516697][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.516967][ T5865] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 173.516997][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.414749][ T5728] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 174.486140][ T5865] usb 5-1: config 0 descriptor?? [ 174.983506][ T5865] ath6kl: Failed to submit usb control message: -71 [ 174.983555][ T5865] ath6kl: unable to send the bmi data to the device: -71 [ 174.983567][ T5865] ath6kl: Unable to send get target info: -71 [ 175.010558][ T5865] ath6kl: Failed to init ath6kl core: -71 [ 175.011262][ T5865] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 175.102091][ T5728] usb 2-1: USB disconnect, device number 9 [ 175.107288][ T5865] usb 5-1: USB disconnect, device number 12 [ 175.601818][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.681720][ T5728] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 177.151435][ T6314] block nbd0: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 30 seconds [ 177.205254][ T6314] block nbd0: Possible stuck request ffff8880275ce1c0: control (read@1024,3072B). Runtime 30 seconds [ 177.743325][ T5728] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.647922][ T5728] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 178.647950][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.647966][ T5728] usb 3-1: Product: syz [ 178.647978][ T5728] usb 3-1: Manufacturer: syz [ 178.647991][ T5728] usb 3-1: SerialNumber: syz [ 178.971295][ T5587] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 179.084844][ T5728] usb 3-1: config 0 descriptor?? [ 179.126840][ T5587] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.126890][ T5587] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 179.126912][ T5587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.262784][ T5587] usb 5-1: config 0 descriptor?? [ 179.590883][ T5728] usb 3-1: can't set config #0, error -71 [ 179.700462][ T5728] usb 3-1: USB disconnect, device number 10 [ 179.944223][ T5696] udevd[5696]: setting owner of /dev/bus/usb/003/010 to uid=0, gid=0 failed: No such file or directory [ 180.149280][ T5587] ath6kl: Failed to submit usb control message: -71 [ 180.149326][ T5587] ath6kl: unable to send the bmi data to the device: -71 [ 180.149338][ T5587] ath6kl: Unable to send get target info: -71 [ 180.150207][ T5587] ath6kl: Failed to init ath6kl core: -71 [ 180.150714][ T5587] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 180.220185][ T5587] usb 5-1: USB disconnect, device number 13 [ 182.036424][ T5618] Bluetooth: hci4: Dropping invalid advertising data [ 182.036441][ T5618] Bluetooth: hci4: Dropping invalid advertising data [ 182.036671][ T5618] Bluetooth: hci4: unknown advertising packet type: 0x9e [ 182.036696][ T5618] Bluetooth: hci4: Malformed LE Event: 0x02 [ 183.503549][ T6885] overlayfs: upper fs does not support file handles, falling back to index=off. [ 183.974473][ T5618] Bluetooth: hci3: unexpected event 0x3e length: 262 > 260 [ 183.974496][ T5618] Bluetooth: hci3: unexpected subevent 0x0d length: 261 > 260 [ 183.974533][ T5618] Bluetooth: hci3: adv larger than maximum supported [ 184.641292][ T5737] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 185.110786][ T5737] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.110819][ T5737] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 185.110831][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.128896][ T5737] usb 1-1: config 0 descriptor?? [ 186.255110][ T6918] binder: 6917:6918 ioctl 4018620d 0 returned -22 [ 186.255622][ T6907] trusted_key: encrypted_key: key user:syz not found [ 187.557477][ T5737] ath6kl: Failed to submit usb control message: -110 [ 187.557528][ T5737] ath6kl: unable to send the bmi data to the device: -110 [ 187.557541][ T5737] ath6kl: Unable to send get target info: -110 [ 187.560610][ T5737] ath6kl: Failed to init ath6kl core: -110 [ 187.561107][ T5737] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 187.746339][ T5737] usb 1-1: USB disconnect, device number 9 [ 188.031303][ T5607] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 188.230008][ T5607] usb 5-1: Using ep0 maxpacket: 32 [ 188.247162][ T5607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.247231][ T5607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.247301][ T5607] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 188.247358][ T5607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.169369][ T5607] usb 5-1: config 0 descriptor?? [ 189.263569][ T5607] hub 5-1:0.0: USB hub found [ 189.401503][ T5607] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 189.855410][ T5607] usbhid 5-1:0.0: can't add hid device: -71 [ 189.855484][ T5607] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 191.718118][ T6965] binder: 6964:6965 ioctl 4018620d 0 returned -22 [ 193.971414][ T5607] usb 5-1: USB disconnect, device number 14 [ 194.391826][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.391896][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.191917][ T5865] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 196.516864][ T5865] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 196.516889][ T5865] usb 2-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config [ 196.516906][ T5865] usb 2-1: config 220 has no interface number 2 [ 196.516968][ T5865] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 196.516992][ T5865] usb 2-1: config 220 interface 0 has no altsetting 0 [ 196.517007][ T5865] usb 2-1: config 220 interface 76 has no altsetting 0 [ 196.517022][ T5865] usb 2-1: config 220 interface 1 has no altsetting 0 [ 196.519950][ T5865] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 196.519976][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.519993][ T5865] usb 2-1: Product: syz [ 196.520005][ T5865] usb 2-1: Manufacturer: syz [ 196.520017][ T5865] usb 2-1: SerialNumber: syz [ 198.062777][ T5865] usb 2-1: selecting invalid altsetting 0 [ 198.063337][ T5865] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 198.063368][ T5865] uvcvideo 2-1:220.0: No valid video chain found. [ 198.095712][ T5865] usb 2-1: selecting invalid altsetting 0 [ 198.095746][ T5865] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 198.134921][ T5865] usb 2-1: USB disconnect, device number 10 [ 198.193591][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 198.431869][ T5737] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 198.481037][ T7045] syz.4.453 (7045) used greatest stack depth: 19208 bytes left [ 198.583161][ T5737] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.583213][ T5737] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 198.583233][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.619308][ T5737] usb 1-1: config 0 descriptor?? [ 198.851338][ T7038] trusted_key: encrypted_key: key user:syz not found [ 199.848180][ T5737] ath6kl: Failed to submit usb control message: -110 [ 199.848239][ T5737] ath6kl: unable to send the bmi data to the device: -110 [ 199.848252][ T5737] ath6kl: Unable to send get target info: -110 [ 199.855205][ T5737] ath6kl: Failed to init ath6kl core: -110 [ 199.855737][ T5737] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 199.914003][ T7056] binder: 7055:7056 ioctl 4018620d 0 returned -22 [ 200.149707][ T5737] usb 1-1: USB disconnect, device number 10 [ 200.377468][ T7078] Zero length message leads to an empty skb [ 202.406650][ T7112] trusted_key: encrypted_key: key user:syz not found [ 203.774204][ T7130] overlayfs: failed to clone upperpath [ 204.539919][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 206.423897][ T7172] trusted_key: encrypted_key: key user:syz not found [ 207.147288][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 207.221443][ T57] block nbd0: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 60 seconds [ 207.271427][ T57] block nbd0: Possible stuck request ffff8880275ce1c0: control (read@1024,3072B). Runtime 60 seconds [ 207.571875][ T7203] overlayfs: failed to clone upperpath [ 207.974379][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'. [ 208.150626][ T5737] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 208.886357][ T5737] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.886421][ T5737] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 208.886443][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.048683][ T5737] usb 2-1: config 0 descriptor?? [ 209.171357][ T5607] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 209.282109][ T7213] trusted_key: encrypted_key: key user:syz not found [ 209.333962][ T5607] usb 4-1: not running at top speed; connect to a high speed hub [ 209.335457][ T5607] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 202, changing to 4 [ 209.335487][ T5607] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 209.335521][ T5607] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 209.338929][ T5607] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 209.338966][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.338984][ T5607] usb 4-1: Product: syz [ 209.338995][ T5607] usb 4-1: Manufacturer: syz [ 209.339008][ T5607] usb 4-1: SerialNumber: syz [ 209.426115][ T5737] ath6kl: Failed to submit usb control message: -71 [ 209.426154][ T5737] ath6kl: unable to send the bmi data to the device: -71 [ 209.426166][ T5737] ath6kl: Unable to send get target info: -71 [ 209.489076][ T5737] ath6kl: Failed to init ath6kl core: -71 [ 209.489512][ T5737] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 209.511229][ T5737] usb 2-1: USB disconnect, device number 11 [ 209.665915][ T5607] usb 4-1: 1:1 : bogus bTerminalLink 154 [ 209.687046][ T5728] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 209.844455][ T5728] usb 1-1: Using ep0 maxpacket: 8 [ 209.848037][ T5728] usb 1-1: config 4 has an invalid interface number: 98 but max is 0 [ 209.848061][ T5728] usb 1-1: config 4 has no interface number 0 [ 209.848102][ T5728] usb 1-1: config 4 interface 98 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 209.848127][ T5728] usb 1-1: config 4 interface 98 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 209.848147][ T5728] usb 1-1: config 4 interface 98 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.848165][ T5728] usb 1-1: config 4 interface 98 has no altsetting 0 [ 209.851141][ T5728] usb 1-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=d6.1d [ 209.852826][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.852845][ T5728] usb 1-1: Product: syz [ 209.852857][ T5728] usb 1-1: Manufacturer: syz [ 209.852868][ T5728] usb 1-1: SerialNumber: syz [ 210.194243][ T5728] s2255 1-1:4.98: Could not find bulk-in endpoint [ 210.194346][ T5728] Sensoray 2255 driver load failed: 0xfffffff4 [ 210.194373][ T5728] s2255 1-1:4.98: probe with driver s2255 failed with error -12 [ 210.217739][ T5728] usb 1-1: USB disconnect, device number 11 [ 210.228220][ T5607] usb 4-1: USB disconnect, device number 5 [ 211.239519][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'. [ 211.627998][ T7276] netlink: 256 bytes leftover after parsing attributes in process `syz.0.542'. [ 212.117972][ T199] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 212.920002][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 212.943296][ T199] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.943347][ T199] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 212.943366][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.983809][ T199] usb 1-1: config 0 descriptor?? [ 213.198244][ T7285] trusted_key: encrypted_key: key user:syz not found [ 213.227670][ T5728] kernel write not supported for file /uinput (pid: 5728 comm: kworker/1:5) [ 213.374285][ T199] ath6kl: Failed to submit usb control message: -71 [ 213.374333][ T199] ath6kl: unable to send the bmi data to the device: -71 [ 213.374345][ T199] ath6kl: Unable to send get target info: -71 [ 213.404475][ T199] ath6kl: Failed to init ath6kl core: -71 [ 213.405006][ T199] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 213.439998][ T199] usb 1-1: USB disconnect, device number 12 [ 213.840833][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'. [ 215.683836][ T7381] trusted_key: encrypted_key: key user:syz not found [ 216.431883][ T7398] overlayfs: missing 'lowerdir' [ 217.466375][ T5618] Bluetooth: hci1: Dropping invalid advertising data [ 217.466411][ T5618] Bluetooth: hci1: Malformed LE Event: 0x02 [ 218.993078][ T5618] Bluetooth: hci4: adv larger than maximum supported [ 219.016752][ T7431] trusted_key: encrypted_key: key user:syz not found [ 219.452557][ T5618] Bluetooth: hci0: unknown advertising packet type: 0x6a [ 219.452607][ T5618] Bluetooth: hci0: Malformed LE Event: 0x02 [ 220.351898][ T7443] overlayfs: missing 'workdir' [ 221.954288][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.609'. [ 222.038658][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 222.190872][ T5618] Bluetooth: hci3: adv larger than maximum supported [ 222.775509][ T5618] Bluetooth: hci0: unknown advertising packet type: 0x6a [ 222.775560][ T5618] Bluetooth: hci0: Malformed LE Event: 0x02 [ 224.361776][ T5618] Bluetooth: hci1: unknown advertising packet type: 0x6a [ 224.361835][ T5618] Bluetooth: hci1: Malformed LE Event: 0x02 [ 225.829626][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 225.829662][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 226.579889][ T5618] Bluetooth: hci1: unknown advertising packet type: 0x6a [ 226.579939][ T5618] Bluetooth: hci1: Malformed LE Event: 0x02 [ 227.097927][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 227.416484][ T7551] overlayfs: failed to resolve './file1': -2 [ 227.648397][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.648'. [ 227.648426][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.648'. [ 227.950997][ T5618] Bluetooth: hci1: unknown advertising packet type: 0x6a [ 227.951057][ T5618] Bluetooth: hci1: Malformed LE Event: 0x02 [ 229.686662][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 229.686689][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 229.829864][ T7593] 9p: Bad value for 'wfdno' [ 230.593238][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 230.606718][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 231.006682][ T7628] 9p: Bad value for 'wfdno' [ 232.120359][ T7649] syz.4.685 uses obsolete (PF_INET,SOCK_PACKET) [ 232.222022][ T5618] Bluetooth: hci1: unknown advertising packet type: 0x6a [ 232.222071][ T5618] Bluetooth: hci1: Malformed LE Event: 0x02 [ 235.612515][ T5729] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 235.771319][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 235.832135][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.832164][ T5729] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.832176][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.854558][ T5729] usb 1-1: config 0 descriptor?? [ 236.758111][ T5729] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 237.425171][ T57] block nbd0: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 90 seconds [ 237.425380][ T57] block nbd0: Possible stuck request ffff8880275ce1c0: control (read@1024,3072B). Runtime 90 seconds [ 237.961822][ T822] usb 1-1: USB disconnect, device number 13 [ 239.730008][ T7785] 9p: Bad value for 'rfdno' [ 239.765245][ T7787] gfs2: gfs2 mount does not exist [ 241.052613][ T5607] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 241.214897][ T5607] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.214949][ T5607] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 241.214969][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.265167][ T5607] usb 2-1: config 0 descriptor?? [ 241.667799][ T5607] ath6kl: Failed to submit usb control message: -71 [ 241.667844][ T5607] ath6kl: unable to send the bmi data to the device: -71 [ 241.667856][ T5607] ath6kl: Unable to send get target info: -71 [ 241.699775][ T5607] ath6kl: Failed to init ath6kl core: -71 [ 241.700340][ T5607] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 241.767587][ T5607] usb 2-1: USB disconnect, device number 12 [ 242.364550][ T7840] overlayfs: failed to resolve './file1': -2 [ 246.586682][ T7893] overlayfs: failed to resolve './file1': -2 [ 248.085688][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.155078][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.158702][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.218367][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.229817][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.351363][ T199] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 248.622008][ T199] usb 1-1: device descriptor read/64, error -71 [ 248.864561][ T199] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 249.011532][ T199] usb 1-1: device descriptor read/64, error -71 [ 249.123972][ T199] usb usb1-port1: attempt power cycle [ 249.472865][ T199] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 249.496072][ T199] usb 1-1: device descriptor read/8, error -71 [ 249.732489][ T199] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 249.762968][ T199] usb 1-1: device descriptor read/8, error -71 [ 249.874607][ T199] usb usb1-port1: unable to enumerate USB device [ 250.461305][ T5618] Bluetooth: hci5: command tx timeout [ 252.541672][ T5618] Bluetooth: hci5: command tx timeout [ 253.110449][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.110647][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.110820][ T7906] bridge_slave_0: entered allmulticast mode [ 253.134400][ T7906] bridge_slave_0: entered promiscuous mode [ 