last executing test programs: 25m45.616994549s ago: executing program 32 (id=789): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e60", 0x37}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef45", 0xb7}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 25m16.37253208s ago: executing program 33 (id=838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}}], {0x14}}, 0x3c}}, 0x0) 23m16.641343658s ago: executing program 34 (id=1074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0xb375) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) dup2(r5, r3) 23m12.648508781s ago: executing program 35 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xb375) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r6}, 0xc) dup2(r7, r5) 23m6.837196319s ago: executing program 36 (id=1094): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 22m35.750256329s ago: executing program 4 (id=1149): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18c8e32, 0x0, 0xfa, 0x0, &(0x7f00000000c0)) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 22m32.389536136s ago: executing program 37 (id=1153): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8971, &(0x7f0000000080)={'dummy0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x20) 22m32.366590018s ago: executing program 4 (id=1155): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8080, 0x8400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x40}}, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000002140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$P9_RSTATFS(r2, &(0x7f0000002180)={0x43, 0x9, 0x1, {0xae5, 0x5, 0x3, 0x9, 0xf, 0x5, 0x4, 0x2, 0x1}}, 0x43) r3 = epoll_create1(0x80000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r5) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=""/244, 0xf4}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f00000005c0)=""/112, 0x70}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000740)=""/46, 0x2e}, {&(0x7f0000000780)=""/135, 0x87}, {&(0x7f0000000840)=""/135, 0x87}, {&(0x7f0000000900)=""/93, 0x5d}, {&(0x7f0000000980)=""/42, 0x2a}, {&(0x7f00000009c0)=""/79, 0x4f}], 0x9}, 0x5}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/106, 0x6a}, {&(0x7f0000000c00)=""/54, 0x36}, {&(0x7f0000000c40)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/160, 0xa0}, {&(0x7f0000000d80)=""/43, 0x2b}], 0x7}, 0x7}, {{&(0x7f0000000e00)=@hci, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/46, 0x2e}, {&(0x7f0000000f00)=""/232, 0xe8}], 0x3, &(0x7f0000001040)=""/113, 0x71}, 0x6}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000010c0)=""/243, 0xf3}, {&(0x7f00000011c0)=""/187, 0xbb}, {&(0x7f0000001280)=""/143, 0x8f}, {&(0x7f0000001340)=""/202, 0xca}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x6, &(0x7f00000015c0)=""/212, 0xd4}, 0x10000}, {{&(0x7f00000016c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000002d40)=[{0x0}, {&(0x7f0000001940)=""/62, 0x3e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/255, 0xff}, {&(0x7f0000002a80)=""/30, 0x1e}, {&(0x7f0000002ac0)=""/37, 0x25}, {&(0x7f0000002b00)=""/240, 0xf0}, {&(0x7f0000002c00)=""/111, 0x6f}, {&(0x7f0000002c80)=""/130, 0x82}], 0x9}, 0xe774}], 0x6, 0x40000042, 0x0) dup2(r4, r3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0xa0000001}) 22m30.748153297s ago: executing program 4 (id=1159): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 22m30.328519308s ago: executing program 4 (id=1161): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180), 0x80000, 0x0) 22m29.627286309s ago: executing program 4 (id=1163): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1214080, &(0x7f00000000c0)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'macgreek'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@part={'part', 0x3d, 0x7ff}}, {@gid}]}, 0x1, 0x32e, &(0x7f0000000b00)="$eJzs3U1r1E4cB/DvZLPb3XbpP/+2UvBYLXgqbT0oXixSBPENeJBibVcojRW0ggri6lmKngTBoze9ir4FvYhvQE89iCe9FA9GZiazSbaZ7ENj02W/H+g2D/Pwm0weZlZqQERD68Ly19end+WPKAMoATgHOACqgAvgGKard7e2N7b9xnpWQSWVQ/4I6JxiX5q1rUZaVplP5Qh5cs1FHe7OpRyaSJmC4FvHND8PJRIqjtDX/j4OMBJenWp/9dAj+zeaul3DJdbDYg97uIfxIsMhIqLihc9/J3xK1MPxu+MAs+HYfNCf/4nxzV5xcRwJree/o9cDIY/Pf2pXNN9TUzjZ+46ZJaaVpc+JenJjEB3uCvSZlegA0WlWqWJxajc2/MZcUxXwBOdDsWRT6nMdpiGKLdqK/jWTMjfNkNX2bGOqDWXZhkVL/JM91/jhO16kV7fyqYuYxEfxWawIDy+x3hr/uYGQB0cdH6+tp3T88/YSVSs9nSrRymhO/7+q5LjpgfdvolbWbMe1ipKMJY0sRbSP3z0T57OKPRcmEl81mNYt2Funck2m5lpsrf9OzTXVnqvmlv3G3NotP/OrlNykzujEjrgiZvAD77AcG/87MvUs7Fdm4s4vVMrwzMhsj6tSWvoxQV3AN1OuTKeLzEPtYmpHZ3uK6ziL8Tv3H2yu+n7jdk4Lz9/q4vvIbi6VXOPpf0GfiCJqjvwdS4OqXCgDyK3SP0EQ+L6pM7bLxWE0uayqPfMq0YOiqVcPVgWa+06JJXtiAEsAwi3mjtBP7Y9auUaiArvK/kv2gNqSfkKaqHLsgrpll6kqsauEka6ulFof8Vx+uLnq935LocETdTqmrxYdDBVBDq+Env/F5ivz6q4jP7yM2UjQqfBYiQuWGdCE+hztbgbXKtY6gxszCx3mXCdOASfbanRganzcXqwXxtk2pD8aev+nDLGML7jG7/+JiIiIiIiIiIiIiIiIiIiIiIiIiAZNr3+o0M+fEyRr3B3C/3iDiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOhgYu//BUrqjTGVwt//WzLv/w03jKZkMu+lIKK+/Q0AAP//oLJZGA==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) 22m29.34492015s ago: executing program 4 (id=1164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x20, 0x24, 0xe2, {0xe2, 0x0, "fcedfa253d8043e925819d25a1c63ac62b23c698b003ca1c37fc5bf598ee0a2866a508de51edf31994c040db47a13c7ce9c4cccabb2d6c6e48139eb58d2adbd189914bc67313a3b3c73dfadf10775a74417a624a9369d815d4934f26070d568653cb1214cf1c1a8538578639960f0a44f576cf89d762997471b61bbf4da9d323491574be67b6b4af2bc0a64f3446114cdc54d03be42adead9a16183c715bf9c8c03563fd3dc6d9b568f9f32b734d6a335a552fab5553756b4a816c15dadc1d85920b6dc58cf3900d400bd16707d09f1cc124117b48bcf2258e8653ba1431b958"}}, &(0x7f0000000200)={0x0, 0x3, 0x51, @string={0x51, 0x3, "a6bb61ab80bd8f4da8d751c24f658b6dbf76252e9c5277b3e29f9f30cff82eddbc95e45e3cef3a51a16d81bb2eccd0a64aa7c17bfbb1e13d62ebc23ee66bd62c4bec5a436132f162eb9d06afe7bece"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="00221c00000a0bdfe8d316b331e35ed875883895209b63925d5c57a7b1abd9ddbdb1"], &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x80, 0x1, {0x22, 0x810}}}}, &(0x7f0000000580)={0x18, &(0x7f0000000340)={0x20, 0xe, 0x88, "e65588057f522af11d101a4fb6fe7c60d17c2a99ff461f5ec5663b52c2297f58cd70ece053212153516b70eb45375788d6efce796bc0cb0cacff2106845384ef69c5faed682317cf0e4d842dee397e62d6718814b93b6f43bc0885ed0e304614de6ad7c901e10f717d9874dd4decc231a2903ce52bb3a19dfc89adcf8b7255592912e92999250238"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000480)={0x20, 0x1, 0x6b, "5fdf97950c821eff1493512abd750ac3655ac60ed3afb39c08371e6bad5b403589bee35024a15ea1bac961845f82862a04b9a2f1d918fe7a04f7529e38c6512e8db08a3f9e22d561a16d8521e9d2ae43deb37b087771a972a832769a012cd7555929c8dc02ab3602d9f527"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x4}}) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) pwrite64(r2, &(0x7f00000005c0)="8fa429df8b2eeeccebedfe68f2067ea9cf1ca5a45c945af3a6c9062c24441eb52e4c1d89f57519772b95", 0x2a, 0x8001) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f00000000c0)={0x1, "c3"}) 22m28.956016679s ago: executing program 38 (id=1164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x20, 0x24, 0xe2, {0xe2, 0x0, "fcedfa253d8043e925819d25a1c63ac62b23c698b003ca1c37fc5bf598ee0a2866a508de51edf31994c040db47a13c7ce9c4cccabb2d6c6e48139eb58d2adbd189914bc67313a3b3c73dfadf10775a74417a624a9369d815d4934f26070d568653cb1214cf1c1a8538578639960f0a44f576cf89d762997471b61bbf4da9d323491574be67b6b4af2bc0a64f3446114cdc54d03be42adead9a16183c715bf9c8c03563fd3dc6d9b568f9f32b734d6a335a552fab5553756b4a816c15dadc1d85920b6dc58cf3900d400bd16707d09f1cc124117b48bcf2258e8653ba1431b958"}}, &(0x7f0000000200)={0x0, 0x3, 0x51, @string={0x51, 0x3, "a6bb61ab80bd8f4da8d751c24f658b6dbf76252e9c5277b3e29f9f30cff82eddbc95e45e3cef3a51a16d81bb2eccd0a64aa7c17bfbb1e13d62ebc23ee66bd62c4bec5a436132f162eb9d06afe7bece"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="00221c00000a0bdfe8d316b331e35ed875883895209b63925d5c57a7b1abd9ddbdb1"], &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x80, 0x1, {0x22, 0x810}}}}, &(0x7f0000000580)={0x18, &(0x7f0000000340)={0x20, 0xe, 0x88, "e65588057f522af11d101a4fb6fe7c60d17c2a99ff461f5ec5663b52c2297f58cd70ece053212153516b70eb45375788d6efce796bc0cb0cacff2106845384ef69c5faed682317cf0e4d842dee397e62d6718814b93b6f43bc0885ed0e304614de6ad7c901e10f717d9874dd4decc231a2903ce52bb3a19dfc89adcf8b7255592912e92999250238"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000480)={0x20, 0x1, 0x6b, "5fdf97950c821eff1493512abd750ac3655ac60ed3afb39c08371e6bad5b403589bee35024a15ea1bac961845f82862a04b9a2f1d918fe7a04f7529e38c6512e8db08a3f9e22d561a16d8521e9d2ae43deb37b087771a972a832769a012cd7555929c8dc02ab3602d9f527"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x4}}) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) pwrite64(r2, &(0x7f00000005c0)="8fa429df8b2eeeccebedfe68f2067ea9cf1ca5a45c945af3a6c9062c24441eb52e4c1d89f57519772b95", 0x2a, 0x8001) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f00000000c0)={0x1, "c3"}) 19m40.026374739s ago: executing program 6 (id=1455): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) 19m39.374991387s ago: executing program 6 (id=1458): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x48) setxattr$incfs_metadata(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) 19m38.947576108s ago: executing program 6 (id=1461): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x2, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 19m38.699468416s ago: executing program 6 (id=1464): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) 19m37.947559822s ago: executing program 8 (id=1469): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="03000000002ebf19865f00500000d152139a00000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) 19m37.793485813s ago: executing program 8 (id=1471): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', '', [{0x20, ')&#\'\x9a\xc4\\\xcf##\xd7&\xee\a\xa0Y\xb3\xe9%(6\x1a(\xf0S)\x03\x1d\xf2\xc5\xfa\xc6\x9b[\xb3\f\x8c^\xaaYR7\xa5\xfc \xe1%\xd8\\\v\xadP6\xfd\xedh\xd4\xa2>R\xfe\xd5\xd1)\tGw\xaa\xd5{%Wi\xe1\xea\x8b8\"\xc1\xdd\xfe\x1bL\xd8\x02\xa2\x9dd\x18\xf1\xaf\xcf\xcd\xcex\xf3\xe8\x9b>\a\xb1+M>\xfe\x90\xa1;\x85GfD\xc5\xd8\xaf\xabe\xbc\xeb\xb0\xeb\rQl\xa4\xe1\xa3\xf2\xda4c\xc9f\xe9U|j\xc1P\x9e\xd8\x00\x05\x90\xfe\x11O>\x92\x92\x13\x85\xf8\x18\xeb#/\xee\xaaa\x8d\x97t\x0e\x83\xa9a!\x84\xbdJ\xf2\xd9|\x02\xc4\x1c\xb2\x8dH\xf2\xc1\xa4>\xf3I\xeer\x8c\xff\x00\x11%b\xd7|4\xeb\x88\xe5\xec\x1a\xc2\x10\x820n]\xe3W\x81\xc8\xc3\xb1P-\xdb\x8d\xb6 \x8f\x11\xf5\xd1\xf0\xb2\xa6\\\x15\xe0\xdd#>{a\xca\x10\x03E\x1aI\xbb@\xd0\xc4\x16\x13\r`\x15*OZ\xc8\xc9\xdd\x89\xb7\xe6'}]}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 19m37.28958973s ago: executing program 6 (id=1475): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 19m37.108899024s ago: executing program 8 (id=1478): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@host, 0x1}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 19m36.784547388s ago: executing program 8 (id=1479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r1, 0x11, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 19m36.571461613s ago: executing program 6 (id=1480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 19m36.571261163s ago: executing program 8 (id=1481): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 19m35.92494471s ago: executing program 39 (id=1480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 19m35.906271562s ago: executing program 8 (id=1484): syz_mount_image$fuse(0x0, 0x0, 0x20, &(0x7f0000000180)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b01000000000000003030303030303030303030"], 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0x11) 19m20.306737061s ago: executing program 40 (id=1484): syz_mount_image$fuse(0x0, 0x0, 0x20, &(0x7f0000000180)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b01000000000000003030303030303030303030"], 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0x11) 18m44.550300934s ago: executing program 9 (id=1677): socket$kcm(0x2b, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r1, &(0x7f0000001080)=[{0x41, 0x0, 0x3, 0xfd, @time={0x0, 0x3}, {0x0, 0x1}, {0xf}, @raw8={"80a9d4ba7408faaebe04c3c6"}}, {0x5, 0xf, 0xfd, 0xfe, @time={0x9, 0x9}, {0x3}, {0xfe, 0x1}, @time=@tick=0xe2}], 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 18m43.428938787s ago: executing program 9 (id=1681): r0 = socket(0x28, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) socket$inet_smc(0x2b, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 18m43.014133667s ago: executing program 9 (id=1683): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x5, 0x0, 0xff, 0x105}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="09000000010000", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x501000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000380)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)="c2e512c488edbffe2d1000008100", 0xe}], 0x1}, 0x20000000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x5, @loopback, 0xffffffff}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0xe0e4f3ee43f6dc44, 0x40, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 18m42.653583454s ago: executing program 9 (id=1687): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 18m42.520695913s ago: executing program 9 (id=1688): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x5, 0x6e7, &(0x7f0000002a00)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhVEROLESiFcMAihHCpUlUPPVuI0VjZJlbgorRC4gOCExKF/QEHyjQNC4h4ULlzKrVcfKyFxiThEvSya2Vl7d71+jWMn8PlE43meeV7mt888M+NdZzUB/m9dPZfmwxS5eu6NB2V+dWW2vboye6Qubicp042k2V2luJMUj5K5srzoW9K33uCjxStvffp49bNurlkvVf2xrdqNMKLucr1kuu5vemTL8Z3uYrkOLy8luVavB03stK+BiuWgna3XcOg6gxrpLO+m+W7OW+A507s7Fd375gZTydEkk/XvAamvDo2Di3Bffa2X2NVVDgAAAF5Qn9w97AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgxVM9/7+1lm10NyXTKXrP/5/obavTz6G5Hdd8+EzjAAAAAAAAAICD8dUneZIHOdbLd4rqb/5nqsyJfN5JvpD3cj8LuZfzeZD5LGUp93IxyVRfRxMP5peW7l1ca1ka3fLSyJaX9vwSvrnnlgAAAAAAAADwv+OXaa3//R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4HRTLWXVXLiXqdqTSaWS/LcvLPJBOHHe8uFKM2Pjz4OAAAAOCpTO6hzRef5Eke5Fgv3ymq9/xfqt4vT+a93MlSFrOUdhZyvX4PXb7rb6yuzLZXV2Zvl0uZH+z3+//eVRgTdQ9jVW7Unk9VNVq5kcVqy/lcq4K5nkZ332eTU714+uLq82EZU/G92g4ja9bDWu7s95t9irAvBj+KaGxRs7UeXLI2IjN1bGXL490RKKoPapLhkRg+Oht21hzITVVVxtf2dDGNtU9+TjyDMT9ar8vX85tnOuY70T8WayPRSDUSl3qzrzxnth6J5Ot//dPbN9t3bt28cf/c4b6kXRjbZPvwnJjtG4lXX+iRaO6y/kw1EifX8lfzo/wk5zKdN3Mvi/lp5rOUhXTq8vl6Ppc/p7YeqbmB3JvbRTJRH5fuMdtJTNP5YZWaz5mq7bEspsjdXM9CXq/+XcrFfDuXczlX+o7wyU3jrl5bddY3hs/63pH+28jgz36jTpRXt9+uX+XmtnrFm83O/dK99pfjerxvXLuz/vFareN958FM3yi93Bud8ZGd7+Xa2PxynSj38att7hMHa6oeifIE6t0letG90h2JZnUv2jjP/9Ap26V9p9O5Of/uJv0vD+Vfq9fltFr5yna1e0Yfiv1VzpeXM1lfSQZnR1n2ytpVpq+ssz6Xu2WDd9yy3cmqrCh6Z+qPc7eaABvP1In6d7iNPV2qyl4dKjtdX8PLslN9ZQO/b+Vu2rl+AOMHwF784+215FSOTrT+1fqk9XHr162brTcmf3DkO0dOT2T87+Pfbc6MvdY4XfwlH+fn6+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvbv//ge35tvthXujE43NiwYSrQxv2a7noURRP9BnVJ1b9VMKdtXhIScmkwxsqZ5zdOBhtIbD2JDo/CI58PHpPURwdJ3flYnmjg733MCWP2/s8MPt4xnL0DzcwXnxDBONHOxOxzJ6AhzWFQk4KBeWbr974f77H3xr8fb8OwvvLNwZv3z5ysyVy6/PXrix2F6Y6f487CiBZ2H9pn/YkQAAAAAAAAAAAAA7NeqLAWde2u5LIxsSjSTD3/HwPwsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfXH1XJoPU+TizPmZMr+6Mtsul156vWYzSaORFD9LikfJXLpLpvq6K/LHR+mM2M9Hi1fe+vTx6mfrfTW79ZNGvd7c1qVJlusl00nG6vVTGOjv2lP3V/yn9xrKAfu80+nMPV18sD/+GwAA//9kyu2N") symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(0x0, 0x103) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x56689000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'wg1\x00', 0x4}, 0x32) 18m42.092465665s ago: executing program 9 (id=1692): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18m41.453081762s ago: executing program 41 (id=1692): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18m14.167555352s ago: executing program 1 (id=1769): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x241, 0x0) pwritev(r0, &(0x7f0000000640)=[{0x0}, {0x0}], 0x2, 0xb, 0x5) 18m14.064406279s ago: executing program 1 (id=1770): socket$kcm(0x2b, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 18m12.912497784s ago: executing program 1 (id=1771): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000003400128009000100626f6e64000000002400028008001f00ffffff7f080007000000000910000880"], 0x54}}, 0x0) 18m11.639703268s ago: executing program 1 (id=1776): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0080, 0x0) fcntl$notify(r0, 0x402, 0x80000002) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 18m10.763520123s ago: executing program 1 (id=1781): unshare(0x22020600) r0 = socket$unix(0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) listen(r0, 0x0) 18m9.291591921s ago: executing program 1 (id=1784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x7, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x644, 0x4], 0xdddd0000, 0x1d4217}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m8.797846597s ago: executing program 42 (id=1784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x7, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x644, 0x4], 0xdddd0000, 0x1d4217}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m17.010079805s ago: executing program 2 (id=3506): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4dfe000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) utimensat(r2, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r0, 0x12) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10044050) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) socket(0x10, 0x3, 0x0) capset(0x0, &(0x7f0000000200)={0x200002, 0x200007, 0x801, 0x4, 0x7}) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x2) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x8000002, 0x100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000480)={0x6, 0x4, 0x1}) 7m14.471381351s ago: executing program 2 (id=3509): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) close_range(r0, r0, 0x0) 7m11.901406559s ago: executing program 2 (id=3518): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) listen(0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48}) 7m11.191558588s ago: executing program 2 (id=3519): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') unshare(0x28000600) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0b45545, &(0x7f0000000040)=0x1000) 7m7.274471519s ago: executing program 2 (id=3530): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x7, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x6000}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x128}}, 0x0) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f00000044c0)=0xfffffffffffffe7e) pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40000) 7m6.161089286s ago: executing program 2 (id=3531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x6a0}, 0x4814) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = creat(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) bind$bt_sco(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$llc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x280842, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r7 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r7) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x8, 0x101, 0x585, 0x8, 0x90000000, 0x3ff, 0xa9e, 0x0, 