last executing test programs: 30.566302443s ago: executing program 3 (id=414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0406"], 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) 28.432477703s ago: executing program 3 (id=418): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 25.293235863s ago: executing program 1 (id=420): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 23.09278829s ago: executing program 3 (id=422): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x7) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)={[{}]}, 0x1, 0x235, &(0x7f0000000000)="$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") 18.701573044s ago: executing program 3 (id=426): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)={[{}]}, 0x1, 0x235, &(0x7f0000000000)="$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") 18.698773244s ago: executing program 1 (id=427): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)={[{}]}, 0x1, 0x235, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiAwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1v9mjOH4hVjOKXcKufG3HWLF+Rapn6+7s0LhoNRnycyMDIyMDAxMMwM27kH2V/lDdDIYGBmYGBQYQApYmFIy8xJNfBgYGRghnIMWaCqYKqZGDjAEnrJ+Tkp7QyM4CQA1racgQVuhuFjBlZ+kHIQx+gxAytcxtiiAWoSQzuUVoHSHlB6OZR+DKXl0ZINC9iEfihPo4GBgY2hIvE/f5EhGwMDQ0ViSUmRIUSspKTICC5mJAC3mQlq61wmVM8dZ2IYBaNgFIyCUTAKRsEoGAWjYBSMgpEMAAEAAP//obu5oA==") 15.40237891s ago: executing program 2 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace(0x10, r4) ptrace(0x8, r4) 14.767062022s ago: executing program 0 (id=430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0406"], 0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) 13.635255254s ago: executing program 0 (id=431): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 13.47147096s ago: executing program 2 (id=432): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 12.946034981s ago: executing program 3 (id=433): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 12.942444692s ago: executing program 1 (id=434): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x24000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)) 11.873033178s ago: executing program 1 (id=435): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r3, 0x0, 0x7) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)={[{}]}, 0x1, 0x235, &(0x7f0000000000)="$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") 8.650079666s ago: executing program 2 (id=436): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x24000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)) 7.730855566s ago: executing program 2 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = dup(0xffffffffffffffff) recvmsg$can_bcm(r3, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x2000) syz_genetlink_get_family_id$ethtool(0x0, r3) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000340)) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc30", 0x2, 0xfffffffffffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000), 0x0) add_key$user(&(0x7f0000000400), 0x0, &(0x7f0000001640)="be757b136be0357656f10d0ff26044d2a5d19fa95b7cc5c33806f61eb10f6a04fcdb35f9e184cbe3496a81af630460a9eeac05bd0992cd1fd060fe5f3492e030bedfcd99d99220b87dcf89dda8883ec3cf1e77b73f9632bfa41026325604d31a75d4ef378ab3fda434f4c78a9db9c0a10ecb2301641dca5a337000f911541262da236ae1ffffffff00e27ea584dffac25a189404257025973198b06d2435253cdba9839e3724ca53bbc40e5e47ccb54fda7ca28374bb626c77127d0a791853", 0xbf, 0xfffffffffffffffd) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x9, &(0x7f0000000040)=0x45eb, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) 7.346770224s ago: executing program 1 (id=438): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 7.324056067s ago: executing program 3 (id=439): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 6.468142321s ago: executing program 2 (id=440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 6.234344244s ago: executing program 0 (id=441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.549523792s ago: executing program 0 (id=442): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x24000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)) 4.55230476s ago: executing program 0 (id=443): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x24000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)) 3.499142594s ago: executing program 0 (id=444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r3, 0x0, 0x7) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)={[{}]}, 0x1, 0x235, &(0x7f0000000000)="$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") 128.402937ms ago: executing program 1 (id=445): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)={[{}]}, 0x1, 0x235, &(0x7f0000000000)="$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") 0s ago: executing program 2 (id=446): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580), 0x0, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r7, r5}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={'sha1-generic\x00'}}) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 82.137732][ T5777] cgroup: Unknown subsys name 'net' [ 