253.137353][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.137581][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.137747][ T7906] bridge_slave_1: entered allmulticast mode [ 253.140201][ T7906] bridge_slave_1: entered promiscuous mode [ 253.225126][ T7906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.230583][ T7906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.291049][ T7906] team0: Port device team_slave_0 added [ 253.300729][ T7906] team0: Port device team_slave_1 added [ 253.344671][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.344687][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.344708][ T7906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.346862][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.346874][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.346895][ T7906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.451568][ T8017] overlayfs: failed to resolve './file1': -2 [ 253.603148][ T8020] overlayfs: missing 'lowerdir' [ 254.210282][ T7906] hsr_slave_0: entered promiscuous mode [ 254.212051][ T7906] hsr_slave_1: entered promiscuous mode [ 254.212881][ T7906] debugfs: 'hsr0' already exists in 'hsr' [ 254.212911][ T7906] Cannot create hsr debugfs directory [ 254.621325][ T5618] Bluetooth: hci5: command tx timeout [ 254.632665][ T8049] overlayfs: failed to resolve './file1': -2 [ 254.643460][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 254.876045][ T9] usb 2-1: device descriptor read/64, error -71 [ 255.010247][ T8057] overlayfs: missing 'lowerdir' [ 255.111380][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 255.241320][ T9] usb 2-1: device descriptor read/64, error -71 [ 255.355363][ T9] usb usb2-port1: attempt power cycle [ 255.744141][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 255.771072][ T9] usb 2-1: device descriptor read/8, error -71 [ 255.811251][ T7906] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 255.842858][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.842924][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.884904][ T7906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 255.887443][ T7906] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 255.951441][ T7906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 255.954834][ T7906] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.001352][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 256.022061][ T9] usb 2-1: device descriptor read/8, error -71 [ 256.022674][ T7906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.024453][ T7906] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 256.111990][ T7906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.131734][ T9] usb usb2-port1: unable to enumerate USB device [ 256.440954][ T7906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.522838][ T7906] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.551644][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.551718][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.563305][ T4120] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.564240][ T4120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.701306][ T5618] Bluetooth: hci5: command tx timeout [ 257.109672][ T8091] overlayfs: failed to resolve './file1': -2 [ 257.230261][ T8097] netlink: zone id is out of range [ 257.230275][ T8097] netlink: zone id is out of range [ 257.230282][ T8097] netlink: zone id is out of range [ 257.230288][ T8097] netlink: zone id is out of range [ 257.429744][ T8100] overlayfs: missing 'lowerdir' [ 259.413788][ T8136] overlayfs: failed to resolve './file1': -2 [ 260.150381][ T7906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.188597][ T8148] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 260.188650][ T8148] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 260.323172][ T5737] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 260.451366][ T5737] usb 1-1: device descriptor read/64, error -71 [ 260.693554][ T5737] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 260.699082][ T7906] veth0_vlan: entered promiscuous mode [ 260.761077][ T7906] veth1_vlan: entered promiscuous mode [ 260.821299][ T5737] usb 1-1: device descriptor read/64, error -71 [ 260.870951][ T7906] veth0_macvtap: entered promiscuous mode [ 260.904200][ T7906] veth1_macvtap: entered promiscuous mode [ 260.934440][ T5737] usb usb1-port1: attempt power cycle [ 260.950512][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.056908][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.311773][ T5737] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 261.339827][ T5737] usb 1-1: device descriptor read/8, error -71 [ 261.478345][ T7876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.478389][ T7876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.478420][ T7876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.478448][ T7876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.548022][ T8178] overlayfs: failed to resolve './file1': -2 [ 261.573052][ T5737] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 261.591995][ T5737] usb 1-1: device descriptor read/8, error -71 [ 261.712206][ T5737] usb usb1-port1: unable to enumerate USB device [ 262.326246][ T8182] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 262.326289][ T8182] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 262.804631][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.804650][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.009326][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.009359][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.686673][ T8208] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 263.686726][ T8208] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 264.261352][ T5712] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 264.435068][ T5712] usb 6-1: Using ep0 maxpacket: 32 [ 264.436856][ T5712] usb 6-1: no configurations [ 264.436871][ T5712] usb 6-1: can't read configurations, error -22 [ 264.561289][ T5712] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 264.722837][ T5712] usb 6-1: Using ep0 maxpacket: 32 [ 264.723752][ T5712] usb 6-1: no configurations [ 264.723767][ T5712] usb 6-1: can't read configurations, error -22 [ 264.724291][ T5712] usb usb6-port1: attempt power cycle [ 265.221324][ T5712] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 265.244798][ T5712] usb 6-1: Using ep0 maxpacket: 32 [ 265.245567][ T5712] usb 6-1: no configurations [ 265.245580][ T5712] usb 6-1: can't read configurations, error -22 [ 265.381309][ T5712] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 265.403641][ T5712] usb 6-1: Using ep0 maxpacket: 32 [ 265.404743][ T5712] usb 6-1: no configurations [ 265.404757][ T5712] usb 6-1: can't read configurations, error -22 [ 265.409741][ T5712] usb usb6-port1: unable to enumerate USB device [ 265.492431][ T8258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.905'. [ 265.858406][ T8273] fuse: fd is not a fuse device [ 265.988376][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 266.147859][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.147911][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 266.147932][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.192251][ T9] usb 1-1: config 0 descriptor?? [ 266.262120][ T8284] overlayfs: failed to resolve './file1': -2 [ 266.850440][ T9] ath6kl: Failed to submit usb control message: -71 [ 266.850483][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 266.850496][ T9] ath6kl: Unable to send get target info: -71 [ 266.853241][ T9] ath6kl: Failed to init ath6kl core: -71 [ 266.853771][ T9] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 266.927381][ T9] usb 1-1: USB disconnect, device number 22 [ 268.018168][ T8323] overlayfs: failed to resolve './file1': -2 [ 268.081665][ T57] block nbd0: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 120 seconds [ 268.086998][ T57] block nbd0: Possible stuck request ffff8880275ce1c0: control (read@1024,3072B). Runtime 120 seconds [ 269.300073][ T8339] sg_write: data in/out 221148/136 bytes for SCSI command 0x0-- guessing data in; [ 269.300073][ T8339] program syz.0.939 not setting count and/or reply_len properly [ 270.245171][ T8361] overlayfs: failed to resolve './file1': -2 [ 271.484260][ T8387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.956'. [ 272.381556][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 272.521699][ T8401] fuse: Bad value for 'fd' [ 272.651275][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 272.652230][ T9] usb 1-1: no configurations [ 272.652240][ T9] usb 1-1: can't read configurations, error -22 [ 272.781360][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 272.931280][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 272.932205][ T9] usb 1-1: no configurations [ 272.932220][ T9] usb 1-1: can't read configurations, error -22 [ 272.933255][ T9] usb usb1-port1: attempt power cycle [ 273.144207][ T8412] overlayfs: failed to resolve './file1': -2 [ 273.397085][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 273.432748][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 273.433741][ T9] usb 1-1: no configurations [ 273.433755][ T9] usb 1-1: can't read configurations, error -22 [ 273.591302][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 273.708760][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 273.860397][ T9] usb 1-1: no configurations [ 273.860415][ T9] usb 1-1: can't read configurations, error -22 [ 274.499417][ T9] usb usb1-port1: unable to enumerate USB device [ 276.774405][ T8450] overlayfs: failed to resolve './file1': -2 [ 279.212777][ T8501] overlayfs: failed to resolve './file1': -2 [ 283.043922][ T8549] overlayfs: failed to resolve './file1': -2 [ 284.192093][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'. [ 284.357674][ T8564] netlink: 'syz.2.1021': attribute type 62 has an invalid length. [ 285.214983][ T8579] overlayfs: missing 'lowerdir' [ 286.495120][ T8593] overlayfs: failed to resolve './file1': -2 [ 287.154998][ T5618] Bluetooth: hci4: Malformed LE Event: 0x1b [ 287.475329][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1036'. [ 289.305263][ T8628] overlayfs: missing 'lowerdir' [ 292.929660][ T8692] fuse: fd is not a fuse device [ 293.104814][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 293.268952][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 293.268977][ T9] usb 2-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config [ 293.268994][ T9] usb 2-1: config 220 has no interface number 2 [ 293.269059][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 293.269081][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 293.269096][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 293.269111][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 293.360329][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 293.360354][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.360363][ T9] usb 2-1: Product: syz [ 293.360370][ T9] usb 2-1: Manufacturer: syz [ 293.360377][ T9] usb 2-1: SerialNumber: syz [ 293.744096][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 293.744127][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 293.839025][ T9] usb 2-1: USB disconnect, device number 17 [ 293.869799][ T5795] udevd[5795]: setting owner of /dev/bus/usb/002/017 to uid=0, gid=0 failed: No such file or directory [ 294.952969][ T5729] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 295.114728][ T5729] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.114752][ T5729] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 295.114786][ T5729] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.114804][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.210059][ T5729] usb 