0x5, 0xffffff01, 0xfffffff8, 0x3, 0x400, 0x1, 0x1d, 0x1000, 0x8, 0xab9b, 0x4, 0x0, 0x7f, 0x1, 0x0, 0x100002, 0x5, 0x0, 0x80000000, 0x0, 0x101, 0x8000, 0x80]}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth1_vlan\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@private0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f00000004c0)=0xe8) 6m50.792640639s ago: executing program 43 (id=3531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x6a0}, 0x4814) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = creat(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) bind$bt_sco(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$llc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x280842, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r7 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r7) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x8, 0x101, 0x585, 0x8, 0x90000000, 0x3ff, 0xa9e, 0x0, 0x5, 0xffffff01, 0xfffffff8, 0x3, 0x400, 0x1, 0x1d, 0x1000, 0x8, 0xab9b, 0x4, 0x0, 0x7f, 0x1, 0x0, 0x100002, 0x5, 0x0, 0x80000000, 0x0, 0x101, 0x8000, 0x80]}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth1_vlan\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@private0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f00000004c0)=0xe8) 34.888812766s ago: executing program 3 (id=4481): syz_open_dev$dri(0x0, 0x1ff, 0x38402) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4, @rand_addr=0x64010102}, 0x10) 33.68719789s ago: executing program 3 (id=4483): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES8], &(0x7f0000000500)='syzkaller\x00', 0x4, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000006c0)=@get={0x1, &(0x7f0000000900)=""/211, 0xb}) ioctl$UI_DEV_CREATE(r4, 0x5501) openat$qrtrtun(0xffffff9c, &(0x7f00000000c0), 0x4102) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) 30.711605085s ago: executing program 3 (id=4488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x4, 0x6, 0x2000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030f0000000000000000340000000800030003000d440f6dc53e3fd6d8c600002dd7cc85abf83b84e74759000400"], 0x1c}, 0x1, 0x0, 0x0, 0x8004080}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="6464f30f017b0bc4e25ddebfd20008810000dfbbc9bbbaf80c66b824163e8166efbafc0cb000ee0f350f00da66b8746f789e0f23d80f21f86635800000900f23f8f30fa7e8d9e5", 0x47}], 0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x14840, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect$hid(0x6, 0x30, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(r5, &(0x7f00000002c0)='!', 0x1e000, 0x2000c8c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 28.027915691s ago: executing program 3 (id=4491): syz_open_dev$dri(0x0, 0x1ff, 0x38402) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4, @rand_addr=0x64010102}, 0x10) 26.988820403s ago: executing program 3 (id=4494): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)="f78d3f87d88f513ca0e1163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e387fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958748", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93", 0x72}, {&(0x7f0000000300)="8565aa7ecdb0b3e8d4c70e8a53", 0xd}, {&(0x7f00000006c0)="f1aaa69f791285a4cde8228668fedc9b646e4a637548e35891d15dcb50760c6db707204631c4c1aea56cbc2f1ebc75734b40e0ebd2f9129428798c445735a80bb83cdd3d5535cb69de4bf951368f93b21660e790f5aeac88cd1ac182ce958ea66b56517987e52ba27198b7734fdf952f3316226d9b05ecc9f444a5a868be3647", 0x80}], 0x5, 0x0, 0x0, 0x40000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 26.778711668s ago: executing program 3 (id=4496): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 12.968339043s ago: executing program 7 (id=4520): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800) 12.239564343s ago: executing program 0 (id=4523): syz_open_dev$dri(0x0, 0x1ff, 0x38402) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x7ff}, 0x8) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4, @rand_addr=0x64010102}, 0x10) 10.907829795s ago: executing program 44 (id=4496): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 10.810114912s ago: executing program 7 (id=4526): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r3, r1, 0x11, 0x0, r3}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x8) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r8, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000003}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x1004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) 10.809714493s ago: executing program 0 (id=4527): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x20, 0xa, 0xf9, {0xf9, 0x6, "a2cb4769153d7dc840764e7eaf05408e29136babe25374b9dde53d83a067f481abf6824940f638ede159d8b055c92e65db9a4eda12c3e27cda2cf12e52f093972ba70e0e34fb66635c6d275cd8c4869efe2a642289ebf0b8604e3336defe047046d73a363fbb2176095a66aeabe8aceade796d4fcc5bd43870a8fed9fb21ca83e901bc30eb51ec3446666d839c4ebb8608db7e11fb020302957ac7c3902f22b66dddf1dc575ea21baca67c07de5455497789013be166514d4d2c39ba38d53201774916ad10d9759d3df622dccec071eda5bdf567403692a360321ea5a8003c478e453f02e9df24dae06caab5d79f75bd572e1a4e1e1c6e"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, &(0x7f0000000540)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x1, 0x9, "e2d0e68d", "36c20d6a"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x80, 0x0, 0xfd, 0x5, 0x3}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x40, 0xb, 0xe3, "116315961a388a9118bb2a25d2ab4999a80af3dbcf5e29d8f643155756a14e46dd3950938b0aa23b90ba54805ecb67f63a2a09f838e679ed9f302c32ca50e2cd5d1508be0d7d7438cf698d85e21afb5fa295c87004126415870da6c247ce4b3d154a855b51cd687e9d218f6aa6e037f6ea2cdfc269776d1f4c49ea39cbc7541c439247124f9e93cca9f0be46c351db17d6c7db140d6e39dfb96de79ffa1f30285a3e58a3c7a7d273e15a033e1f0ec13c73d3c29fd1c07452304ab1b6e58c2c28fca3b70c1af1bf4c7a50cc76f4a80e09067b55d151a4937d125c51524b7f15c490edfa"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xe}, 0x0, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f0000000840)={0x40, 0x7, 0x2}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "bf1f"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000940)={0x40, 0x13, 0x6, @broadcast}, 0x0, &(0x7f00000009c0)={0x40, 0x19, 0x2, "c758"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x5}}) 7.66326224s ago: executing program 0 (id=4529): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x42082) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) io_submit(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r5 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x8080) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x7}, 0x3, 0x20, 0x5, 0x0, 0x2, 0x400, 'syz1\x00', &(0x7f0000000700)=[':#,\x00', '\\\x00'], 0x6}) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14da7e, 0x20) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000240)=0x10) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 5.890109273s ago: executing program 7 (id=4531): statx(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup\x00', 0x1000, 0x1, &(0x7f0000001540)) 5.63365668s ago: executing program 7 (id=4532): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfffffffd}}, 0xb8}}, 0x0) 5.598727423s ago: executing program 0 (id=4533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6e0", 0x2, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) shutdown(r0, 0x1) 5.398323657s ago: executing program 7 (id=4534): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800) 4.448302222s ago: executing program 7 (id=4535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x17d4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0xc4, 0x1, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x500}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4f}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x9, 0x7, 0x1e0]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2e2c1704}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unshare(0x2c020400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 4.083682707s ago: executing program 0 (id=4537): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x7f, 0x2, 0x81, 0x28, 0x3, 0x0, 0x4, 0x4, 0xb, 0xf0, 0x0, 0xd, 0x0, 0x1, 0x77, 0x26}}) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x5d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x1, 0x1}) 3.979427854s ago: executing program 5 (id=4538): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r3, r1, 0x11, 0x0, r3}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x8) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r8, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000003}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x1004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) 823.942273ms ago: executing program 5 (id=4539): syz_open_dev$dri(0x0, 0x1ff, 0x38402) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x7ff}, 0x8) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4, @rand_addr=0x64010102}, 0x10) 664.552634ms ago: executing program 5 (id=4540): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000040)='0\x00', 0x2) 383.368563ms ago: executing program 5 (id=4541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x80000000, 0x4) 258.342772ms ago: executing program 5 (id=4542): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800) 22.818499ms ago: executing program 0 (id=4543): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(r2, &(0x7f0000000340), 0x11000) 0s ago: executing program 5 (id=4544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, 0x0, 0x0, 0x8000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): dummy_hcd [ 1813.598228][T11713] usb 4-1: device descriptor read/8, error -71 [ 1815.965974][T25935] libceph: resolve '0..' (ret=-3): failed [ 1816.032961][T11713] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1816.064262][T25936] netlink: 'syz.5.3820': attribute type 1 has an invalid length. [ 1816.578690][T25936] netlink: 'syz.5.3820': attribute type 4 has an invalid length. [ 1817.133488][T25936] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1819.325116][T11713] usb 8-1: Using ep0 maxpacket: 16 [ 1819.516300][T11713] usb 8-1: device descriptor read/all, error -71 [ 1820.782081][T25958] netlink: 'syz.3.3831': attribute type 10 has an invalid length. [ 1820.826705][T25958] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1822.296329][T25993] libceph: resolve '0..' (ret=-3): failed [ 1822.303656][T16677] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1824.362975][T16677] usb 4-1: Using ep0 maxpacket: 16 [ 1824.369507][T16677] usb 4-1: no configurations [ 1824.375140][T16677] usb 4-1: can't read configurations, error -22 [ 1826.346270][T16677] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1826.604446][T11713] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1826.886043][T11713] usb 6-1: Using ep0 maxpacket: 16 [ 1827.201047][T11713] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1827.222932][T11713] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1827.233086][T11713] usb 6-1: Product: syz [ 1827.237358][T11713] usb 6-1: Manufacturer: syz [ 1827.241969][T11713] usb 6-1: SerialNumber: syz [ 1827.255303][T11713] usb 6-1: config 0 descriptor?? [ 1827.470176][T11713] peak_usb 6-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1827.965083][T11713] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1828.003285][T11713] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1828.010680][T11713] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1828.304863][T11713] peak_usb: probe of 6-1:0.0 failed with error -22 [ 1828.430720][T11713] usb 6-1: USB disconnect, device number 13 [ 1828.590368][T26046] libceph: resolve '0..' (ret=-3): failed [ 1830.026529][T26034] Bluetooth: hci0: command 0x0406 tx timeout [ 1830.962988][T11780] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1831.144704][T11780] usb 6-1: Using ep0 maxpacket: 16 [ 1831.151409][T11780] usb 6-1: no configurations [ 1831.161658][T11780] usb 6-1: can't read configurations, error -22 [ 1831.323083][T11780] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1831.512970][T11780] usb 6-1: Using ep0 maxpacket: 16 [ 1831.520427][T11780] usb 6-1: no configurations [ 1831.535066][T11780] usb 6-1: can't read configurations, error -22 [ 1831.555887][T11780] usb usb6-port1: attempt power cycle [ 1831.973483][T11780] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1832.102173][T11780] usb 6-1: Using ep0 maxpacket: 16 [ 1832.233534][T11780] usb 6-1: no configurations [ 1832.302964][T11780] usb 6-1: can't read configurations, error -22 [ 1832.643213][T11780] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1832.713860][T11780] usb 6-1: Using ep0 maxpacket: 16 [ 1832.723076][T11780] usb 6-1: no configurations [ 1832.733208][T11780] usb 6-1: can't read configurations, error -22 [ 1832.765052][T11780] usb usb6-port1: unable to enumerate USB device [ 1833.016083][T26099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3857'. [ 1836.549039][T26124] libceph: resolve '0..' (ret=-3): failed [ 1839.096741][T16677] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 1839.436050][T16677] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.483940][T16677] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1839.509782][T16677] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1839.542216][T16677] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1839.663020][T11328] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1839.735835][T16677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.758701][T26128] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1839.770483][T16677] hub 4-1:1.0: bad descriptor, ignoring hub [ 1839.780540][T16677] hub: probe of 4-1:1.0 failed with error -5 [ 1839.788836][T16677] cdc_wdm 4-1:1.0: skipping garbage [ 1839.803755][T16677] cdc_wdm 4-1:1.0: skipping garbage [ 1840.017626][T16677] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1840.192352][T16677] cdc_wdm 4-1:1.0: Unknown control protocol [ 1840.446973][T16677] usb 4-1: USB disconnect, device number 21 [ 1840.484129][T11328] usb 6-1: Using ep0 maxpacket: 16 [ 1840.490153][T11328] usb 6-1: no configurations [ 1840.495187][T11328] usb 6-1: can't read configurations, error -22 [ 1840.643317][T11328] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1840.853722][T11328] usb 6-1: Using ep0 maxpacket: 16 [ 1840.873344][T11328] usb 6-1: no configurations [ 1840.887413][T11328] usb 6-1: can't read configurations, error -22 [ 1840.903917][T11328] usb usb6-port1: attempt power cycle [ 1841.983025][T11328] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1842.032254][T11328] usb 6-1: Using ep0 maxpacket: 16 [ 1842.043943][T11328] usb 6-1: no configurations [ 1842.049921][T11328] usb 6-1: can't read configurations, error -22 [ 1847.339655][T26235] netlink: 'syz.0.3883': attribute type 10 has an invalid length. [ 1847.384692][T26233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1847.593235][T11328] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1847.784925][T11328] usb 6-1: Using ep0 maxpacket: 16 [ 1847.806981][T11328] usb 6-1: no configurations [ 1847.823180][T11328] usb 6-1: can't read configurations, error -22 [ 1847.994006][T11328] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1848.192991][T11328] usb 6-1: Using ep0 maxpacket: 16 [ 1848.201044][T11328] usb 6-1: no configurations [ 1848.212160][T11328] usb 6-1: can't read configurations, error -22 [ 1848.222556][T11328] usb usb6-port1: attempt power cycle [ 1848.634044][T11328] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1848.687706][T11328] usb 6-1: Using ep0 maxpacket: 16 [ 1848.699239][T11328] usb 6-1: no configurations [ 1848.714652][T11328] usb 6-1: can't read configurations, error -22 [ 1848.883955][T11328] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1848.936858][T11328] usb 6-1: Using ep0 maxpacket: 16 [ 1848.946098][T11328] usb 6-1: no configurations [ 1848.950761][T11328] usb 6-1: can't read configurations, error -22 [ 1848.960845][T11328] usb usb6-port1: unable to enumerate USB device [ 1849.639605][T26287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3892'. [ 1850.813081][T16677] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1850.822623][T26303] fuse: Bad value for 'fd' [ 1850.993178][T16677] usb 4-1: Using ep0 maxpacket: 16 [ 1851.010339][T26309] QAT: Invalid ioctl -1070049176 [ 1851.021855][T16677] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1851.043057][T16677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.051285][T16677] usb 4-1: Product: syz [ 1851.061361][T16677] usb 4-1: Manufacturer: syz [ 1851.068184][T16677] usb 4-1: SerialNumber: syz [ 1851.086543][T16677] usb 4-1: config 0 descriptor?? [ 1851.103885][T16677] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 1851.307679][T26299] dlm: no locking on control device [ 1851.322377][T16677] usb 4-1: USB disconnect, device number 22 [ 1851.743576][T22064] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1851.952962][T22064] usb 8-1: Using ep0 maxpacket: 16 [ 1851.977928][T22064] usb 8-1: config 0 has no interfaces? [ 1851.988430][T22064] usb 8-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1851.998338][T22064] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.007308][T22064] usb 8-1: Product: syz [ 1852.011680][T22064] usb 8-1: Manufacturer: syz [ 1852.017880][T22064] usb 8-1: SerialNumber: syz [ 1852.041145][T22064] usb 8-1: config 0 descriptor?? [ 1852.178658][T26328] fuse: Bad value for 'fd' [ 1852.285262][T11780] usb 8-1: USB disconnect, device number 7 [ 1852.614753][T26335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3911'. [ 1852.625089][T26335] macvlan0: entered promiscuous mode [ 1852.631324][T26335] netlink: 'syz.5.3911': attribute type 2 has an invalid length. [ 1852.846569][T26339] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1853.541175][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.547825][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.061075][T26356] fuse: Bad value for 'fd' [ 1855.814081][T11328] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1856.013275][T11328] usb 4-1: Using ep0 maxpacket: 16 [ 1856.055741][T11328] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1856.073326][T11328] usb 4-1: can't read configurations, error -61 [ 1856.247765][T11328] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1856.455607][T11328] usb 4-1: Using ep0 maxpacket: 16 [ 1856.475242][T11328] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1856.483159][T11328] usb 4-1: can't read configurations, error -61 [ 1856.500043][T11328] usb usb4-port1: attempt power cycle [ 1857.192950][T11328] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1857.226200][T11328] usb 4-1: Using ep0 maxpacket: 16 [ 1857.240228][T11328] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1857.256572][T11328] usb 4-1: can't read configurations, error -61 [ 1857.432923][T11328] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1857.463554][T11328] usb 4-1: Using ep0 maxpacket: 16 [ 1857.500576][T11328] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1857.523077][T11328] usb 4-1: can't read configurations, error -61 [ 1857.547220][T11328] usb usb4-port1: unable to enumerate USB device [ 1859.239516][T26396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3931'. [ 1859.249957][T26396] netlink: 'syz.5.3931': attribute type 6 has an invalid length. [ 1859.931020][T26034] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1859.944989][T26034] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1859.956299][T26034] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1859.971958][T26034] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1859.982774][T26034] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1859.990406][T26034] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1860.366191][T15829] syz_tun (unregistering): left allmulticast mode [ 1860.615316][T26403] chnl_net:caif_netlink_parms(): no params data found [ 1861.027884][T26403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.052388][T26403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.063835][T26403] bridge_slave_0: entered allmulticast mode [ 1861.071227][T26403] bridge_slave_0: entered promiscuous mode [ 1861.086496][T26403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1861.097743][T26403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.106401][T26403] bridge_slave_1: entered allmulticast mode [ 1861.118246][T26403] bridge_slave_1: entered promiscuous mode [ 1861.208605][T26403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1861.259763][T26403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1861.346025][T26403] team0: Port device team_slave_0 added [ 1861.357850][T26403] team0: Port device team_slave_1 added [ 1861.424472][T26403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1861.437574][T26403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1861.474031][T26403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1861.512656][T26403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1861.526793][T26403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1861.556773][T26403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1861.642693][T26403] hsr_slave_0: entered promiscuous mode [ 1861.664278][T26403] hsr_slave_1: entered promiscuous mode [ 1861.793083][T24509] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1861.994674][T24509] usb 6-1: Using ep0 maxpacket: 16 [ 1862.014098][T24509] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1862.022185][T24509] usb 6-1: can't read configurations, error -61 [ 1862.096160][T26034] Bluetooth: hci4: command tx timeout [ 1862.240055][T24509] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1862.473029][T24509] usb 6-1: Using ep0 maxpacket: 16 [ 1862.481087][T24509] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1862.492869][T24509] usb 6-1: can't read configurations, error -61 [ 1862.499724][T24509] usb usb6-port1: attempt power cycle [ 1862.886046][T26403] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1862.907911][T26403] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1862.929421][T26403] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1862.943043][T24509] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1863.025043][T26403] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1863.061548][T24509] usb 6-1: Using ep0 maxpacket: 16 [ 1863.072030][T24509] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1863.091584][T24509] usb 6-1: can't read configurations, error -61 [ 1863.263344][T24509] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1863.346791][T24509] usb 6-1: Using ep0 maxpacket: 16 [ 1863.445176][T24509] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1863.539016][T24509] usb 6-1: can't read configurations, error -61 [ 1863.609425][T24509] usb usb6-port1: unable to enumerate USB device [ 1863.978204][T26403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1864.081688][T26403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1864.155679][T15710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.162934][T15710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1864.184172][T26034] Bluetooth: hci4: command tx timeout [ 1864.240519][T15710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.247875][T15710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1865.249193][T26449] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1865.259082][T26449] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1866.343622][T26034] Bluetooth: hci4: command tx timeout [ 1866.586613][T26403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1867.825291][T26403] veth0_vlan: entered promiscuous mode [ 1867.890314][T26403] veth1_vlan: entered promiscuous mode [ 1868.413163][T26034] Bluetooth: hci4: command tx timeout [ 1868.797810][T26465] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3950'. [ 1868.846506][T26403] veth0_macvtap: entered promiscuous mode [ 1868.927252][T26403] veth1_macvtap: entered promiscuous mode [ 1869.243285][T26481] syz.3.3953: attempt to access beyond end of device [ 1869.243285][T26481] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1869.257561][T26481] efs: cannot read volume header [ 1869.703568][T26403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.714534][T26403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.725661][T26403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.839602][T26403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.851175][T26403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1869.896670][T26403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.918537][T26403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.938194][T26403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.966493][T26403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.978809][T26403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.999489][T26403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1870.021267][T26403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1870.114959][T26485] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1870.131655][T26485] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1870.254067][T26403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.305821][T26403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.346739][T26403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.616598][T26403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.911276][T24878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1870.943233][T24878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.008437][T15721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.031054][T15721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.033728][T26487] netlink: 'syz.3.3956': attribute type 10 has an invalid length. [ 1871.117481][T26486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1873.824509][T26509] libceph: resolve '0..' (ret=-3): failed [ 1875.752759][T26034] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1876.183082][T26523] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1876.196683][T26523] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1877.051587][T26034] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1879.149227][T26543] binder: 26542:26543 ioctl c0306201 200000000680 returned -14 [ 1880.103048][T26554] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1880.116972][T26554] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1881.236362][T26562] libceph: resolve '0..' (ret=-3): failed [ 1886.289117][T26586] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1886.413442][T26586] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1889.133210][T11780] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1889.333079][T11780] usb 4-1: Using ep0 maxpacket: 16 [ 1889.348753][T11780] usb 4-1: config 0 has no interfaces? [ 1889.366780][T11780] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1889.387148][T11780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.406564][T11780] usb 4-1: Product: syz [ 1889.411235][T11780] usb 4-1: Manufacturer: syz [ 1889.490058][T26625] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1889.501297][T26625] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1890.239438][T11780] usb 4-1: SerialNumber: syz [ 1890.251981][T11780] usb 4-1: config 0 descriptor?? [ 1890.515916][T11780] usb 4-1: USB disconnect, device number 27 [ 1892.785589][T26658] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1892.800261][T26658] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1894.868585][T26673] syz.3.4006: attempt to access beyond end of device [ 1894.868585][T26673] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1894.882123][T26673] efs: cannot read volume header [ 1895.963185][T16677] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1896.242928][T16677] usb 4-1: Using ep0 maxpacket: 16 [ 1896.266899][T16677] usb 4-1: config 0 has no interfaces? [ 1896.334071][T16677] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1896.347829][T16677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.360570][T16677] usb 4-1: Product: syz [ 1896.395817][T16677] usb 4-1: Manufacturer: syz [ 1896.418625][T16677] usb 4-1: SerialNumber: syz [ 1896.451797][T16677] usb 4-1: config 0 descriptor?? [ 1896.677257][T16677] usb 4-1: USB disconnect, device number 28 [ 1898.583331][T26716] syz.5.4018: attempt to access beyond end of device [ 1898.583331][T26716] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1898.596655][T26716] efs: cannot read volume header [ 1899.162212][T26717] netlink: 'syz.3.4015': attribute type 1 has an invalid length. [ 1899.305435][T26717] netlink: 'syz.3.4015': attribute type 4 has an invalid length. [ 1899.342203][T26717] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1899.693067][T24509] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1899.892951][T24509] usb 8-1: Using ep0 maxpacket: 16 [ 1899.906187][T24509] usb 8-1: config 0 has no interfaces? [ 1899.921819][T24509] usb 8-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1899.942471][T24509] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.978699][T24509] usb 8-1: Product: syz [ 1899.998680][T24509] usb 8-1: Manufacturer: syz [ 1900.013325][T24509] usb 8-1: SerialNumber: syz [ 1900.036962][T24509] usb 8-1: config 0 descriptor?? [ 1900.283596][T24509] usb 8-1: USB disconnect, device number 8 [ 1901.862070][T26751] syz.7.4030: attempt to access beyond end of device [ 1901.862070][T26751] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1901.875870][T26751] efs: cannot read volume header [ 1903.163028][T16677] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1903.493638][T16677] usb 4-1: Using ep0 maxpacket: 16 [ 1903.653360][T26778] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1903.816956][T26778] overlayfs: failed to look up (tracing) for ino (-66) [ 1903.929418][T16677] usb 4-1: config 0 has no interfaces? [ 1904.193134][T16677] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1904.248569][T16677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.267885][T26777] netlink: 'syz.5.4035': attribute type 1 has an invalid length. [ 1904.293072][T16677] usb 4-1: Product: syz [ 1904.297588][T16677] usb 4-1: Manufacturer: syz [ 1904.302217][T16677] usb 4-1: SerialNumber: syz [ 1904.344434][T26779] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1904.703529][T16677] usb 4-1: config 0 descriptor?? [ 1904.913016][T26777] netlink: 'syz.5.4035': attribute type 4 has an invalid length. [ 1904.917572][T22064] usb 4-1: USB disconnect, device number 29 [ 1907.833038][T24509] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1908.082886][T24509] usb 1-1: Using ep0 maxpacket: 16 [ 1908.090338][T24509] usb 1-1: config 0 has no interfaces? [ 1908.099430][T24509] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1908.125304][T24509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.140054][T24509] usb 1-1: Product: syz [ 1908.156254][T24509] usb 1-1: Manufacturer: syz [ 1908.216956][T24509] usb 1-1: SerialNumber: syz [ 1908.264309][T24509] usb 1-1: config 0 descriptor?? [ 1908.512745][T24509] usb 1-1: USB disconnect, device number 17 [ 1908.799760][T26834] netlink: 'syz.5.4058': attribute type 1 has an invalid length. [ 1908.826461][T26834] netlink: 'syz.5.4058': attribute type 4 has an invalid length. [ 1908.875705][T26834] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1911.793033][T22064] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1911.993036][T22064] usb 8-1: Using ep0 maxpacket: 16 [ 1912.005300][T22064] usb 8-1: config 0 has no interfaces? [ 1912.028190][T22064] usb 8-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1912.039422][T22064] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.047779][T22064] usb 8-1: Product: syz [ 1912.052189][T22064] usb 8-1: Manufacturer: syz [ 1912.066664][T22064] usb 8-1: SerialNumber: syz [ 1912.105458][T22064] usb 8-1: config 0 descriptor?? [ 1912.340724][T16677] usb 8-1: USB disconnect, device number 9 [ 1913.156862][T26908] syz.7.4083: attempt to access beyond end of device [ 1913.156862][T26908] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1913.169836][T26908] efs: cannot read volume header [ 1914.990601][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.997069][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.003499][T11780] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1917.213135][T11780] usb 6-1: Using ep0 maxpacket: 16 [ 1917.267919][T11780] usb 6-1: config 0 has no interfaces? [ 1917.296481][T11780] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1917.314946][T11780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.342896][T11780] usb 6-1: Product: syz [ 1917.352072][T11780] usb 6-1: Manufacturer: syz [ 1917.367969][T11780] usb 6-1: SerialNumber: syz [ 1917.392721][T11780] usb 6-1: config 0 descriptor?? [ 1917.822499][T22064] usb 6-1: USB disconnect, device number 30 [ 1918.888096][T26955] syz.0.4094: attempt to access beyond end of device [ 1918.888096][T26955] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1918.901606][T26955] efs: cannot read volume header [ 1920.813079][T11780] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1920.993838][T11780] usb 6-1: Using ep0 maxpacket: 16 [ 1921.021807][T11780] usb 6-1: config 0 has no interfaces? [ 1921.036392][T11780] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1921.054470][T11780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.079596][T11780] usb 6-1: Product: syz [ 1921.086194][T11780] usb 6-1: Manufacturer: syz [ 1921.091210][T11780] usb 6-1: SerialNumber: syz [ 1921.109277][T11780] usb 6-1: config 0 descriptor?? [ 1921.610244][T11713] usb 6-1: USB disconnect, device number 31 [ 1923.171931][T26997] syz.7.4114: attempt to access beyond end of device [ 1923.171931][T26997] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1923.185404][T26997] efs: cannot read volume header [ 1926.133136][T22064] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1926.179504][T27022] nbd0: detected capacity change from 0 to 63 [ 1926.197093][T27033] netlink: 'syz.7.4126': attribute type 10 has an invalid length. [ 1926.344645][T27027] block nbd0: NBD_DISCONNECT [ 1926.362937][T22064] usb 4-1: Using ep0 maxpacket: 16 [ 1926.374858][T27027] block nbd0: Disconnected due to user request. [ 1926.404948][T22064] usb 4-1: config 0 has no interfaces? [ 1926.421789][T22064] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1926.432894][T27027] block nbd0: shutting down sockets [ 1926.459078][T22064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.478935][ C0] blk_print_req_error: 10 callbacks suppressed [ 1926.478954][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1926.492099][T22064] usb 4-1: Product: syz [ 1926.494789][ C0] buffer_io_error: 10 callbacks suppressed [ 1926.494804][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1926.520229][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1926.529945][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1926.538367][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1926.547595][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1926.568513][T27031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1926.579311][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1926.588274][T22064] usb 4-1: Manufacturer: syz [ 1926.592211][T18795] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1926.603916][T18795] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1926.609107][T22064] usb 4-1: SerialNumber: syz [ 1926.611930][T18795] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1926.626601][T18795] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1926.638456][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1926.647972][T18795] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1926.655576][T22064] usb 4-1: config 0 descriptor?? [ 1926.655846][T18795] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1926.669853][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1926.680797][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1926.692907][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1926.702603][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1926.712427][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1926.721916][T24536] ldm_validate_partition_table(): Disk read failed. [ 1926.753626][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1926.768251][T24536] Dev nbd0: unable to read RDB block 0 [ 1926.812112][T24536] nbd0: unable to read partition table [ 1926.836411][T24536] ldm_validate_partition_table(): Disk read failed. [ 1926.849039][T24536] Dev nbd0: unable to read RDB block 0 [ 1926.856541][T24536] nbd0: unable to read partition table [ 1926.926661][T25825] usb 4-1: USB disconnect, device number 30 [ 1928.058822][T27052] efs: device does not support 512 byte blocks [ 1930.857065][T27072] netlink: 'syz.0.4138': attribute type 10 has an invalid length. [ 1930.929689][T27072] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1930.942765][T27070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1931.103074][T24509] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1931.293232][T24509] usb 6-1: Using ep0 maxpacket: 16 [ 1931.304210][T24509] usb 6-1: config 0 has no interfaces? [ 1931.334737][T24509] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1931.350057][T24509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.358666][T24509] usb 6-1: Product: syz [ 1931.368085][T24509] usb 6-1: Manufacturer: syz [ 1931.394994][T24509] usb 6-1: SerialNumber: syz [ 1931.427840][T24509] usb 6-1: config 0 descriptor?? [ 1931.657878][T24509] usb 6-1: USB disconnect, device number 32 [ 1934.425567][T27112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.994174][T11713] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1936.183289][T11713] usb 1-1: Using ep0 maxpacket: 16 [ 1936.224595][T11713] usb 1-1: config 0 has no interfaces? [ 1936.261159][T11713] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1936.438697][T11713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.454803][T11713] usb 1-1: Product: syz [ 1936.459250][T11713] usb 1-1: Manufacturer: syz [ 1936.464540][T11713] usb 1-1: SerialNumber: syz [ 1936.471572][T11713] usb 1-1: config 0 descriptor?? [ 1936.595872][T18161] syz_tun (unregistering): left allmulticast