82.275076][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.059693][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.314689][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.372764][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.374475][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.382238][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.396301][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.397049][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.404348][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.418357][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.418401][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.434914][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.443835][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.451972][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.460012][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.460237][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.475695][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.484478][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.484611][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.499782][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.503688][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.510005][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.515808][ T5803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.522235][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.528460][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.536297][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.148380][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 87.204699][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 87.232139][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 87.273635][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 87.555021][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.563715][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.572636][ T5789] bridge_slave_0: entered allmulticast mode [ 87.580539][ T5789] bridge_slave_0: entered promiscuous mode [ 87.590505][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.597728][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.604988][ T5789] bridge_slave_1: entered allmulticast mode [ 87.612821][ T5789] bridge_slave_1: entered promiscuous mode [ 87.620729][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.628500][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.635786][ T5788] bridge_slave_0: entered allmulticast mode [ 87.643428][ T5788] bridge_slave_0: entered promiscuous mode [ 87.652322][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.659624][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.667027][ T5788] bridge_slave_1: entered allmulticast mode [ 87.674689][ T5788] bridge_slave_1: entered promiscuous mode [ 87.792787][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.801515][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.810624][ T5791] bridge_slave_0: entered allmulticast mode [ 87.819060][ T5791] bridge_slave_0: entered promiscuous mode [ 87.829866][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.864665][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.872166][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.879658][ T5791] bridge_slave_1: entered allmulticast mode [ 87.887223][ T5791] bridge_slave_1: entered promiscuous mode [ 87.897670][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.925755][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.935258][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.942718][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.950569][ T5790] bridge_slave_0: entered allmulticast mode [ 87.958205][ T5790] bridge_slave_0: entered promiscuous mode [ 87.967109][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.974326][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.981918][ T5790] bridge_slave_1: entered allmulticast mode [ 87.989190][ T5790] bridge_slave_1: entered promiscuous mode [ 88.023608][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.078086][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.090885][ T5789] team0: Port device team_slave_0 added [ 88.100499][ T5789] team0: Port device team_slave_1 added [ 88.133118][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.159430][ T5788] team0: Port device team_slave_0 added [ 88.168279][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.181610][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.216763][ T5788] team0: Port device team_slave_1 added [ 88.250511][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.257693][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.284221][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.298983][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.306084][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.332343][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.374108][ T5791] team0: Port device team_slave_0 added [ 88.384662][ T5791] team0: Port device team_slave_1 added [ 88.428751][ T5790] team0: Port device team_slave_0 added [ 88.460864][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.468081][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.494408][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.507764][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.514782][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.542531][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.556527][ T5790] team0: Port device team_slave_1 added [ 88.580189][ T5789] hsr_slave_0: entered promiscuous mode [ 88.586732][ T50] Bluetooth: hci1: command tx timeout [ 88.586752][ T5801] Bluetooth: hci0: command tx timeout [ 88.592505][ T50] Bluetooth: hci3: command tx timeout [ 88.603864][ T5793] Bluetooth: hci2: command tx timeout [ 88.610128][ T5789] hsr_slave_1: entered promiscuous mode [ 88.641372][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.648523][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.674791][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.688055][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.695062][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.721593][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.781445][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.788537][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.814764][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.864333][ T5788] hsr_slave_0: entered promiscuous mode [ 88.871342][ T5788] hsr_slave_1: entered promiscuous mode [ 88.877808][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.885997][ T5788] Cannot create hsr debugfs directory [ 88.892284][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.899591][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.925620][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.019026][ T5791] hsr_slave_0: entered promiscuous mode [ 89.025958][ T5791] hsr_slave_1: entered promiscuous mode [ 89.032315][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.040026][ T5791] Cannot create hsr debugfs directory [ 89.070049][ T5790] hsr_slave_0: entered promiscuous mode [ 89.076990][ T5790] hsr_slave_1: entered promiscuous mode [ 89.083281][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.091565][ T5790] Cannot create hsr debugfs directory [ 89.499406][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.512981][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.523881][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.536883][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.600332][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.626891][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.638565][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.661098][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.753745][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.767012][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.789861][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.801967][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.902733][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.913038][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.934811][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.946260][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.992410][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.079363][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.092602][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.129625][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.137068][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.154635][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.161844][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.183800][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.231325][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.238613][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.268562][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.279392][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.286643][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.340299][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.384916][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.392169][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.423255][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.430476][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.499075][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.600060][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.666942][ T5793] Bluetooth: hci2: command tx timeout [ 90.672452][ T5793] Bluetooth: hci3: command tx timeout [ 90.675763][ T50] Bluetooth: hci0: command tx timeout [ 90.678648][ T5793] Bluetooth: hci1: command tx timeout [ 90.692015][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.699292][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.780069][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.787443][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.939791][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.996873][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.131618][ T5789] veth0_vlan: entered promiscuous mode [ 91.163921][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.176765][ T5789] veth1_vlan: entered promiscuous mode [ 91.195081][ T5788] veth0_vlan: entered promiscuous mode [ 91.250600][ T5788] veth1_vlan: entered promiscuous mode [ 91.354118][ T5789] veth0_macvtap: entered promiscuous mode [ 91.373643][ T5788] veth0_macvtap: entered promiscuous mode [ 91.383762][ T5791] veth0_vlan: entered promiscuous mode [ 91.396586][ T5789] veth1_macvtap: entered promiscuous mode [ 91.409879][ T5788] veth1_macvtap: entered promiscuous mode [ 91.423292][ T5791] veth1_vlan: entered promiscuous mode [ 91.460789][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.480344][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.497344][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.508753][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.521598][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.535236][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.560582][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.570209][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.579155][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.589970][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.603641][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.614599][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.632629][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.667398][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.676789][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.685949][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.694707][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.773662][ T5791] veth0_macvtap: entered promiscuous mode [ 91.815291][ T5791] veth1_macvtap: entered promiscuous mode [ 91.874531][ T5790] veth0_vlan: entered promiscuous mode [ 91.892786][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.902120][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.922535][ T5790] veth1_vlan: entered promiscuous mode [ 91.982616][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.993419][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.003985][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.014724][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.027119][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.043909][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.055212][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.066689][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.078732][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.090151][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.112532][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.123049][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.139707][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.147625][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.164592][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.173458][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.183377][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.193339][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.231590][ T5790] veth0_macvtap: entered promiscuous mode [ 92.275933][ T9] cfg80211: failed to load regulatory.db [ 92.291655][ T5790] veth1_macvtap: entered promiscuous mode [ 92.341977][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.352820][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.363983][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.375888][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.385947][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.387108][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.403985][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.414799][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.429496][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.472291][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.483530][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.507966][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.534625][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.546260][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.557276][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.571187][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.762820][ T5793] Bluetooth: hci0: command tx timeout [ 92.762985][ T5801] Bluetooth: hci3: command tx timeout [ 92.770033][ T5793] Bluetooth: hci2: command tx timeout [ 92.773758][ T50] Bluetooth: hci1: command tx timeout [ 92.783045][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.807612][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.845496][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.862525][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.886576][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.922436][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.980065][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.015751][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.255145][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.255168][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.812099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.812148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.812186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.812225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.812293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.812332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.812369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.812405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.812442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.812479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.209648][ T50] Bluetooth: hci1: command tx timeout [ 95.209694][ T50] Bluetooth: hci3: command tx timeout [ 95.209727][ T50] Bluetooth: hci2: command tx timeout [ 95.209759][ T50] Bluetooth: hci0: command tx timeout [ 95.441841][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.441866][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.395975][ T5908] nbd0: detected capacity change from 0 to 8589934655 [ 100.288692][ T5798] block nbd0: Receive control failed (result -104) [ 101.169979][ T5921] syz.2.3 (5921) used greatest stack depth: 20136 bytes left [ 104.102479][ T5942] nbd1: detected capacity change from 0 to 8589934655 [ 105.908022][ T5798] block nbd1: Receive control failed (result -104) [ 116.965496][ T5995] nbd2: detected capacity change from 0 to 8589934655 [ 119.834910][ T5798] block nbd2: Receive control failed (result -104) [ 123.053435][ T6025] syz.2.28[6025]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 123.143718][ T6025] loop2: detected capacity change from 0 to 2048 [ 124.322439][ T6025] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.290943][ T6048] nbd3: detected capacity change from 0 to 8589934655 [ 128.122276][ T95] block nbd0: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 30 seconds [ 130.487123][ T5798] block nbd3: Receive control failed (result -104) [ 133.548469][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.573854][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.132007][ T95] block nbd1: Possible stuck request ffff888021d00000: control (read@0,1024B). Runtime 30 seconds [ 