2-1: config 0 descriptor?? [ 295.733527][ T5729] usb 2-1: USB disconnect, device number 18 [ 298.763125][ T57] block nbd0: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 150 seconds [ 298.763169][ T57] block nbd0: Possible stuck request ffff8880275ce1c0: control (read@1024,3072B). Runtime 150 seconds [ 302.542323][ T5613] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 303.233933][ T5613] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 303.233970][ T5613] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.235341][ T5613] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 303.235365][ T5613] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 303.235382][ T5613] usb 1-1: Manufacturer: syz [ 303.371103][ T5613] usb 1-1: config 0 descriptor?? [ 303.394483][ T5613] igorplugusb 1-1:0.0: incorrect number of endpoints [ 303.614443][ T5613] usb 1-1: USB disconnect, device number 27 [ 307.387431][ T8894] netlink: 'syz.4.1148': attribute type 62 has an invalid length. [ 308.724696][ T8933] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 308.941512][ T5614] Bluetooth: hci4: command 0x0c1a tx timeout [ 308.941665][ T5618] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 309.871356][ T5610] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 309.871413][ T5610] Bluetooth: hci5: command 0x206a tx timeout [ 310.703432][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.703446][ T5616] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 313.648946][ T9025] overlayfs: failed to clone upperpath [ 316.171225][ T4963] udevd[4963]: worker [5884] /devices/virtual/block/nbd0 is taking a long time [ 317.305455][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.305522][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.917728][ T9080] overlayfs: failed to clone upperpath [ 319.954591][ T9109] syz.5.1234 (9109) used greatest stack depth: 19144 bytes left [ 320.510442][ T9133] overlayfs: failed to clone upperpath [ 321.377252][ T5616] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 322.244858][ T9166] overlayfs: failed to clone upperpath [ 324.172805][ T9206] overlayfs: failed to clone upperpath [ 326.493393][ T9245] overlayfs: failed to clone upperpath [ 327.476482][ T5616] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 327.476529][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 327.476550][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.476562][ T5616] Workqueue: hci5 hci_rx_work [ 327.476608][ T5616] Call Trace: [ 327.476615][ T5616] [ 327.476624][ T5616] dump_stack_lvl+0xe8/0x150 [ 327.476656][ T5616] sysfs_create_dir_ns+0x271/0x2a0 [ 327.476688][ T5616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 327.476721][ T5616] ? rt_spin_unlock+0x163/0x200 [ 327.476745][ T5616] kobject_add_internal+0x62c/0xce0 [ 327.476769][ T5616] kobject_add+0x163/0x240 [ 327.476783][ T5616] ? rt_spin_unlock+0x157/0x200 [ 327.476805][ T5616] ? __pfx_kobject_add+0x10/0x10 [ 327.476839][ T5616] ? get_device_parent+0x370/0x3a0 [ 327.476864][ T5616] device_add+0x3fa/0xb80 [ 327.476887][ T5616] hci_conn_add_sysfs+0xd5/0x210 [ 327.476915][ T5616] le_conn_complete_evt+0xfef/0x1580 [ 327.476945][ T5616] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 327.476964][ T5616] ? lockdep_hardirqs_on+0x7a/0x110 [ 327.476992][ T5616] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 327.477016][ T5616] ? rt_mutex_slowunlock+0x219/0x460 [ 327.477037][ T5616] ? skb_pull_data+0xf0/0x200 [ 327.477063][ T5616] hci_le_conn_complete_evt+0x187/0x470 [ 327.477100][ T5616] hci_event_packet+0x67a/0xf10 [ 327.477129][ T5616] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 327.477153][ T5616] ? __pfx_hci_event_packet+0x10/0x10 [ 327.477176][ T5616] ? rt_spin_unlock+0x157/0x200 [ 327.477203][ T5616] ? hci_send_to_monitor+0xe2/0x590 [ 327.477224][ T5616] hci_rx_work+0x3ee/0x1020 [ 327.477256][ T5616] ? process_scheduled_works+0xa20/0x14e0 [ 327.477276][ T5616] process_scheduled_works+0xa8e/0x14e0 [ 327.477324][ T5616] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.477353][ T5616] ? assign_work+0x3cf/0x5d0 [ 327.477378][ T5616] worker_thread+0xa47/0xfb0 [ 327.477426][ T5616] kthread+0x388/0x470 [ 327.477451][ T5616] ? __pfx_worker_thread+0x10/0x10 [ 327.477470][ T5616] ? __pfx_kthread+0x10/0x10 [ 327.477495][ T5616] ret_from_fork+0x514/0xb70 [ 327.477524][ T5616] ? __pfx_ret_from_fork+0x10/0x10 [ 327.477548][ T5616] ? __switch_to+0xc89/0x1420 [ 327.477572][ T5616] ? __pfx_kthread+0x10/0x10 [ 327.477598][ T5616] ret_from_fork_asm+0x1a/0x30 [ 327.477633][ T5616] [ 327.480864][ T5616] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 327.480909][ T5616] Bluetooth: hci5: failed to register connection device [ 328.642394][ T4963] udevd[4963]: worker [5884] /devices/virtual/block/nbd0 timeout; kill it [ 328.766365][ T4963] udevd[4963]: seq 10916 '/devices/virtual/block/nbd0' killed [ 329.307001][ T57] block nbd0: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 180 seconds [ 329.307042][ T57] block nbd0: Possible stuck request ffff8880275ce1c0: control (read@1024,3072B). Runtime 180 seconds [ 329.596161][ T9281] overlayfs: failed to clone upperpath [ 331.325673][ T9288] overlayfs: failed to clone upperpath [ 334.394951][ T9329] overlayfs: failed to clone upperpath [ 337.255205][ T9370] overlayfs: failed to clone upperpath [ 340.072323][ T9413] overlayfs: failed to clone upperpath [ 341.294384][ T9454] overlayfs: failed to clone upperpath [ 350.273749][ T9708] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 353.616759][ T9776] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1510'. [ 355.181086][ T9811] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1526'. [ 356.064363][ T9837] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1537'. [ 356.745931][ T9870] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1552'. [ 356.978474][ T9880] netlink: 