mode [ 1936.697757][ C1] vkms_vblank_simulate: vblank timer overrun [ 1936.737812][T25825] usb 1-1: USB disconnect, device number 18 [ 1936.898450][ C1] vkms_vblank_simulate: vblank timer overrun [ 1937.522125][T27133] nbd0: detected capacity change from 0 to 63 [ 1937.850962][T19291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1937.867218][T19291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1937.915393][T19291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1938.047628][T19291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1938.058232][T19291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1938.071023][T19291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1938.151065][T27154] syz.7.4160: attempt to access beyond end of device [ 1938.151065][T27154] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1938.163967][T27154] efs: cannot read volume header [ 1938.462524][T26034] block nbd0: Receive control failed (result -104) [ 1939.262120][T27147] chnl_net:caif_netlink_parms(): no params data found [ 1939.572996][T11713] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1939.816973][T11713] usb 1-1: Using ep0 maxpacket: 16 [ 1939.851458][T11713] usb 1-1: config 0 has no interfaces? [ 1939.861667][T11713] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1939.877893][T11713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.908241][T11713] usb 1-1: Product: syz [ 1939.913199][T11713] usb 1-1: Manufacturer: syz [ 1939.930787][T11713] usb 1-1: SerialNumber: syz [ 1939.936089][T27147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1939.943786][T27147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.954011][T11713] usb 1-1: config 0 descriptor?? [ 1939.960531][T27147] bridge_slave_0: entered allmulticast mode [ 1939.975773][T27147] bridge_slave_0: entered promiscuous mode [ 1940.048680][T27147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1940.083038][T27147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1940.100849][T27147] bridge_slave_1: entered allmulticast mode [ 1940.113784][T27147] bridge_slave_1: entered promiscuous mode [ 1940.194044][T11780] usb 1-1: USB disconnect, device number 19 [ 1940.254091][T26034] Bluetooth: hci1: command tx timeout [ 1940.410820][T27147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1940.426511][T27147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1940.589735][T27147] team0: Port device team_slave_0 added [ 1940.696236][T27147] team0: Port device team_slave_1 added [ 1941.416761][T27147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1941.440143][T27147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1941.499180][T27147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1942.422938][T26034] Bluetooth: hci1: command tx timeout [ 1942.430950][T27147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1942.463659][T27147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1942.522379][T27147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1942.593328][T11979] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1942.717259][T27147] hsr_slave_0: entered promiscuous mode [ 1942.743378][T27147] hsr_slave_1: entered promiscuous mode [ 1942.759465][T27147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1942.789805][T27147] Cannot create hsr debugfs directory [ 1942.837141][T11979] usb 1-1: Using ep0 maxpacket: 8 [ 1942.850129][T11979] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1942.860921][T11979] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1942.896515][T11979] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1942.929512][T11979] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1942.975440][T11979] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1943.041989][T11979] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1943.059260][T11979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.203647][ T6606] hsr_slave_0: left promiscuous mode [ 1943.227345][ T6606] hsr_slave_1: left promiscuous mode [ 1943.237409][ T6606] bridge_slave_1: left allmulticast mode [ 1943.252760][ T6606] bridge_slave_1: left promiscuous mode [ 1943.278140][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1943.297666][T11979] usb 1-1: usb_control_msg returned -32 [ 1943.313654][T11979] usbtmc 1-1:16.0: can't read capabilities [ 1943.340923][ T6606] bridge_slave_0: left allmulticast mode [ 1943.370803][ T6606] bridge_slave_0: left promiscuous mode [ 1943.380493][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1944.061830][T27211] nbd1: detected capacity change from 0 to 63 [ 1944.177757][T27225] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 1944.461286][T11979] usb 1-1: USB disconnect, device number 20 [ 1944.495184][T19291] Bluetooth: hci1: command tx timeout [ 1944.953952][T25825] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1944.971610][T26034] block nbd1: Receive control failed (result -104) [ 1945.172924][T25825] usb 4-1: Using ep0 maxpacket: 16 [ 1945.184508][T25825] usb 4-1: config 0 has no interfaces? [ 1945.207159][T25825] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1945.226640][T25825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.257256][T25825] usb 4-1: Product: syz [ 1945.266129][T25825] usb 4-1: Manufacturer: syz [ 1945.275193][T25825] usb 4-1: SerialNumber: syz [ 1945.296406][T25825] usb 4-1: config 0 descriptor?? [ 1945.372066][T27233] Bluetooth: MGMT ver 1.22 [ 1945.515406][T11780] usb 4-1: USB disconnect, device number 31 [ 1946.573110][T26034] Bluetooth: hci1: command tx timeout [ 1948.009340][ T6606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1948.145907][ T6606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1948.938403][ T6606] bond0 (unregistering): Released all slaves [ 1950.886528][T11713] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1951.233113][T11713] usb 8-1: Using ep0 maxpacket: 16 [ 1951.260396][T11713] usb 8-1: config 0 has no interfaces? [ 1951.315472][T11713] usb 8-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1951.343036][T11713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.351273][T11713] usb 8-1: Product: syz [ 1951.387505][T11713] usb 8-1: Manufacturer: syz [ 1951.392220][T11713] usb 8-1: SerialNumber: syz [ 1951.434070][T11713] usb 8-1: config 0 descriptor?? [ 1951.655178][T11979] usb 8-1: USB disconnect, device number 10 [ 1952.120424][T27147] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1952.146162][T27147] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1952.180615][T27147] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1952.199942][T27147] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1952.465718][T27147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1952.702488][T27147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1955.126688][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1955.133889][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1955.180273][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1955.187471][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1956.077001][T27331] hpfs: Bad magic ... probably not HPFS [ 1956.645518][T27147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1956.943261][T25825] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1957.123123][T25825] usb 8-1: Using ep0 maxpacket: 16 [ 1957.130506][T25825] usb 8-1: config 0 has no interfaces? [ 1957.141457][T25825] usb 8-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1957.163223][T25825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.171538][T25825] usb 8-1: Product: syz [ 1957.211507][T25825] usb 8-1: Manufacturer: syz [ 1957.230066][T27147] veth0_vlan: entered promiscuous mode [ 1957.242898][T25825] usb 8-1: SerialNumber: syz [ 1957.258224][T25825] usb 8-1: config 0 descriptor?? [ 1957.290209][T27147] veth1_vlan: entered promiscuous mode [ 1957.370265][T27147] veth0_macvtap: entered promiscuous mode [ 1958.579181][T11713] usb 8-1: USB disconnect, device number 11 [ 1958.659068][T27147] veth1_macvtap: entered promiscuous mode [ 1959.025800][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.192970][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.236292][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.251653][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.261993][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.299820][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.320034][T27147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1959.357986][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.379820][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.430852][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.472918][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.488118][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.529483][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.563163][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.623275][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.662021][T27147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1959.688375][T27147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.711110][T27147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.742849][T27147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.766670][T27147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1960.022426][ T6606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1960.045060][T27396] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1960.055782][T27396] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1960.064970][ T6606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1960.150874][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1960.175700][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.554302][T27431] libceph: resolve '0..' (ret=-3): failed [ 1966.793641][T19291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1966.804632][T27447] syz.5.4218: attempt to access beyond end of device [ 1966.804632][T27447] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1966.818564][T27447] efs: cannot read volume header [ 1967.529688][T19291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1967.541157][T19291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1967.555117][T19291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1967.567028][T19291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1967.574701][T19291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1968.078217][T27449] chnl_net:caif_netlink_parms(): no params data found [ 1968.099709][T18795] block nbd0: Possible stuck request ffff888021dae000: control (read@0,4096B). Runtime 30 seconds [ 1968.193767][T27449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.204548][T27449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.219374][T27449] bridge_slave_0: entered allmulticast mode [ 1968.228472][T27449] bridge_slave_0: entered promiscuous mode [ 1968.240342][T27449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.248310][T27449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.260698][T27449] bridge_slave_1: entered allmulticast mode [ 1968.272197][T27449] bridge_slave_1: entered promiscuous mode [ 1968.335901][T27449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1968.390218][T27449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1968.481100][T27449] team0: Port device team_slave_0 added [ 1968.498053][T27449] team0: Port device team_slave_1 added [ 1968.560394][T27449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1968.603044][T27449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1969.264444][T27449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1969.802746][T19291] Bluetooth: hci2: command tx timeout [ 1969.812405][T27449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1969.819783][T27449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1969.846753][T27449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1969.913840][T27449] hsr_slave_0: entered promiscuous mode [ 1969.961111][T27449] hsr_slave_1: entered promiscuous mode [ 1969.971004][T27449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1969.979482][T27449] Cannot create hsr debugfs directory [ 1970.060340][T27480] libceph: resolve '0..' (ret=-3): failed [ 1971.853330][T19291] Bluetooth: hci2: command tx timeout [ 1973.294988][T27489] syz.5.4228: attempt to access beyond end of device [ 1973.294988][T27489] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1973.307948][T27489] efs: cannot read volume header [ 1973.515750][T27449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.823876][T27449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.941121][T19291] Bluetooth: hci2: command tx timeout [ 1974.010537][T27501] nbd2: detected capacity change from 0 to 63 [ 1974.041699][T27449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1974.624481][ T24] block nbd1: Possible stuck request ffff888021e00000: control (read@0,1024B). Runtime 30 seconds [ 1974.635655][ T24] block nbd1: Possible stuck request ffff888021e00200: control (read@1024,1024B). Runtime 30 seconds [ 1974.646740][ T24] block nbd1: Possible stuck request ffff888021e00400: control (read@2048,1024B). Runtime 30 seconds [ 1974.657923][ T24] block nbd1: Possible stuck request ffff888021e00600: control (read@3072,1024B). Runtime 30 seconds [ 1974.676415][T27494] block nbd0: NBD_DISCONNECT [ 1974.681078][T27494] block nbd0: Send disconnect failed -32 [ 1974.719870][T27494] block nbd0: shutting down sockets [ 1974.791154][ C1] blk_print_req_error: 102 callbacks suppressed [ 1974.791175][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1974.807419][ C1] buffer_io_error: 138 callbacks suppressed [ 1974.807435][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1974.821686][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1974.830290][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1974.838657][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1974.873209][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1974.882718][T18795] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1974.894610][T18795] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1974.905022][T18795] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1974.913777][T18795] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1974.925680][T19291] block nbd2: Receive control failed (result -104) [ 1974.943011][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1974.952509][T18795] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1974.960833][T18795] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1974.969105][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1974.978823][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1974.989419][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1975.003008][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1975.013662][T18795] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1975.023017][T18795] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1975.032404][T18795] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1975.042067][T24536] ldm_validate_partition_table(): Disk read failed. [ 1975.050547][T24536] Dev nbd0: unable to read RDB block 0 [ 1975.051865][T27449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1975.058466][T24536] nbd0: unable to read partition table [ 1975.156739][T24536] ldm_validate_partition_table(): Disk read failed. [ 1975.165496][T24536] Dev nbd0: unable to read RDB block 0 [ 1975.179410][T24536] nbd0: unable to read partition table [ 1976.012984][T19291] Bluetooth: hci2: command tx timeout [ 1976.069703][T27526] libceph: resolve '0..' (ret=-3): failed [ 1977.334476][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1977.355319][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.935529][T27449] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1977.946996][T27449] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1977.962450][T27449] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1978.015772][T27449] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1978.448487][T27449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1978.579746][T27449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1978.680451][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1978.687989][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1978.731280][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1978.738479][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1978.790221][T15727] bond0: (slave wlan1): Releasing backup interface [ 1980.187465][T15727] hsr_slave_0: left promiscuous mode [ 1980.206020][T15727] hsr_slave_1: left promiscuous mode [ 1980.222646][T15727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1980.241136][T15727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1980.260847][T15727] bridge_slave_1: left allmulticast mode [ 1980.274704][T15727] bridge_slave_1: left promiscuous mode [ 1980.281133][T15727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1980.296768][T15727] bridge_slave_0: left allmulticast mode [ 1980.320033][T15727] bridge_slave_0: left promiscuous mode [ 1980.335954][T15727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.412240][T15727] veth1_macvtap: left promiscuous mode [ 1980.418264][T15727] veth0_macvtap: left promiscuous mode [ 1980.424630][T15727] veth1_vlan: left promiscuous mode [ 1980.828304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1980.935236][T27558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4242'. [ 1983.335849][T15727] team0 (unregistering): Port device team_slave_1 removed [ 1983.467805][T15727] team0 (unregistering): Port device team_slave_0 removed [ 1983.573516][T15727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1983.624627][T26034] Bluetooth: hci4: command 0x0406 tx timeout [ 1983.693140][T15727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1984.429814][T15727] bond0 (unregistering): Released all slaves [ 1985.785395][T27449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1986.530108][T27449] veth0_vlan: entered promiscuous mode [ 1986.561086][T27449] veth1_vlan: entered promiscuous mode [ 1986.745863][T27449] veth0_macvtap: entered promiscuous mode [ 1986.810303][T27449] veth1_macvtap: entered promiscuous mode [ 1986.922099][T27449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1986.959536][T27449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.993005][T27449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1987.014885][T27449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.043155][T27449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1987.063982][T27449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.112633][T27449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1987.133386][T27449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.175439][T27449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1987.217382][T27449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1987.258017][T27449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.290743][T27449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1987.353021][T27449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.393362][T27449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1987.427282][T27449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.477625][T27449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1987.522881][T27449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1987.590742][T27449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1987.636423][T27449] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.661466][T27449] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.685022][T27449] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.708559][T27449] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.978600][ T6606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.007869][ T6606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.077120][T15727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.122053][T15727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1992.243566][T27651] block device autoloading is deprecated and will be removed. [ 1995.623968][T24509] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1995.822886][T24509] usb 4-1: Using ep0 maxpacket: 32 [ 1995.837872][T24509] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1995.850589][T24509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.889047][T24509] usb 4-1: Product: syz [ 1995.896605][T24509] usb 4-1: Manufacturer: syz [ 1995.906873][T24509] usb 4-1: SerialNumber: syz [ 1995.919367][T24509] usb 4-1: config 0 descriptor?? [ 1995.933955][T24509] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1995.944335][T24509] dvb-usb: bulk message failed: -22 (4/0) [ 1995.950424][T24509] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1995.989497][T24509] dvb-usb: bulk message failed: -22 (5/0) [ 1996.011199][T24509] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1996.095755][T24509] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1996.123564][T24509] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1996.134317][T24509] usb 4-1: media controller created [ 1996.144916][T27700] dvb-usb: bulk message failed: -22 (7/0) [ 1996.151146][T27700] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1996.212959][T27700] ttusb2: i2c transfer failed. [ 1996.263244][T24509] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1996.332673][T24509] usb 4-1: selecting invalid altsetting 3 [ 1996.348257][T24509] ttusb2: set interface to alts=3 failed [ 1996.488999][T24509] DVB: Unable to find symbol tda10086_attach() [ 1996.504871][T24509] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1996.530436][T24509] dvb-usb: bulk message failed: -22 (4/0) [ 1996.545683][T24509] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1996.572275][T24509] dvb-usb: bulk message failed: -22 (5/0) [ 1996.581009][T24509] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1996.596763][T24509] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1996.658694][T24509] usb 4-1: USB disconnect, device number 32 [ 1996.763341][T24509] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1997.108172][T27714] futex_wake_op: syz.0.4284 tries to shift op by 144; fix this program [ 1999.137535][T27732] 9pnet_fd: Insufficient options for proto=fd [ 2002.705380][T27774] nbd0: detected capacity change from 0 to 63 [ 2003.967188][T19291] block nbd0: Receive control failed (result -104) [ 2004.594950][ T24] block nbd2: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 30 seconds [ 2004.606102][ T24] block nbd2: Possible stuck request ffff888021e40200: control (read@1024,1024B). Runtime 30 seconds [ 2004.617250][ T24] block nbd2: Possible stuck request ffff888021e40400: control (read@2048,1024B). Runtime 30 seconds [ 2004.628916][ T24] block nbd2: Possible stuck request ffff888021e40600: control (read@3072,1024B). Runtime 30 seconds [ 2005.215743][ T24] block nbd1: Possible stuck request ffff888021e00000: control (read@0,1024B). Runtime 60 seconds [ 2005.226675][ T24] block nbd1: Possible stuck request ffff888021e00200: control (read@1024,1024B). Runtime 60 seconds [ 2005.237760][ T24] block nbd1: Possible stuck request ffff888021e00400: control (read@2048,1024B). Runtime 60 seconds [ 2005.248823][ T24] block nbd1: Possible stuck request ffff888021e00600: control (read@3072,1024B). Runtime 60 seconds [ 2006.044796][T27803] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2008.124787][T27815] syzkaller0: entered promiscuous mode [ 2008.145982][T27815] syzkaller0: entered allmulticast mode [ 2010.523053][T11328] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2010.633007][ T5812] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 2010.712888][T11328] usb 4-1: Using ep0 maxpacket: 16 [ 2010.720091][T11328] usb 4-1: config 0 has no interfaces? [ 2010.728621][T11328] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 2010.777522][T11328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.802974][T11328] usb 4-1: Product: syz [ 2010.843679][T11328] usb 4-1: Manufacturer: syz [ 2010.913648][T11328] usb 4-1: SerialNumber: syz [ 2010.954040][T11328] usb 4-1: config 0 descriptor?? [ 2011.024489][ T5812] usb 8-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 2011.040774][ T5812] usb 8-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 2011.053085][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.157144][T22064] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2011.191150][T25825] usb 4-1: USB disconnect, device number 33 [ 2011.363286][T22064] usb 1-1: Using ep0 maxpacket: 8 [ 2011.375196][T22064] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2011.385178][T22064] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2011.417768][T22064] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2011.467267][T22064] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2011.483047][T22064] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2011.496854][T22064] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2011.506746][T22064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.528124][T22064] usbtmc 1-1:16.0: bulk endpoints not found [ 2014.141202][ T5812] usb 8-1: USB disconnect, device number 12 [ 2014.241159][T27862] dummy0: entered promiscuous mode [ 2014.275590][T27862] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2014.307764][T27862] hsr1: entered allmulticast mode [ 2014.313642][T27862] dummy0: entered allmulticast mode [ 2014.319069][T27862] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2015.200887][T11328] usb 1-1: USB disconnect, device number 21 [ 2016.099609][T27863] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2016.182896][ T5812] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2016.482862][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 2016.520133][ T5812] usb 1-1: config 0 has no interfaces? [ 2016.571611][ T5812] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 2016.639750][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.698891][ T5812] usb 1-1: Product: syz [ 2016.747424][ T5812] usb 1-1: Manufacturer: syz [ 2016.776295][ T5812] usb 1-1: SerialNumber: syz [ 2016.886453][ T5812] usb 1-1: config 0 descriptor?? [ 2017.115088][T27863] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2017.134283][T22064] usb 1-1: USB disconnect, device number 22 [ 2017.413864][T27863] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2017.745400][T27863] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 2017.807382][T27863] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2019.093062][T27900] netlink: 'syz.5.4335': attribute type 1 has an invalid length. [ 2019.139942][T27900] netlink: 'syz.5.4335': attribute type 4 has an invalid length. [ 2019.150196][T27863] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2019.177308][T27863] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2019.205506][T27900] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 2019.224084][T27863] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2019.250969][T27863] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2019.363168][T11713] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 2019.553027][T11713] usb 8-1: Using ep0 maxpacket: 8 [ 2019.567525][T11713] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2019.588062][T11713] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2019.608792][T11713] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2019.629261][T11713] usb 8-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2019.656020][T11713] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2019.685214][T11713] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2019.700832][T11713] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.717949][T11713] usbtmc 8-1:16.0: bulk endpoints not found [ 2021.758296][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880309d5c00: rx timeout, send abort [ 2022.160356][ T5812] usb 8-1: USB disconnect, device number 13 [ 2022.180841][T11979] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2022.270293][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880309d5c00: abort rx timeout. Force session deactivation [ 2022.423712][T11979] usb 6-1: Using ep0 maxpacket: 16 [ 2022.455813][T11979] usb 6-1: config 0 has no interfaces? [ 2022.481862][T11979] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 2022.492611][T11979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.507094][T11979] usb 6-1: Product: syz [ 2022.511888][T11979] usb 6-1: Manufacturer: syz [ 2022.517929][T11979] usb 6-1: SerialNumber: syz [ 2022.550392][T11979] usb 6-1: config 0 descriptor?? [ 2022.777468][ T5812] usb 6-1: USB disconnect, device number 33 [ 2023.212295][T27952] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2023.239073][T27952] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 2023.320369][T27948] nbd3: detected capacity change from 0 to 63 [ 2023.466225][T27958] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2023.898692][T19291] block nbd3: Receive control failed (result -104) [ 2024.182968][ T5812] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2024.572847][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 2025.276416][ T5812] usb 4-1: config 0 has no interfaces? [ 2025.295608][ T5812] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 2025.372982][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.404386][ T5812] usb 4-1: Product: syz [ 2025.408706][ T5812] usb 4-1: Manufacturer: syz [ 2025.441508][ T5812] usb 4-1: SerialNumber: syz [ 2025.459293][ T5812] usb 4-1: config 0 descriptor?? [ 2025.741094][T11713] usb 4-1: USB disconnect, device number 34 [ 2025.950742][T27979] futex_wake_op: syz.7.4360 tries to shift op by 144; fix this program [ 2026.234313][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031066000: rx timeout, send abort [ 2026.744819][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031066000: abort rx timeout. Force session deactivation [ 2027.629817][T27997] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2028.090650][T27997] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 2029.035139][T28013] nbd4: detected capacity change from 0 to 63 [ 2029.508884][T28016] netlink: 'syz.5.4371': attribute type 1 has an invalid length. [ 2029.558727][T28016] netlink: 'syz.5.4371': attribute type 4 has an invalid length. [ 2029.579143][T19291] block nbd4: Receive control failed (result -104) [ 2029.669977][T28018] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 2031.042991][T22064] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2031.342943][T22064] usb 4-1: Using ep0 maxpacket: 16 [ 2031.365287][T22064] usb 4-1: config 0 has no interfaces? [ 2031.374696][T22064] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 2031.392795][T22064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.400925][T22064] usb 4-1: Product: syz [ 2031.405805][T22064] usb 4-1: Manufacturer: syz [ 2031.410457][T22064] usb 4-1: SerialNumber: syz [ 2031.418510][T22064] usb 4-1: config 0 descriptor?? [ 2031.518934][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802119bc00: rx timeout, send abort [ 2031.647452][ T5830] usb 4-1: USB disconnect, device number 35 [ 2032.019075][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021198400: rx timeout, send abort [ 2032.028344][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802119bc00: abort rx timeout. Force session deactivation [ 2032.527921][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021198400: abort rx timeout. Force session deactivation [ 2033.347766][T18795] block nbd0: Possible stuck request ffff888021daae00: control (read@0,4096B). Runtime 30 seconds [ 2033.558593][T28054] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2033.569300][T28054] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 2033.892890][T22064] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2033.915855][T28055] nbd5: detected capacity change from 0 to 63 [ 2034.112913][T22064] usb 4-1: Using ep0 maxpacket: 32 [ 2034.155161][T22064] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 2034.179821][T22064] usb 4-1: config 2 has no interface number 0 [ 2034.210298][T22064] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 2034.230898][T22064] usb 4-1: config 2 interface 88 has no altsetting 0 [ 2034.242913][T22064] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 2034.260038][T22064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.279838][T22064] usb 4-1: Product: syz [ 2034.292010][T22064] usb 4-1: Manufacturer: syz [ 2034.302415][T28065] netlink: 'syz.0.4385': attribute type 1 has an invalid length. [ 2034.331690][T22064] usb 4-1: SerialNumber: syz [ 2034.340680][T28065] netlink: 'syz.0.4385': attribute type 4 has an invalid length. [ 2034.360676][T28058] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2034.407473][T19291] block nbd5: Receive control failed (result -104) [ 2034.454122][T28065] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 2034.663502][ T24] block nbd2: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 60 seconds [ 2034.675634][T28058] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2034.683028][ T24] block nbd2: Possible stuck request ffff888021e40200: control (read@1024,1024B). Runtime 60 seconds [ 2034.694246][ T24] block nbd2: Possible stuck request ffff888021e40400: control (read@2048,1024B). Runtime 60 seconds [ 2034.705605][ T24] block nbd2: Possible stuck request ffff888021e40600: control (read@3072,1024B). Runtime 60 seconds [ 2035.317405][ T24] block nbd1: Possible stuck request ffff888021e00000: control (read@0,1024B). Runtime 90 seconds [ 2035.329513][ T24] block nbd1: Possible stuck request ffff888021e00200: control (read@1024,1024B). Runtime 90 seconds [ 2035.343774][ T24] block nbd1: Possible stuck request ffff888021e00400: control (read@2048,1024B). Runtime 90 seconds [ 2035.355758][ T24] block nbd1: Possible stuck request ffff888021e00600: control (read@3072,1024B). Runtime 90 seconds [ 2035.568452][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c489400: rx timeout, send abort [ 2035.624801][T22064] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.664278][T22064] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 2035.680206][T22064] asix: probe of 4-1:2.88 failed with error -71 [ 2035.708816][T22064] usb 4-1: USB disconnect, device number 36 [ 2036.068534][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c488000: rx timeout, send abort [ 2036.577536][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c488000: abort rx timeout. Force session deactivation [ 2037.426259][T28097] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2037.613259][T28101] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2037.647112][T28101] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 2037.715644][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dd87400: rx timeout, send abort [ 2037.857475][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.865974][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.215745][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dd87000: rx timeout, send abort [ 2038.224781][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dd87400: abort rx timeout. Force session deactivation [ 2038.724674][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dd87000: abort rx timeout. Force session deactivation [ 2040.841814][T28124] netlink: 'syz.0.4400': attribute type 1 has an invalid length. [ 2040.949716][T28124] netlink: 'syz.0.4400': attribute type 4 has an invalid length. [ 2040.990195][T28132] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 2041.251225][T28140] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2041.664441][T28151] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2041.691376][T28151] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 2043.038884][T28162] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 2044.502133][T28185] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2045.617535][T28196] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2045.627562][T28196] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 2045.636818][ T5812] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2045.822990][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 2045.843268][ T5812] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2045.884777][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.920459][ T5812] usb 4-1: Product: syz [ 2045.938713][ T5812] usb 4-1: Manufacturer: syz [ 2045.958161][ T5812] usb 4-1: SerialNumber: syz [ 2045.996357][ T5812] usb 4-1: config 0 descriptor?? [ 2046.023988][ T5812] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2047.154391][T28202] netlink: 'syz.7.4422': attribute type 1 has an invalid length. [ 2047.162583][T28202] netlink: 'syz.7.4422': attribute type 4 has an invalid length. [ 2047.271956][T28202] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 2047.738804][T28192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.759996][T28192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.913791][ T5812] gspca_ov534_9: reg_w failed -71 [ 2048.094020][T28214] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2048.312879][ T5812] gspca_ov534_9: Unknown sensor 0000 [ 2048.313497][ T5812] ov534_9: probe of 4-1:0.0 failed with error -22 [ 2048.344016][ T5812] usb 4-1: USB disconnect, device number 37 [ 2048.865296][T28221] ptrace attach of "./syz-executor exec"[27449] was attempted by "./syz-executor exec"[28221] [ 2049.073788][T28229] Bluetooth: MGMT ver 1.22 [ 2049.779430][T28240] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2049.792850][T28240] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 2051.046330][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e5ed000: rx timeout, send abort [ 2051.255146][T28243] @ÿ: renamed from veth0_vlan (while UP) [ 2051.330580][T28253] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 2051.546428][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e5ed800: rx timeout, send abort [ 2051.562920][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e5ed000: abort rx timeout. Force session deactivation [ 2052.054821][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e5ed800: abort rx timeout. Force session deactivation [ 2053.017079][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 2053.026790][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 