'syz.4.1557': attribute type 10 has an invalid length. [ 356.978700][ T9880] team0: Device bond0 is up. Set it down before adding it as a team port [ 357.347934][ T9896] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1565'. [ 357.565356][ T9906] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 358.749156][ T9922] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1577'. [ 359.581916][ T57] block nbd0: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 210 seconds [ 359.581988][ T57] block nbd0: Possible stuck request ffff8880275ce1c0: control (read@1024,3072B). Runtime 210 seconds [ 362.302212][T10022] overlayfs: failed to clone upperpath [ 365.555329][T10080] netlink: 'syz.1.1644': attribute type 10 has an invalid length. [ 365.555355][T10080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.555374][T10080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.829279][T10080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.829304][T10080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.165751][T10114] vlan1: entered allmulticast mode [ 368.165774][T10114] veth0_vlan: entered allmulticast mode [ 369.997779][T10145] overlayfs: failed to clone upperpath [ 370.639092][ T5618] Bluetooth: hci5: command 0x206a tx timeout [ 372.806168][T10198] overlayfs: failed to clone upperpath [ 378.720469][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.720538][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.256683][T10319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1734'. [ 381.914237][ T38] INFO: task syz.3.677:7630 blocked in I/O wait for more than 143 seconds. [ 381.914258][ T38] Not tainted syzkaller #0 [ 381.914267][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.914275][ T38] task:syz.3.677 state:D stack:25024 pid:7630 tgid:7629 ppid:5600 task_flags:0x400040 flags:0x00080002 [ 381.914319][ T38] Call Trace: [ 381.914327][ T38] [ 381.914338][ T38] __schedule+0x16dc/0x5500 [ 381.914524][ T38] ? __pfx___schedule+0x10/0x10 [ 381.914564][ T38] ? schedule+0x90/0x2b0 [ 381.914588][ T38] schedule+0x164/0x2b0 [ 381.914611][ T38] io_schedule+0x80/0xe0 [ 381.914634][ T38] folio_wait_bit_common+0x83c/0xbc0 [ 381.914771][ T38] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 381.914795][ T38] ? __pfx_wake_page_function+0x10/0x10 [ 381.914828][ T38] ? migrate_pages_batch+0x1357/0x4340 [ 381.914906][ T38] migrate_pages_batch+0x1bb1/0x4340 [ 381.914994][ T38] ? __pfx_compaction_free+0x10/0x10 [ 381.915085][ T38] ? __pfx_compaction_alloc+0x10/0x10 [ 381.915110][ T38] ? __pfx_migrate_pages_batch+0x10/0x10 [ 381.915129][ T38] ? try_to_take_rt_mutex+0x842/0xb00 [ 381.915167][ T38] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 381.915192][ T38] ? __lock_acquire+0x683/0x2ce0 [ 381.915271][ T38] ? __lock_acquire+0x683/0x2ce0 [ 381.915292][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 381.915347][ T38] migrate_pages+0x1f90/0x2900 [ 381.915370][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.915431][ T38] ? __pfx_compaction_free+0x10/0x10 [ 381.915449][ T38] ? __pfx_compaction_alloc+0x10/0x10 [ 381.915474][ T38] ? __pfx_migrate_pages+0x10/0x10 [ 381.915499][ T38] ? rcu_is_watching+0x15/0xb0 [ 381.915562][ T38] ? isolate_migratepages_block+0x30c5/0x3650 [ 381.915616][ T38] ? isolate_migratepages_block+0x1c61/0x3650 [ 381.915648][ T38] compact_zone+0x3144/0x4a70 [ 381.915683][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 381.915719][ T38] ? rt_mutex_slowunlock+0x219/0x460 [ 381.915734][ T38] ? __pfx_compact_zone+0x10/0x10 [ 381.915749][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 381.915777][ T38] sysctl_compaction_handler+0x3f3/0x880 [ 381.915796][ T38] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 381.915829][ T38] ? __kvmalloc_node_noprof+0x5de/0x8a0 [ 381.915889][ T38] ? proc_sys_call_handler+0x3d1/0x830 [ 381.915947][ T38] ? proc_sys_call_handler+0x3d1/0x830 [ 381.915967][ T38] proc_sys_call_handler+0x4c7/0x830 [ 381.916056][ T38] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 381.916074][ T38] ? __asan_memset+0x22/0x50 [ 381.916128][ T38] iter_file_splice_write+0xa36/0x1240 [ 381.916196][ T38] ? __pfx_iter_file_splice_write+0x10/0x10 [ 381.916225][ T38] ? __pfx_iter_file_splice_write+0x10/0x10 [ 381.916240][ T38] direct_splice_actor+0x104/0x160 [ 381.916257][ T38] splice_direct_to_actor+0x586/0xcc0 [ 381.916286][ T38] ? __pfx_direct_splice_actor+0x10/0x10 [ 381.916301][ T38] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 381.916323][ T38] do_splice_direct+0x19b/0x2a0 [ 381.916340][ T38] ? __pfx_do_splice_direct+0x10/0x10 [ 381.916356][ T38] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 381.916377][ T38] ? rw_verify_area+0x209/0x4d0 [ 381.916460][ T38] do_sendfile+0x540/0x7e0 [ 381.916489][ T38] ? __pfx_do_sendfile+0x10/0x10 [ 381.916531][ T38] __se_sys_sendfile64+0xdf/0x1a0 [ 381.916551][ T38] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 381.916566][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.916607][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.916621][ T38] do_syscall_64+0x174/0x580 [ 381.916668][ T38] ? trace_irq_disable+0x3b/0x140 [ 381.916772][ T38] ? clear_bhb_loop+0x40/0x90 [ 381.916792][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.916813][ T38] RIP: 0033:0x7ffbb98ade59 [ 381.916834][ T38] RSP: 002b:00007ffbb7b06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 381.916849][ T38] RAX: ffffffffffffffda RBX: 00007ffbb9b35fa0 RCX: 00007ffbb98ade59 [ 381.916859][ T38] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000009 [ 381.916868][ T38] RBP: 00007ffbb9943e6f R08: 0000000000000000 R09: 0000000000000000 [ 381.916876][ T38] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 381.916885][ T38] R13: 00007ffbb9b36038 R14: 00007ffbb9b35fa0 R15: 00007ffcd700f428 [ 381.916911][ T38] [ 381.916935][ T38] [ 381.916935][ T38] Showing all locks