2053.963665][ T24] block nbd3: Possible stuck request ffff888021e70000: control (read@0,1024B). Runtime 30 seconds [ 2053.974380][ T24] block nbd3: Possible stuck request ffff888021e70200: control (read@1024,1024B). Runtime 30 seconds [ 2053.985301][ T24] block nbd3: Possible stuck request ffff888021e70400: control (read@2048,1024B). Runtime 30 seconds [ 2053.996517][ T24] block nbd3: Possible stuck request ffff888021e70600: control (read@3072,1024B). Runtime 30 seconds [ 2054.048157][T28258] ceph: No mds server is up or the cluster is laggy [ 2054.397479][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 2054.432485][T28275] libceph: resolve '0..' (ret=-3): failed [ 2054.533025][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 2057.183583][T28289] netlink: 'syz.7.4449': attribute type 11 has an invalid length. [ 2057.191594][T28289] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4449'. [ 2059.646019][ T24] block nbd4: Possible stuck request ffff888021ee0000: control (read@0,1024B). Runtime 30 seconds [ 2059.656846][ T24] block nbd4: Possible stuck request ffff888021ee0200: control (read@1024,1024B). Runtime 30 seconds [ 2059.668232][ T24] block nbd4: Possible stuck request ffff888021ee0400: control (read@2048,1024B). Runtime 30 seconds [ 2059.679340][ T24] block nbd4: Possible stuck request ffff888021ee0600: control (read@3072,1024B). Runtime 30 seconds [ 2060.834693][T28320] libceph: resolve '0..' (ret=-3): failed [ 2061.293145][T26034] Bluetooth: hci1: command 0x0406 tx timeout [ 2064.528037][T27434] block nbd5: Possible stuck request ffff888021f50000: control (read@0,1024B). Runtime 30 seconds [ 2064.539858][T18795] block nbd0: Possible stuck request ffff888021daae00: control (read@0,4096B). Runtime 60 seconds [ 2064.551111][T27434] block nbd5: Possible stuck request ffff888021f50200: control (read@1024,1024B). Runtime 30 seconds [ 2064.562277][T27434] block nbd5: Possible stuck request ffff888021f50400: control (read@2048,1024B). Runtime 30 seconds [ 2064.573607][T27434] block nbd5: Possible stuck request ffff888021f50600: control (read@3072,1024B). Runtime 30 seconds [ 2064.736742][ T24] block nbd2: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 90 seconds [ 2064.747814][ T24] block nbd2: Possible stuck request ffff888021e40200: control (read@1024,1024B). Runtime 90 seconds [ 2064.759547][ T24] block nbd2: Possible stuck request ffff888021e40400: control (read@2048,1024B). Runtime 90 seconds [ 2064.771121][ T24] block nbd2: Possible stuck request ffff888021e40600: control (read@3072,1024B). Runtime 90 seconds [ 2065.150411][T28336] xt_TCPMSS: Only works on TCP SYN packets [ 2065.858194][ T24] block nbd1: Possible stuck request ffff888021e00000: control (read@0,1024B). Runtime 120 seconds [ 2065.925418][ T24] block nbd1: Possible stuck request ffff888021e00200: control (read@1024,1024B). Runtime 120 seconds [ 2065.938139][ T24] block nbd1: Possible stuck request ffff888021e00400: control (read@2048,1024B). Runtime 120 seconds [ 2065.949775][ T24] block nbd1: Possible stuck request ffff888021e00600: control (read@3072,1024B). Runtime 120 seconds [ 2068.101002][T28367] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2068.855690][T28379] libceph: resolve '0..' (ret=-3): failed [ 2074.061668][T28396] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2075.533555][T28408] input: syz0 as /devices/virtual/input/input16 [ 2078.003073][T28433] libceph: resolve '0..' (ret=-3): failed [ 2080.435888][T28442] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2081.192298][T28456] xt_TCPMSS: Only works on TCP SYN packets [ 2081.533178][T22064] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2081.734898][T22064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 2081.758774][T22064] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2081.784785][T22064] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 2081.798237][T22064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.814767][T22064] usb 1-1: config 0 descriptor?? [ 2082.250076][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.283021][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.306183][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.330467][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.342814][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.350192][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.372824][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.392952][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.410547][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.440877][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.472850][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.522852][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.540860][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.550969][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.571217][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.591431][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.680040][T28467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2082.687964][T28467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2082.713255][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2082.723783][T28467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2082.740705][T28468] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4499'. [ 2082.764694][T28468] loop4: detected capacity change from 0 to 7 [ 2082.776149][T28467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2082.803088][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2084.222926][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2084.265604][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2084.304551][ C0] blk_print_req_error: 93 callbacks suppressed [ 2084.304566][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2084.304568][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2084.329174][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2084.338342][ C1] buffer_io_error: 138 callbacks suppressed [ 2084.338351][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 2084.361064][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2084.370669][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 2084.380439][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2084.389812][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 2084.399474][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2084.408703][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 2084.417431][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2084.426695][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 2084.451753][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2084.500584][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2084.638353][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2084.888273][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2084.938280][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2084.945781][ T24] block nbd3: Possible stuck request ffff888021e70000: control (read@0,1024B). Runtime 60 seconds [ 2084.957189][ T24] block nbd3: Possible stuck request ffff888021e70200: control (read@1024,1024B). Runtime 60 seconds [ 2084.968219][ T24] block nbd3: Possible stuck request ffff888021e70400: control (read@2048,1024B). Runtime 60 seconds [ 2084.980167][ T24] block nbd3: Possible stuck request ffff888021e70600: control (read@3072,1024B). Runtime 60 seconds [ 2085.018267][T28476] libceph: resolve '0..' (ret=-3): failed [ 2086.301488][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2086.900658][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2086.913462][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2086.920705][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2086.928434][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2086.951619][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2086.977387][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.001386][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.061107][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.063953][T28482] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2087.092101][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.103650][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.111508][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.122385][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.133752][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.141641][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.149664][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.157582][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.165573][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.173743][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.181634][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.190747][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.198323][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.210099][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.217998][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.227445][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.271367][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.289078][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.296946][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.306223][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.314888][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.324650][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.332580][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.344315][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.353550][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.362005][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.369939][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.379478][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.388750][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.396665][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.405655][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.413455][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.422488][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.430347][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.447811][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.455672][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.465834][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.473476][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.483416][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.490964][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.498854][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.506658][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.514435][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.522184][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.531131][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.538651][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.549360][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.557799][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.565640][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.573750][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.581211][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.589149][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.597234][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.605017][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.861507][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.868941][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.876299][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.912891][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.920231][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2087.973345][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.000423][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.013025][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.030566][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.045835][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.053649][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.061318][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.069202][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.090230][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.110359][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.120503][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.128255][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.136870][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.145678][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.161943][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.169645][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.177334][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.185088][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.192440][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.199879][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.207340][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.220005][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.227430][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.241313][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.249828][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.262496][T19291] block nbd7: Receive control failed (result -32) [ 2088.267429][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.270033][T28481] block nbd7: shutting down sockets [ 2088.278760][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.296419][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.305989][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.318099][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.325446][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.333269][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.340441][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.347778][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.355030][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.362340][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.402209][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.422404][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.430601][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.441734][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.450630][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.458117][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.466099][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.473743][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.481085][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.489204][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.497291][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.504977][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.512447][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.519802][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.527488][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.556548][T28496] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2088.567433][T28496] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 2088.619727][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.666667][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.751201][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.824348][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.889289][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2088.964488][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.095938][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.113750][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.122151][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.142490][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.152365][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.159895][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.167144][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.174331][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.181566][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.189523][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.197089][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.212961][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.220142][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.232920][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.240367][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.247972][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.257120][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.305108][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.316050][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.324726][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.332229][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.346567][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.357612][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.365427][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.373404][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.380838][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.388838][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.396313][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.403695][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.411497][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.427536][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.436186][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.446516][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.454708][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.462139][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.472356][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.487357][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.495503][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.506114][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.514946][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.531582][T28502] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4509'. [ 2089.540844][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.587475][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.617200][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.643236][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.718688][ T24] block nbd4: Possible stuck request ffff888021ee0000: control (read@0,1024B). Runtime 60 seconds [ 2089.729557][ T24] block nbd4: Possible stuck request ffff888021ee0200: control (read@1024,1024B). Runtime 60 seconds [ 2089.741215][ T24] block nbd4: Possible stuck request ffff888021ee0400: control (read@2048,1024B). Runtime 60 seconds [ 2089.752528][ T24] block nbd4: Possible stuck request ffff888021ee0600: control (read@3072,1024B). Runtime 60 seconds [ 2089.763890][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.771255][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.778656][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.786744][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.797773][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.813666][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.824019][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.834565][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.900960][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.910552][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.918111][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.925578][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.933275][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.941211][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.949003][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.956879][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.964845][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.972337][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.979793][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.988415][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2089.995982][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.004141][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.011776][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.022645][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.035265][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.047605][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.060493][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.068063][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.075995][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.083438][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.091212][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.110375][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.142908][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.167048][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.176125][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.183737][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.191374][T22064] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 2090.245999][T22064] kovaplus 0003:1E7D:2D50.0012: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 2090.347446][T22064] kovaplus 0003:1E7D:2D50.0012: couldn't init struct kovaplus_device [ 2090.363413][T22064] kovaplus 0003:1E7D:2D50.0012: couldn't install mouse [ 2090.442266][T22064] kovaplus: probe of 0003:1E7D:2D50.0012 failed with error -71 [ 2090.453642][T22064] usb 1-1: USB disconnect, device number 23 [ 2090.479240][T28497] delete_channel: no stack [ 2090.610372][T28507] fido_id[28507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2090.828474][T22064] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2091.012909][T22064] usb 1-1: Using ep0 maxpacket: 32 [ 2091.123917][T22064] usb 1-1: device descriptor read/all, error -71 [ 2091.132887][T19291] Bluetooth: hci2: command 0x0406 tx timeout [ 2091.328371][T28514] libceph: resolve '0..' (ret=-3): failed [ 2093.404913][T28520] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2094.073727][T28535] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2094.084420][T28535] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 2094.821117][T18795] block nbd0: Possible stuck request ffff888021daae00: control (read@0,4096B). Runtime 90 seconds [ 2094.840506][T27434] block nbd5: Possible stuck request ffff888021f50000: control (read@0,1024B). Runtime 60 seconds [ 2094.840581][ T24] block nbd2: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 120 seconds [ 2094.851527][T27434] block nbd5: Possible stuck request ffff888021f50200: control (read@1024,1024B). Runtime 60 seconds [ 2094.874015][ T24] block nbd2: Possible stuck request ffff888021e40200: control (read@1024,1024B). Runtime 120 seconds [ 2094.892908][T27434] block nbd5: Possible stuck request ffff888021f50400: control (read@2048,1024B). Runtime 60 seconds [ 2094.894284][ T24] block nbd2: Possible stuck request ffff888021e40400: control (read@2048,1024B). Runtime 120 seconds [ 2094.904272][T27434] block nbd5: Possible stuck request ffff888021f50600: control (read@3072,1024B). Runtime 60 seconds [ 2094.915701][ T24] block nbd2: Possible stuck request ffff888021e40600: control (read@3072,1024B). Runtime 120 seconds [ 2095.411922][T28545] syzkaller1: entered promiscuous mode [ 2095.420337][T28545] syzkaller1: entered allmulticast mode [ 2095.818691][T28550] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2096.656575][ T24] block nbd1: Possible stuck request ffff888021e00000: control (read@0,1024B). Runtime 150 seconds [ 2096.668138][ T24] block nbd1: Possible stuck request ffff888021e00200: control (read@1024,1024B). Runtime 150 seconds [ 2096.679456][ T24] block nbd1: Possible stuck request ffff888021e00400: control (read@2048,1024B). Runtime 150 seconds [ 2096.690634][ T24] block nbd1: Possible stuck request ffff888021e00600: control (read@3072,1024B). Runtime 150 seconds [ 2097.318313][T28560] libceph: resolve '0..' (ret=-3): failed [ 2098.163000][T11713] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2098.439556][T11713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2098.493806][T11713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2098.755212][T11713] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2099.299878][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.411427][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.448385][T11713] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2099.509539][T11713] usb 1-1: Manufacturer: syz [ 2099.595696][T11713] usb 1-1: config 0 descriptor?? [ 2100.106661][T11713] usbhid 1-1:0.0: can't add hid device: -71 [ 2100.112980][T11713] usbhid: probe of 1-1:0.0 failed with error -71 [ 2100.138329][T11713] usb 1-1: USB disconnect, device number 26 [ 2100.698758][T28571] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2100.708939][T28571] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 2101.843400][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 2101.843417][ T28] audit: type=1800 audit(1775872163.540:358): pid=28573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4529" name="file1" dev="overlay" ino=813 res=0 errno=0 [ 2101.890359][T11780] libceph: connect (1)[c::]:6789 error -101 [ 2101.896558][T11780] libceph: mon0 (1)[c::]:6789 connect error [ 2101.945203][T28567] ceph: No mds server is up or the cluster is laggy [ 2102.294711][T19291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2102.309607][T19291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2102.320121][T19291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2102.341969][T28585] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4532'. [ 2102.343231][T19291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2102.369233][T19291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2102.376995][T19291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2102.582933][T22064] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2102.750336][T28581] chnl_net:caif_netlink_parms(): no params data found [ 2102.763165][T22064] usb 1-1: Using ep0 maxpacket: 16 [ 2102.779204][T22064] usb 1-1: config 0 has no interfaces? [ 2102.804555][T22064] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2102.828021][T22064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.860170][T22064] usb 1-1: Product: syz [ 2102.871569][T22064] usb 1-1: Manufacturer: syz [ 2102.890263][T22064] usb 1-1: SerialNumber: syz [ 2102.928482][T28581] bridge0: port 1(bridge_slave_0) entered blocking state [ 2102.928508][T22064] usb 1-1: config 0 descriptor?? [ 2102.951547][T28581] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.981812][T28581] bridge_slave_0: entered allmulticast mode [ 2103.005582][T28581] bridge_slave_0: entered promiscuous mode [ 2103.027593][T28581] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.036809][T28581] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.045499][T28581] bridge_slave_1: entered allmulticast mode [ 2103.059256][T28581] bridge_slave_1: entered promiscuous mode [ 2103.109677][T28581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2103.141642][T28581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2103.172979][T25987] usb 1-1: USB disconnect, device number 27 [ 2103.295987][T28581] team0: Port device team_slave_0 added [ 2103.305847][T28581] team0: Port device team_slave_1 added [ 2103.368662][T28581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2103.377535][T28581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2103.433251][T28581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2103.455272][T28581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2103.462400][T28581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2103.490626][T28581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2103.618011][T28581] hsr_slave_0: entered promiscuous mode [ 2103.641427][T28581] hsr_slave_1: entered promiscuous mode [ 2103.648799][T28581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2103.656967][T28581] Cannot create hsr debugfs directory [ 2103.956017][T28609] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2103.987816][T28611] libceph: resolve '0..' (ret=-3): failed [ 2104.213017][T28609] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 2104.419313][T26034] Bluetooth: hci3: command tx timeout [ 2104.521182][T28614] netlink: 'syz.7.4535': attribute type 1 has an invalid length. [ 2104.963464][T28614] netlink: 'syz.7.4535': attribute type 4 has an invalid length. [ 2105.719385][T28618] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 2106.493326][T26034] Bluetooth: hci3: command tx timeout [ 2107.125764][T28626] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2108.700675][T26034] Bluetooth: hci3: command tx timeout [ 2109.140043][T28658] libceph: resolve '0..' (ret=-3): failed [ 2111.103223][T26034] Bluetooth: hci3: command tx timeout [ 2111.422398][T28581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2111.444097][T28668] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2111.488660][T28581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2111.509791][T28581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2111.526595][T28581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2111.823196][T28581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2111.889393][T28581] 8021q: adding VLAN 0 to HW filter on device team0 [ 2111.936699][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 2111.943940][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2111.982434][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.989667][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2112.067091][T28683] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2112.171798][T28683] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 2113.265943][T28581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2113.785307][T28581] veth0_vlan: entered promiscuous mode [ 2113.830432][T28581] veth1_vlan: entered promiscuous mode [ 2113.902091][T28581] veth0_macvtap: entered promiscuous mode [ 2113.917577][T28581] veth1_macvtap: entered promiscuous mode [ 2113.954733][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2113.972779][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2113.988116][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2113.998667][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.017010][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.032860][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.043332][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.054245][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.074561][T28581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2114.101103][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.119288][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.131181][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.148138][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.158541][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.182490][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.203681][T28581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.214881][T28581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.226679][T28581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2114.241057][T28581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.257436][T28581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.269577][T28581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.281663][T28581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.419584][T24878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2114.437539][T24878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2114.469700][ T6606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2114.482030][ T6606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2115.293367][ T24] block nbd3: Possible stuck request ffff888021e70000: control (read@0,1024B). Runtime 90 seconds [ 2115.307735][ T24] block nbd3: Possible stuck request ffff888021e70200: control (read@1024,1024B). Runtime 90 seconds [ 2115.318805][ T24] block nbd3: Possible stuck request ffff888021e70400: control (read@2048,1024B). Runtime 90 seconds [ 2115.329874][ T24] block nbd3: Possible stuck request ffff888021e70600: control (read@3072,1024B). Runtime 90 seconds [ 2117.683012][ T5138] udevd[5138]: worker [24433] /devices/virtual/block/nbd3 is taking a long time [ 2117.692336][ T5138] udevd[5138]: worker [24536] /devices/virtual/block/nbd0 is taking a long time [ 2117.714290][ T5138] udevd[5138]: worker [27874] /devices/virtual/block/nbd4 is taking a long time [ 2117.728855][ T5138] udevd[5138]: worker [24505] /devices/virtual/block/nbd1 is taking a long time [ 2117.742166][ T5138] udevd[5138]: worker [24540] /devices/virtual/block/nbd2 is taking a long time [ 2117.760125][ T5138] udevd[5138]: worker [24541] /devices/virtual/block/nbd5 is taking a long time [ 2119.784909][ T24] block nbd4: Possible stuck request ffff888021ee0000: control (read@0,1024B). Runtime 90 seconds [ 2119.795812][ T24] block nbd4: Possible stuck request ffff888021ee0200: control (read@1024,1024B). Runtime 90 seconds [ 2119.807594][ T24] block nbd4: Possible stuck request ffff888021ee0400: control (read@2048,1024B). Runtime 90 seconds [ 2119.819708][ T24] block nbd4: Possible stuck request ffff888021ee0600: control (read@3072,1024B). Runtime 90 seconds [ 2124.901522][ T24] block nbd2: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 150 seconds [ 2124.901574][T27434] block nbd0: Possible stuck request ffff888021daae00: control (read@0,4096B). Runtime 120 seconds [ 2124.912652][ T24] block nbd2: Possible stuck request ffff888021e40200: control (read@1024,1024B). Runtime 150 seconds [ 2124.927976][T18795] block nbd5: Possible stuck request ffff888021f50000: control (read@0,1024B). Runtime 90 seconds [ 2124.947003][T18795] block nbd5: Possible stuck request ffff888021f50200: control (read@1024,1024B). Runtime 90 seconds [ 2124.962266][ T24] block nbd2: Possible stuck request ffff888021e40400: control (read@2048,1024B). Runtime 150 seconds [ 2124.963228][T18795] block nbd5: Possible stuck request ffff888021f50400: control (read@2048,1024B). Runtime 90 seconds [ 2124.982941][ T24] block nbd2: Possible stuck request ffff888021e40600: control (read@3072,1024B). Runtime 150 seconds [ 2124.985221][T18795] block nbd5: Possible stuck request ffff888021f50600: control (read@3072,1024B). Runtime 90 seconds [ 2126.795393][ T5138] udevd[5138]: worker [24505] /devices/virtual/block/nbd1 timeout; kill it [ 2126.806457][ T5138] udevd[5138]: seq 26980 '/devices/virtual/block/nbd1' killed [ 2126.825274][ T24] block nbd1: Possible stuck request ffff888021e00000: control (read@0,1024B). Runtime 180 seconds [ 2126.836241][ T24] block nbd1: Possible stuck request ffff888021e00200: control (read@1024,1024B). Runtime 180 seconds [ 2126.847451][ T24] block nbd1: Possible stuck request ffff888021e00400: control (read@2048,1024B). Runtime 180 seconds [ 2126.861896][ T24] block nbd1: Possible stuck request ffff888021e00600: control (read@3072,1024B). Runtime 180 seconds [ 2141.165639][T24878] bond0: (slave wlan1): Releasing backup interface [ 2141.316088][T24878] hsr_slave_0: left promiscuous mode [ 2141.322030][T24878] hsr_slave_1: left promiscuous mode [ 2141.328680][T24878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2141.339617][T24878] bridge_slave_1: left allmulticast mode [ 2141.345634][T24878] bridge_slave_1: left promiscuous mode [ 2141.351391][T24878] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.359829][T24878] bridge_slave_0: left allmulticast mode [ 2141.365737][T24878] bridge_slave_0: left promiscuous mode [ 2141.371849][T24878] bridge0: port 1(bridge_slave_0) entered disabled state [ 2142.419597][T24878] team0 (unregistering): Port device team_slave_1 removed [ 2142.517524][T24878] team0 (unregistering): Port device team_slave_0 removed [ 2142.611457][T24878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2142.716036][T24878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2143.469566][T24878] bond0 (unregistering): Released all slaves [ 2145.374244][ T24] block nbd3: Possible stuck request ffff888021e70000: control (read@0,1024B). Runtime 120 seconds [ 2145.385557][ T24] block nbd3: Possible stuck request ffff888021e70200: control (read@1024,1024B). Runtime 120 seconds [ 2145.397626][ T24] block nbd3: Possible stuck request ffff888021e70400: control (read@2048,1024B). Runtime 120 seconds [ 2145.409893][ T24] block nbd3: Possible stuck request ffff888021e70600: control (read@3072,1024B). Runtime 120 seconds [ 2149.860832][ T24] block nbd4: Possible stuck request ffff888021ee0000: control (read@0,1024B). Runtime 120 seconds [ 2149.871705][ T24] block nbd4: Possible stuck request ffff888021ee0200: control (read@1024,1024B). Runtime 120 seconds [ 2149.883100][ T24] block nbd4: Possible stuck request ffff888021ee0400: control (read@2048,1024B). Runtime 120 seconds [ 2149.894625][ T24] block nbd4: Possible stuck request ffff888021ee0600: control (read@3072,1024B). Runtime 120 seconds [ 2154.973706][T27434] block nbd5: Possible stuck request ffff888021f50000: control (read@0,1024B). Runtime 120 seconds [ 2154.985525][T18795] block nbd0: Possible stuck request ffff888021daae00: control (read@0,4096B). Runtime 150 seconds [ 2154.997220][T27434] block nbd5: Possible stuck request ffff888021f50200: control (read@1024,1024B). Runtime 120 seconds [ 2155.010336][ T24] block nbd2: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 180 seconds [ 2155.030815][ T24] block nbd2: Possible stuck request ffff888021e40200: control (read@1024,1024B). Runtime 180 seconds [ 2155.035315][T27434] block nbd5: Possible stuck request ffff888021f50400: control (read@2048,1024B). Runtime 120 seconds [ 2155.053887][T27434] block nbd5: Possible stuck request ffff888021f50600: control (read@3072,1024B). Runtime 120 seconds [ 2155.066023][ T24] block nbd2: Possible stuck request ffff888021e40400: control (read@2048,1024B). Runtime 180 seconds [ 2155.077329][ T24] block nbd2: Possible stuck request ffff888021e40600: control (read@3072,1024B). Runtime 180 seconds [ 2156.104036][ T5138] udevd[5138]: worker [24540] /devices/virtual/block/nbd2 timeout; kill it [ 