held in the system: [ 381.916949][ T38] 1 lock held by khungtaskd/38: [ 381.916958][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 381.917114][ T38] 2 locks held by getty/5361: [ 381.917122][ T38] #0: ffff88803603d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 381.917221][ T38] #1: ffffc90003cc32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 381.917291][ T38] 1 lock held by udevd/5884: [ 381.917299][ T38] #0: ffff8880275444c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 381.917380][ T38] 1 lock held by syz.3.677/7630: [ 381.917388][ T38] #0: ffff888061326500 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 381.917428][ T38] 2 locks held by syz.4.1722/10288: [ 381.917437][ T38] 3 locks held by syz.4.1759/10374: [ 381.917443][ T38] #0: ffffffff8f5a1a20 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 381.917542][ T38] #1: ffff88813ffafd58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0 [ 381.917577][ T38] #2: ffff8880b8628458 (hrtimer_bases.lock){-...}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x430 [ 381.917683][ T38] 3 locks held by syz.2.1760/10376: [ 381.917694][ T38] [ 381.917697][ T38] ============================================= [ 381.917697][ T38] [ 381.917704][ T38] NMI backtrace for cpu 1 [ 381.917715][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.917731][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.917739][ T38] Call Trace: [ 381.917745][ T38] [ 381.917750][ T38] dump_stack_lvl+0xe8/0x150 [ 381.917777][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 381.917843][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 381.917934][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 381.917951][ T38] sys_info+0x135/0x170 [ 381.917964][ T38] watchdog+0xfd7/0x1030 [ 381.918053][ T38] ? watchdog+0x1c7/0x1030 [ 381.918075][ T38] kthread+0x388/0x470 [ 381.918128][ T38] ? __pfx_watchdog+0x10/0x10 [ 381.918144][ T38] ? __pfx_kthread+0x10/0x10 [ 381.918165][ T38] ret_from_fork+0x514/0xb70 [ 381.918244][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 381.918261][ T38] ? __switch_to+0xc89/0x1420 [ 381.918345][ T38] ? __pfx_kthread+0x10/0x10 [ 381.918364][ T38] ret_from_fork_asm+0x1a/0x30 [ 381.918388][ T38] [ 381.919021][ T38] Sending NMI from CPU 1 to CPUs 0: [ 381.919053][ C0] NMI backtrace for cpu 0 [ 381.919074][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.919091][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.919100][ C0] RIP: 0010:__dequeue_entity+0xb40/0x1180 [ 381.919160][ C0] Code: 24 68 74 11 48 8b 74 24 28 48 c7 c2 10 11 99 81 e8 85 6b a3 09 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 ef e8 26 98 95 00 49 8b 5d 00 4d 8d 74 24 38 4c 89 f0 [ 381.919172][ C0] RSP: 0018:ffffc90000157888 EFLAGS: 00000046 [ 381.919185][ C0] RAX: 1ffffd1ffff90b80 RBX: ffffe8ffffc88fb8 RCX: dffffc0000000000 [ 381.919196][ C0] RDX: ffffffff81991110 RSI: ffffe8ffffc82dd0 RDI: ffffe8ffffc88ff8 [ 381.919207][ C0] RBP: 0000000000155cc0 R08: ffff888036eaddc7 R09: 1ffff11006dd5bb8 [ 381.919218][ C0] R10: dffffc0000000000 R11: ffffffff81991110 R12: ffff8880b863b980 [ 381.919229][ C0] R13: ffffe8ffffc85c00 R14: ffffe8ffffc88fb0 R15: ffffe8ffffc82e00 [ 381.919240][ C0] FS: 0000000000000000(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 381.919253][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.919263][ C0] CR2: 00007fc1bc428cc0 CR3: 000000005a668000 CR4: 00000000003526f0 [ 381.919277][ C0] Call Trace: [ 381.919283][ C0] [ 381.919296][ C0] reweight_entity+0x25a/0xa60 [ 381.919318][ C0] enqueue_task_fair+0x1cf2/0x24e0 [ 381.919366][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 381.919407][ C0] enqueue_task+0x75/0x410 [ 381.919451][ C0] ttwu_do_activate+0x1c8/0x640 [ 381.919474][ C0] try_to_wake_up+0x7b1/0x1430 [ 381.919497][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 381.919526][ C0] hrtimer_wakeup+0x4e/0x60 [ 381.919545][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 381.919573][ C0] hrtimer_run_softirq+0x18f/0x260 [ 381.919595][ C0] handle_softirqs+0x1d9/0x6c0 [ 381.919662][ C0] run_ktimerd+0x69/0x100 [ 381.919680][ C0] smpboot_thread_fn+0x57c/0xa80 [ 381.919745][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 381.919766][ C0] kthread+0x388/0x470 [ 381.919785][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 381.919802][ C0] ? __pfx_kthread+0x10/0x10 [ 381.919821][ C0] ret_from_fork+0x514/0xb70 [ 381.919844][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 381.919863][ C0] ? __switch_to+0xc89/0x1420 [ 381.919883][ C0] ? __pfx_kthread+0x10/0x10 [ 381.919902][ C0] ret_from_fork_asm+0x1a/0x30 [ 381.919924][ C0] [ 381.923252][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 381.923268][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.923286][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.923296][ T38] Call Trace: [ 381.923303][ T38] [ 381.923309][ T38] vpanic+0x56c/0xa60 [ 381.923331][ T38] ? __pfx___schedule+0x10/0x10 [ 381.923355][ T38] ? __pfx_vpanic+0x10/0x10 [ 381.923380][ T38] panic+0xc5/0xd0 [ 381.923396][ T38] ? __pfx_panic+0x10/0x10 [ 381.923410][ T38] ? preempt_schedule_common+0x82/0xd0 [ 381.923432][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 381.923455][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 381.923477][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 381.923500][ T38] watchdog+0x1030/0x1030 [ 381.923530][ T38] ? watchdog+0x1c7/0x1030 [ 381.923559][ T38] kthread+0x388/0x470 [ 381.923582][ T38] ? __pfx_watchdog+0x10/0x10 [ 381.923603][ T38] ? __pfx_kthread+0x10/0x10 [ 381.923626][ T38] ret_from_fork+0x514/0xb70 [ 381.923651][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 381.923673][ T38] ? __switch_to+0xc89/0x1420 [ 381.923695][ T38] ? __pfx_kthread+0x10/0x10 [ 381.923716][ T38] ret_from_fork_asm+0x1a/0x30 [ 381.923747][ T38] [ 381.924046][ T38] Kernel Offset: disabled