2156.115388][ T5138] udevd[5138]: seq 27495 '/devices/virtual/block/nbd2' killed [ 2156.893215][ T24] block nbd1: Possible stuck request ffff888021e00000: control (read@0,1024B). Runtime 210 seconds [ 2156.904552][ T24] block nbd1: Possible stuck request ffff888021e00200: control (read@1024,1024B). Runtime 210 seconds [ 2156.916583][ T24] block nbd1: Possible stuck request ffff888021e00400: control (read@2048,1024B). Runtime 210 seconds [ 2156.928009][ T24] block nbd1: Possible stuck request ffff888021e00600: control (read@3072,1024B). Runtime 210 seconds [ 2160.740269][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.746914][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2175.456656][ T24] block nbd3: Possible stuck request ffff888021e70000: control (read@0,1024B). Runtime 150 seconds [ 2175.467562][ T24] block nbd3: Possible stuck request ffff888021e70200: control (read@1024,1024B). Runtime 150 seconds [ 2175.478608][ T24] block nbd3: Possible stuck request ffff888021e70400: control (read@2048,1024B). Runtime 150 seconds [ 2175.489801][ T24] block nbd3: Possible stuck request ffff888021e70600: control (read@3072,1024B). Runtime 150 seconds [ 2179.933753][ T24] block nbd4: Possible stuck request ffff888021ee0000: control (read@0,1024B). Runtime 150 seconds [ 2179.945161][ T24] block nbd4: Possible stuck request ffff888021ee0200: control (read@1024,1024B). Runtime 150 seconds [ 2179.956394][ T24] block nbd4: Possible stuck request ffff888021ee0400: control (read@2048,1024B). Runtime 150 seconds [ 2179.967806][ T24] block nbd4: Possible stuck request ffff888021ee0600: control (read@3072,1024B). Runtime 150 seconds [ 2183.209142][ T5138] udevd[5138]: worker [24536] /devices/virtual/block/nbd0 timeout; kill it [ 2183.220226][ T5138] udevd[5138]: seq 27653 '/devices/virtual/block/nbd0' killed [ 2185.053148][T18795] block nbd5: Possible stuck request ffff888021f50000: control (read@0,1024B). Runtime 150 seconds [ 2185.064406][T27434] block nbd0: Possible stuck request ffff888021daae00: control (read@0,4096B). Runtime 180 seconds [ 2185.075348][T18795] block nbd5: Possible stuck request ffff888021f50200: control (read@1024,1024B). Runtime 150 seconds [ 2185.086479][T18795] block nbd5: Possible stuck request ffff888021f50400: control (read@2048,1024B). Runtime 150 seconds [ 2185.088103][ T24] block nbd2: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 210 seconds [ 2185.108809][ T24] block nbd2: Possible stuck request ffff888021e40200: control (read@1024,1024B). Runtime 210 seconds [ 2185.112899][T18795] block nbd5: Possible stuck request ffff888021f50600: control (read@3072,1024B). Runtime 150 seconds [ 2185.138943][ T24] block nbd2: Possible stuck request ffff888021e40400: control (read@2048,1024B). Runtime 210 seconds [ 2185.150154][ T24] block nbd2: Possible stuck request ffff888021e40600: control (read@3072,1024B). Runtime 210 seconds [ 2186.986660][ T24] block nbd1: Possible stuck request ffff888021e00000: control (read@0,1024B). Runtime 240 seconds [ 2186.997644][ T24] block nbd1: Possible stuck request ffff888021e00200: control (read@1024,1024B). Runtime 240 seconds [ 2187.009020][ T24] block nbd1: Possible stuck request ffff888021e00400: control (read@2048,1024B). Runtime 240 seconds [ 2187.022781][ T24] block nbd1: Possible stuck request ffff888021e00600: control (read@3072,1024B). Runtime 240 seconds [ 2204.347024][ T5138] udevd[5138]: worker [24433] /devices/virtual/block/nbd3 timeout; kill it [ 2204.357236][ T5138] udevd[5138]: seq 27779 '/devices/virtual/block/nbd3' killed [ 2205.533975][ T24] block nbd3: Possible stuck request ffff888021e70000: control (read@0,1024B). Runtime 180 seconds [ 2205.544928][ T24] block nbd3: Possible stuck request ffff888021e70200: control (read@1024,1024B). Runtime 180 seconds [ 2205.556054][ T24] block nbd3: Possible stuck request ffff888021e70400: control (read@2048,1024B). Runtime 180 seconds [ 2205.567179][ T24] block nbd3: Possible stuck request ffff888021e70600: control (read@3072,1024B). Runtime 180 seconds [ 2210.015226][ T24] block nbd4: Possible stuck request ffff888021ee0000: control (read@0,1024B). Runtime 180 seconds [ 2210.026078][ T24] block nbd4: Possible stuck request ffff888021ee0200: control (read@1024,1024B). Runtime 180 seconds [ 2210.037315][ T24] block nbd4: Possible stuck request ffff888021ee0400: control (read@2048,1024B). Runtime 180 seconds [ 2210.048900][ T24] block nbd4: Possible stuck request ffff888021ee0600: control (read@3072,1024B). Runtime 180 seconds [ 2210.395050][ T5138] udevd[5138]: worker [27874] /devices/virtual/block/nbd4 timeout; kill it [ 2210.405480][ T5138] udevd[5138]: seq 27795 '/devices/virtual/block/nbd4' killed [ 2215.133267][T27434] block nbd5: Possible stuck request ffff888021f50000: control (read@0,1024B). Runtime 180 seconds [ 2215.133267][ T24] block nbd2: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 240 seconds [ 2215.133309][T27434] block nbd5: Possible stuck request ffff888021f50200: control (read@1024,1024B). Runtime 180 seconds [ 2215.144900][ T24] block nbd2: Possible stuck request ffff888021e40200: control (read@1024,1024B). Runtime 240 seconds [ 2215.178308][T18795] block nbd0: Possible stuck request ffff888021daae00: control (read@0,4096B). Runtime 210 seconds [ 2215.189671][T27434] block nbd5: Possible stuck request ffff888021f50400: control (read@2048,1024B). Runtime 180 seconds [ 2215.190293][ T24] block nbd2: Possible stuck request ffff888021e40400: control (read@2048,1024B). Runtime 240 seconds [ 2215.200837][T27434] block nbd5: Possible stuck request ffff888021f50600: control (read@3072,1024B). Runtime 180 seconds [ 2215.223671][ T24] block nbd2: Possible stuck request ffff888021e40600: control (read@3072,1024B). Runtime 240 seconds [ 2216.447730][ T5138] udevd[5138]: worker [24541] /devices/virtual/block/nbd5 timeout; kill it [ 2216.457223][ T5138] udevd[5138]: seq 27818 '/devices/virtual/block/nbd5' killed [ 2217.055947][ T24] block nbd1: Possible stuck request ffff888021e00000: control (read@0,1024B). Runtime 270 seconds [ 2217.067146][ T24] block nbd1: Possible stuck request ffff888021e00200: control (read@1024,1024B). Runtime 270 seconds [ 2217.078294][ T24] block nbd1: Possible stuck request ffff888021e00400: control (read@2048,1024B). Runtime 270 seconds [ 2217.090700][ T24] block nbd1: Possible stuck request ffff888021e00600: control (read@3072,1024B). Runtime 270 seconds [ 2222.178058][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.184567][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.733145][ T29] INFO: task syz.3.4496:28455 blocked for more than 143 seconds. [ 2224.740989][ T29] Not tainted syzkaller #0 [ 2224.746174][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2224.755086][ T29] task:syz.3.4496 state:D stack:26856 pid:28455 ppid:27449 flags:0x00004004 [ 2224.765265][ T29] Call Trace: [ 2224.768574][ T29] [ 2224.771502][ T29] __schedule+0x1553/0x45a0 [ 2224.778391][ T29] ? asan.module_dtor+0x20/0x20 [ 2224.783748][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 2224.788578][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 2224.794516][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2224.800913][ T29] schedule+0xbd/0x170 [ 2224.805402][ T29] schedule_preempt_disabled+0x13/0x20 [ 2224.811056][ T29] __mutex_lock+0x6a9/0xcc0 [ 2224.816815][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 2224.821899][ T29] ? blkdev_get_by_dev+0x121/0x600 [ 2224.827224][ T29] ? mutex_lock_nested+0x20/0x20 [ 2224.832537][ T29] ? iput+0x343/0x920 [ 2224.837116][ T29] ? ilookup+0x1c4/0x200 [ 2224.841504][ T29] ? disk_block_events+0xa7/0x120 [ 2224.846748][ T29] ? blkdev_get_by_dev+0xf7/0x600 [ 2224.851815][ T29] blkdev_get_by_dev+0x121/0x600 [ 2224.857247][ T29] blkdev_open+0x152/0x360 [ 2224.862553][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 2224.867290][ T29] do_dentry_open+0x8c6/0x1500 [ 2224.872267][ T29] path_openat+0x27f1/0x3230 [ 2224.877291][ T29] ? do_sys_openat2+0xda/0x1d0 [ 2224.882088][ T29] ? verify_lock_unused+0x140/0x140 [ 2224.887546][ T29] ? do_filp_open+0x430/0x430 [ 2224.892261][ T29] ? __virt_addr_valid+0x18c/0x540 [ 2224.897709][ T29] do_filp_open+0x1f5/0x430 [ 2224.902429][ T29] ? vfs_tmpfile+0x490/0x490 [ 2224.907195][ T29] ? _raw_spin_unlock+0x28/0x40 [ 2224.912248][ T29] ? alloc_fd+0x58f/0x630 [ 2224.916647][ T29] do_sys_openat2+0x134/0x1d0 [ 2224.921360][ T29] ? do_sys_open+0xe0/0xe0 [ 2224.925872][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2224.931910][ T29] ? lock_chain_count+0x20/0x20 [ 2224.937069][ T29] ? lock_chain_count+0x20/0x20 [ 2224.942049][ T29] __x64_sys_openat+0x139/0x160 [ 2224.947068][ T29] do_syscall_64+0x55/0xa0 [ 2224.951543][ T29] ? clear_bhb_loop+0x40/0x90 [ 2224.956766][ T29] ? clear_bhb_loop+0x40/0x90 [ 2224.961577][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2224.968097][ T29] RIP: 0033:0x7f0cb055d04e [ 2224.972582][ T29] RSP: 002b:00007f0cb1430b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2224.981123][ T29] RAX: ffffffffffffffda RBX: 00007f0cb14316c0 RCX: 00007f0cb055d04e [ 2224.989493][ T29] RDX: 0000000000020000 RSI: 00007f0cb1430c00 RDI: ffffffffffffff9c [ 2224.997812][ T29] RBP: 00007f0cb1430c00 R08: 0000000000000000 R09: 0000000000000000 [ 2225.005986][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2225.014121][ T29] R13: 00007f0cb0816038 R14: 00007f0cb0815fa0 R15: 00007ffcbf673088 [ 2225.022327][ T29] [ 2225.025609][ T29] [ 2225.025609][ T29] Showing all locks held in the system: [ 2225.033388][ T29] 1 lock held by khungtaskd/29: [ 2225.038271][ T29] #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2225.048403][ T29] 2 locks held by getty/5530: [ 2225.053332][ T29] #0: ffff88814c8ea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2225.063383][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 2225.074579][ T29] 4 locks held by kworker/u4:13/15700: [ 2225.080095][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2225.090287][ T29] #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 2225.099344][ T29] #2: ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 2225.108990][ T29] #3: ffffffff974dc5d0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6c/0x4f0 [ 2225.119584][ T29] 1 lock held by udevd/24433: [ 2225.124434][ T29] #0: ffff8881417f24c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2225.134806][ T29] 1 lock held by udevd/24505: [ 2225.139605][ T29] #0: ffff888021d6a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2225.149734][ T29] 1 lock held by udevd/24536: [ 2225.154609][ T29] #0: ffff8881417f04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2225.164719][ T29] 1 lock held by udevd/24540: [ 2225.169954][ T29] #0: ffff888021d6f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2225.180296][ T29] 1 lock held by udevd/24541: [ 2225.185016][ T29] #0: ffff888141b784c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2225.195266][ T29] 1 lock held by udevd/27874: [ 2225.199952][ T29] #0: ffff888021deb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2225.210027][ T29] 1 lock held by syz.3.4496/28455: [ 2225.221128][ T29] #0: ffff8881417f24c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2225.232143][ T29] [ 2225.234531][ T29] ============================================= [ 2225.234531][ T29] [ 2225.243114][ T29] NMI backtrace for cpu 1 [ 2225.247525][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2225.254922][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2225.265101][ T29] Call Trace: [ 2225.268392][ T29] [ 2225.271324][ T29] dump_stack_lvl+0x18c/0x250 [ 2225.276121][ T29] ? preempt_count_add+0x91/0x1a0 [ 2225.281141][ T29] ? show_regs_print_info+0x20/0x20 [ 2225.286346][ T29] ? load_image+0x420/0x420 [ 2225.291061][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2225.296019][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2225.302197][ T29] ? _printk+0xde/0x130 [ 2225.306561][ T29] ? load_image+0x420/0x420 [ 2225.311252][ T29] ? load_image+0x420/0x420 [ 2225.315873][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2225.321959][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2225.327935][ T29] watchdog+0xf3d/0xf80 [ 2225.332094][ T29] ? watchdog+0x1e1/0xf80 [ 2225.336441][ T29] kthread+0x2fa/0x390 [ 2225.340505][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2225.345529][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2225.350311][ T29] ret_from_fork+0x48/0x80 [ 2225.354898][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2225.359677][ T29] ret_from_fork_asm+0x11/0x20 [ 2225.364802][ T29] [ 2225.368592][ T29] Sending NMI from CPU 1 to CPUs 0: [ 2225.374398][ C0] NMI backtrace for cpu 0 [ 2225.374409][ C0] CPU: 0 PID: 6606 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 2225.374423][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2225.374432][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2225.374453][ C0] RIP: 0010:lock_is_held_type+0x111/0x190 [ 2225.374473][ C0] Code: 95 c0 31 ed 39 c1 40 0f 94 c5 eb 05 bd 01 00 00 00 48 c7 c7 60 db ca 8a e8 9c 12 00 00 b8 ff ff ff ff 65 0f c1 05 f7 60 7c 75 <83> f8 01 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 [ 2225.374484][ C0] RSP: 0018:ffffc900000077f0 EFLAGS: 00000057 [ 2225.374495][ C0] RAX: 0000000000000001 RBX: ffff8880238e5a00 RCX: ef659b7ff87e3700 [ 2225.374505][ C0] RDX: ffff8880238e5a00 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8de0 [ 2225.374515][ C0] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000007900 [ 2225.374524][ C0] R10: dffffc0000000000 R11: ffffed100ccf92b6 R12: 0000000000000004 [ 2225.374533][ C0] R13: 0000000000000246 R14: ffffffff8d1320a0 R15: ffff8880238e6580 [ 2225.374543][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2225.374555][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2225.374565][ C0] CR2: 000055f942288168 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 2225.374577][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 2225.374586][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2225.374596][ C0] Call Trace: [ 2225.374601][ C0] [ 2225.374610][ C0] mac80211_hwsim_addr_iter+0x8b/0x1a0 [ 2225.374630][ C0] __iterate_interfaces+0x243/0x500 [ 2225.374747][ C0] ? mac80211_hwsim_addr_match+0x190/0x190 [ 2225.374763][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2225.374783][ C0] ? mac80211_hwsim_addr_match+0x190/0x190 [ 2225.374799][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2225.374820][ C0] mac80211_hwsim_addr_match+0x11f/0x190 [ 2225.374836][ C0] ? hwsim_unicast_netgroup+0x290/0x290 [ 2225.374857][ C0] mac80211_hwsim_tx_frame_no_nl+0xcca/0x11a0 [ 2225.374888][ C0] ? mac80211_hwsim_tx_frame_nl+0xbd0/0xbd0 [ 2225.374913][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 2225.374930][ C0] mac80211_hwsim_beacon_tx+0x3e9/0x780 [ 2225.374950][ C0] __iterate_interfaces+0x243/0x500 [ 2225.374969][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2225.374984][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2225.375005][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2225.375021][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2225.375043][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 2225.375059][ C0] __hrtimer_run_queues+0x520/0xc40 [ 2225.375075][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 2225.375094][ C0] ? hw_scan_work+0xf60/0xf60 [ 2225.375111][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 2225.375125][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 2225.375146][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 2225.375163][ C0] handle_softirqs+0x280/0x820 [ 2225.375180][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 2225.375196][ C0] ? do_softirq+0x1a0/0x1a0 [ 2225.375212][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2225.375231][ C0] __irq_exit_rcu+0xd3/0x190 [ 2225.375245][ C0] ? irq_exit_rcu+0x20/0x20 [ 2225.375262][ C0] irq_exit_rcu+0x9/0x20 [ 2225.375274][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2225.375291][ C0] [ 2225.375295][ C0] [ 2225.375300][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2225.375318][ C0] RIP: 0010:crng_make_state+0x41b/0x700 [ 2225.375332][ C0] Code: 8c 8d e8 a8 27 e4 05 e9 45 fe ff ff e8 7e 7b db fc e8 09 7f da 05 4d 85 ff 74 8c e8 6f 7b db fc fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 04 26 00 00 00 00 43 c7 44 26 08 00 00 00 00 65 48 8b 04 25 [ 2225.375343][ C0] RSP: 0018:ffffc9001962f880 EFLAGS: 00000293 [ 2225.375355][ C0] RAX: ffffffff84aba661 RBX: 0000000000000000 RCX: ffff8880238e5a00 [ 2225.375364][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2225.375372][ C0] RBP: ffffc9001962f970 R08: ffffffff911c45ef R09: 1ffffffff22388bd [ 2225.375382][ C0] R10: dffffc0000000000 R11: fffffbfff22388be R12: dffffc0000000000 [ 2225.375392][ C0] R13: ffff8880b8e39010 R14: 1ffff920032c5f18 R15: 0000000000000200 [ 2225.375406][ C0] ? crng_make_state+0x411/0x700 [ 2225.375425][ C0] ? crng_make_state+0x142/0x700 [ 2225.375437][ C0] ? urandom_read_iter+0x140/0x140 [ 2225.375472][ C0] _get_random_bytes+0x100/0x250 [ 2225.375490][ C0] ? get_random_bytes+0x20/0x20 [ 2225.375522][ C0] nsim_dev_trap_report_work+0x654/0xb00 [ 2225.375546][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 2225.375563][ C0] process_scheduled_works+0xa5d/0x15d0 [ 2225.375594][ C0] ? worker_attach_to_pool+0x380/0x380 [ 2225.375614][ C0] ? assign_work+0x3d2/0x5d0 [ 2225.375632][ C0] worker_thread+0xa55/0xfc0 [ 2225.375649][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2225.375666][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2225.375680][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2225.375724][ C0] kthread+0x2fa/0x390 [ 2225.375737][ C0] ? pr_cont_work+0x560/0x560 [ 2225.375753][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2225.375766][ C0] ret_from_fork+0x48/0x80 [ 2225.375781][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2225.375795][ C0] ret_from_fork_asm+0x11/0x20 [ 2225.375819][ C0] [ 2225.481252][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2225.481268][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2225.481285][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2225.481294][ T29] Call Trace: [ 2225.481302][ T29] [ 2225.481310][ T29] dump_stack_lvl+0x18c/0x250 [ 2225.481341][ T29] ? show_regs_print_info+0x20/0x20 [ 2225.481362][ T29] ? load_image+0x420/0x420 [ 2225.481391][ T29] panic+0x2dc/0x730 [ 2225.481408][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 2225.481433][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2225.481450][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2225.481472][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2225.481495][ T29] watchdog+0xf7c/0xf80 [ 2225.481515][ T29] ? watchdog+0x1e1/0xf80 [ 2225.481540][ T29] kthread+0x2fa/0x390 [ 2225.481554][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2225.481573][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2225.481588][ T29] ret_from_fork+0x48/0x80 [ 2225.481605][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2225.481621][ T29] ret_from_fork_asm+0x11/0x20 [ 2225.481651][ T29] [ 2225.484033][ T29] Kernel Offset: disabled [ 2226.015422][ T29] Rebooting in 86400 seconds..