136.143008][ T95] block nbd1: Possible stuck request ffff888021d00200: control (read@1024,1024B). Runtime 30 seconds [ 136.155062][ T95] block nbd1: Possible stuck request ffff888021d00400: control (read@2048,1024B). Runtime 30 seconds [ 136.166101][ T95] block nbd1: Possible stuck request ffff888021d00600: control (read@3072,1024B). Runtime 30 seconds [ 147.525574][ T24] block nbd2: Possible stuck request ffff888021d38000: control (read@0,1024B). Runtime 30 seconds [ 147.536336][ T24] block nbd2: Possible stuck request ffff888021d38200: control (read@1024,1024B). Runtime 30 seconds [ 147.548120][ T24] block nbd2: Possible stuck request ffff888021d38400: control (read@2048,1024B). Runtime 30 seconds [ 147.559234][ T24] block nbd2: Possible stuck request ffff888021d38600: control (read@3072,1024B). Runtime 30 seconds [ 151.384330][ T6156] nbd4: detected capacity change from 0 to 8589934655 [ 153.367117][ T6161] nbd5: detected capacity change from 0 to 8589934655 [ 153.475403][ T5798] block nbd4: Receive control failed (result -104) [ 153.797851][ T6166] nbd6: detected capacity change from 0 to 8589934655 [ 154.766875][ T50] block nbd5: Receive control failed (result -104) [ 154.878427][ T5798] block nbd6: Receive control failed (result -32) [ 154.969720][ T95] block nbd6: Dead connection, failed to find a fallback [ 155.015633][ T95] block nbd6: shutting down sockets [ 155.021310][ T95] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.032027][ T95] Buffer I/O error on dev nbd6, logical block 0, async page read [ 155.041345][ T95] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 155.050614][ T95] Buffer I/O error on dev nbd6, logical block 1, async page read [ 155.058462][ T95] Buffer I/O error on dev nbd6, logical block 2, async page read [ 155.066423][ T95] Buffer I/O error on dev nbd6, logical block 3, async page read [ 155.085507][ T24] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 155.094586][ T24] Buffer I/O error on dev nbd6, logical block 0, async page read [ 155.102380][ T24] Buffer I/O error on dev nbd6, logical block 1, async page read [ 155.110171][ T24] Buffer I/O error on dev nbd6, logical block 2, async page read [ 155.125567][ T24] Buffer I/O error on dev nbd6, logical block 3, async page read [ 155.144179][ T24] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 155.153517][ T24] Buffer I/O error on dev nbd6, logical block 0, async page read [ 155.185487][ T24] Buffer I/O error on dev nbd6, logical block 1, async page read [ 155.206028][ T24] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 155.215471][ T24] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 155.224955][ T24] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 155.235970][ T24] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 155.245790][ T24] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 155.254941][ T6169] ldm_validate_partition_table(): Disk read failed. [ 155.265784][ T24] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.287231][ T6169] Dev nbd6: unable to read RDB block 0 [ 155.307823][ T6169] nbd6: unable to read partition table [ 155.336438][ T6169] ldm_validate_partition_table(): Disk read failed. [ 155.347516][ T6169] Dev nbd6: unable to read RDB block 0 [ 155.355040][ T6169] nbd6: unable to read partition table [ 157.548899][ T95] block nbd3: Possible stuck request ffff888021da0000: control (read@0,4096B). Runtime 30 seconds [ 157.810458][ T6180] nbd7: detected capacity change from 0 to 8589934655 [ 158.997348][ T95] block nbd0: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 60 seconds [ 160.839271][ T6201] nbd8: detected capacity change from 0 to 8589934655 [ 161.620540][ T50] block nbd8: Receive control failed (result -104) [ 163.610806][ T5798] block nbd7: Receive control failed (result -104) [ 166.588697][ T95] block nbd1: Possible stuck request ffff888021d00000: control (read@0,1024B). Runtime 60 seconds [ 166.615545][ T95] block nbd1: Possible stuck request ffff888021d00200: control (read@1024,1024B). Runtime 60 seconds [ 166.626704][ T95] block nbd1: Possible stuck request ffff888021d00400: control (read@2048,1024B). Runtime 60 seconds [ 166.637903][ T95] block nbd1: Possible stuck request ffff888021d00600: control (read@3072,1024B). Runtime 60 seconds [ 178.346172][ T24] block nbd2: Possible stuck request ffff888021d38000: control (read@0,1024B). Runtime 60 seconds [ 178.357309][ T24] block nbd2: Possible stuck request ffff888021d38200: control (read@1024,1024B). Runtime 60 seconds [ 178.511098][ T24] block nbd2: Possible stuck request ffff888021d38400: control (read@2048,1024B). Runtime 60 seconds [ 178.522609][ T24] block nbd2: Possible stuck request ffff888021d38600: control (read@3072,1024B). Runtime 60 seconds [ 182.067197][ T95] block nbd4: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 30 seconds [ 182.236858][ T6301] nbd9: detected capacity change from 0 to 8589934655 [ 183.544275][ T5798] block nbd9: Receive control failed (result -104) [ 183.797035][ T95] block nbd5: Possible stuck request ffff888021e48000: control (read@0,4096B). Runtime 30 seconds [ 187.417695][ T6336] nbd10: detected capacity change from 0 to 8589934655 [ 187.807162][ T95] block nbd3: Possible stuck request ffff888021da0000: control (read@0,4096B). Runtime 60 seconds [ 188.826570][ T95] block nbd7: Possible stuck request ffff888021f58000: control (read@0,1024B). Runtime 30 seconds [ 188.837407][ T95] block nbd7: Possible stuck request ffff888021f58200: control (read@1024,1024B). Runtime 30 seconds [ 188.849658][ T95] block nbd7: Possible stuck request ffff888021f58400: control (read@2048,1024B). Runtime 30 seconds [ 188.861028][ T95] block nbd7: Possible stuck request ffff888021f58600: control (read@3072,1024B). Runtime 30 seconds [ 189.575789][ T95] block nbd0: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 90 seconds [ 190.403194][ T5798] block nbd10: Receive control failed (result -104) [ 191.606515][ T95] block nbd8: Possible stuck request ffff888021f70000: control (read@0,4096B). Runtime 30 seconds [ 194.705455][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.705519][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.568439][ T95] block nbd1: Possible stuck request ffff888021d00000: control (read@0,1024B). Runtime 90 seconds [ 197.579255][ T95] block nbd1: Possible stuck request ffff888021d00200: control (read@1024,1024B). Runtime 90 seconds [ 197.602783][ T95] block nbd1: Possible stuck request ffff888021d00400: control (read@2048,1024B). Runtime 90 seconds [ 197.614164][ T95] block nbd1: Possible stuck request ffff888021d00600: control (read@3072,1024B). Runtime 90 seconds [ 205.971072][ T6422] nbd11: detected capacity change from 0 to 8589934655 [ 208.843329][ T24] block nbd2: Possible stuck request ffff888021d38000: control (read@0,1024B). Runtime 90 seconds [ 208.854390][ T24] block nbd2: Possible stuck request ffff888021d38200: control (read@1024,1024B). Runtime 90 seconds [ 208.870778][ T24] block nbd2: Possible stuck request ffff888021d38400: control (read@2048,1024B). Runtime 90 seconds [ 208.887919][ T24] block nbd2: Possible stuck request ffff888021d38600: control (read@3072,1024B). Runtime 90 seconds [ 210.225512][ T5798] block nbd11: Receive control failed (result -104) [ 212.322330][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 212.322340][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 212.322387][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 212.322423][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 212.642996][ T6170] block nbd9: Possible stuck request ffff888021fe8000: control (read@0,4096B). Runtime 30 seconds [ 212.643073][ T95] block nbd4: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 60 seconds [ 213.958622][ T95] block nbd5: Possible stuck request ffff888021e48000: control (read@0,4096B). Runtime 60 seconds [ 217.775092][ T24] block nbd10: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 30 seconds [ 217.786145][ T24] block nbd10: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 30 seconds [ 217.798275][ T24] block nbd10: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 30 seconds [ 217.809393][ T24] block nbd10: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 30 seconds [ 218.355923][ T95] block nbd3: Possible stuck request ffff888021da0000: control (read@0,4096B). Runtime 90 seconds [ 219.736371][ T95] block nbd7: Possible stuck request ffff888021f58000: control (read@0,1024B). Runtime 60 seconds [ 219.747991][ T95] block nbd7: Possible stuck request ffff888021f58200: control (read@1024,1024B). Runtime 60 seconds [ 219.768273][ T95] block nbd7: Possible stuck request ffff888021f58400: control (read@2048,1024B). Runtime 60 seconds [ 219.782914][ T95] block nbd7: Possible stuck request ffff888021f58600: control (read@3072,1024B). Runtime 60 seconds [ 219.795507][ T95] block nbd0: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 120 seconds [ 222.976625][ T6170] block nbd8: Possible stuck request ffff888021f70000: control (read@0,4096B). Runtime 60 seconds [ 227.971887][ T6170] block nbd1: Possible stuck request ffff888021d00000: control (read@0,1024B). Runtime 120 seconds [ 227.982791][ T6170] block nbd1: Possible stuck request ffff888021d00200: control (read@1024,1024B). Runtime 120 seconds [ 227.994077][ T6170] block nbd1: Possible stuck request ffff888021d00400: control (read@2048,1024B). Runtime 120 seconds [ 228.005197][ T6170] block nbd1: Possible stuck request ffff888021d00600: control (read@3072,1024B). Runtime 120 seconds [ 230.618073][ T6535] loop3: detected capacity change from 0 to 1024 [ 230.634576][ T6535] ======================================================= [ 230.634576][ T6535] WARNING: The mand mount option has been deprecated and [ 230.634576][ T6535] and is ignored by this kernel. Remove the mand [ 230.634576][ T6535] option from the mount to silence this warning. [ 230.634576][ T6535] ======================================================= [ 230.802500][ T6535] EXT4-fs: Ignoring removed bh option [ 230.832842][ T6535] EXT4-fs: Ignoring removed nobh option [ 230.855189][ T6535] EXT4-fs: Ignoring removed bh option [ 230.878447][ T6535] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 231.026518][ T6535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.587623][ T6535] sched: RT throttling activated [ 232.607652][ T6540] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.130: Allocating blocks 497-513 which overlap fs metadata [ 233.165424][ T6540] EXT4-fs (loop3): pa ffff888078591570: logic 256, phys. 385, len 8 [ 233.173724][ T6540] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 233.583908][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.270600][ T6170] block nbd11: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 30 seconds [ 236.285097][ T6170] block nbd11: Possible stuck request ffff8880224e8200: control (read@1024,1024B). Runtime 30 seconds [ 236.296781][ T6170] block nbd11: Possible stuck request ffff8880224e8400: control (read@2048,1024B). Runtime 30 seconds [ 236.308062][ T6170] block nbd11: Possible stuck request ffff8880224e8600: control (read@3072,1024B). Runtime 30 seconds [ 239.495511][ T24] block nbd2: Possible stuck request ffff888021d38000: control (read@0,1024B). Runtime 120 seconds [ 239.507695][ T24] block nbd2: Possible stuck request ffff888021d38200: control (read@1024,1024B). Runtime 120 seconds [ 239.518899][ T24] block nbd2: Possible stuck request ffff888021d38400: control (read@2048,1024B). Runtime 120 seconds [ 239.535694][ T24] block nbd2: Possible stuck request ffff888021d38600: control (read@3072,1024B). Runtime 120 seconds [ 239.932248][ T6572] tipc: Started in network mode [ 239.945536][ T6572] tipc: Node identity c215b7e039e, cluster identity 4711 [ 239.952975][ T6572] tipc: Enabled bearer , priority 0 [ 239.988722][ T6572] syzkaller0: entered promiscuous mode [ 239.994276][ T6572] syzkaller0: entered allmulticast mode [ 240.068302][ T6572] tipc: Resetting bearer [ 240.260111][ T6571] tipc: Resetting bearer [ 240.277505][ T6577] loop2: detected capacity change from 0 to 1024 [ 240.285188][ T6577] EXT4-fs: Ignoring removed bh option [ 240.292400][ T6577] EXT4-fs: Ignoring removed nobh option [ 240.298699][ T6577] EXT4-fs: Ignoring removed bh option [ 240.315896][ T6577] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.375061][ T6571] tipc: Disabling bearer [ 240.421052][ T6577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.678380][ T6586] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.139: Allocating blocks 497-513 which overlap fs metadata [ 241.928655][ T6586] EXT4-fs (loop2): pa ffff88807a2fe910: logic 256, phys. 385, len 8 [ 241.936939][ T6586] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 242.638466][ T6592] tipc: Enabling of bearer rejected, failed to enable media [ 242.805551][ T6170] block nbd9: Possible stuck request ffff888021fe8000: control (read@0,4096B). Runtime 60 seconds [ 242.816340][ T95] block nbd4: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 90 seconds [ 242.880715][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.265698][ T95] block nbd5: Possible stuck request ffff888021e48000: control (read@0,4096B). Runtime 90 seconds [ 245.611946][ T6616] tipc: Started in network mode [ 245.652509][ T6616] tipc: Node identity cef29e24452e, cluster identity 4711 [ 245.660824][ T6616] tipc: Enabled bearer , priority 0 [ 245.723205][ T6614] tipc: Resetting bearer [ 245.742328][ T6613] tipc: Disabling bearer [ 246.457390][ T6619] tipc: Enabled bearer , priority 0 [ 246.527080][ T6622] syzkaller0: entered promiscuous mode [ 246.543568][ T6622] syzkaller0: entered allmulticast mode [ 246.629198][ T6619] tipc: Resetting bearer [ 246.705694][ T6618] tipc: Resetting bearer [ 246.730734][ T6618] tipc: Disabling bearer [ 246.802069][ T6625] syzkaller0: entered promiscuous mode [ 246.815399][ T6625] syzkaller0: entered allmulticast mode [ 247.082036][ T6631] tipc: Enabling of bearer rejected, failed to enable media [ 247.634670][ T6642] syzkaller0: entered promiscuous mode [ 247.689606][ T6642] syzkaller0: entered allmulticast mode [ 248.467397][ T95] block nbd3: Possible stuck request ffff888021da0000: control (read@0,4096B). Runtime 120 seconds [ 248.484290][ T24] block nbd10: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 60 seconds [ 248.484338][ T24] block nbd10: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 60 seconds [ 248.484368][ T24] block nbd10: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 60 seconds [ 248.484410][ T24] block nbd10: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 60 seconds [ 250.360461][ T95] block nbd7: Possible stuck request ffff888021f58000: control (read@0,1024B). Runtime 90 seconds [ 250.372868][ T6170] block nbd0: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 150 seconds [ 250.383896][ T95] block nbd7: Possible stuck request ffff888021f58200: control (read@1024,1024B). Runtime 90 seconds [ 250.395418][ T95] block nbd7: Possible stuck request ffff888021f58400: control (read@2048,1024B). Runtime 90 seconds [ 250.406828][ T95] block nbd7: Possible stuck request ffff888021f58600: control (read@3072,1024B). Runtime 90 seconds [ 252.581659][ T6676] syzkaller0: entered promiscuous mode [ 252.599234][ T6676] syzkaller0: entered allmulticast mode [ 253.341697][ T6683] syzkaller0: entered promiscuous mode [ 253.455400][ T6683] syzkaller0: entered allmulticast mode [ 253.546061][ T95] block nbd8: Possible stuck request ffff888021f70000: control (read@0,4096B). Runtime 90 seconds [ 254.884639][ T6694] syzkaller0: entered promiscuous mode [ 254.898739][ T6694] syzkaller0: entered allmulticast mode [ 256.144837][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.151311][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.614635][ T6713] loop2: detected capacity change from 0 to 1024 [ 256.727009][ T6713] EXT4-fs: Ignoring removed bh option [ 256.732583][ T6713] EXT4-fs: Ignoring removed nobh option [ 256.805627][ T6713] EXT4-fs: Ignoring removed bh option [ 256.994254][ T6713] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.140088][ T6713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.581909][ T95] block nbd1: Possible stuck request ffff888021d00000: control (read@0,1024B). Runtime 150 seconds [ 258.592793][ T95] block nbd1: Possible stuck request ffff888021d00200: control (read@1024,1024B). Runtime 150 seconds [ 258.604184][ T95] block nbd1: Possible stuck request ffff888021d00400: control (read@2048,1024B). Runtime 150 seconds [ 258.615497][ T95] block nbd1: Possible stuck request ffff888021d00600: control (read@3072,1024B). Runtime 150 seconds [ 259.275923][ T6720] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.166: Allocating blocks 497-513 which overlap fs metadata [ 259.291830][ T6720] EXT4-fs (loop2): pa ffff888078591ae0: logic 256, phys. 385, len 8 [ 259.300119][ T6720] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 259.386845][ T6723] netlink: 84 bytes leftover after parsing attributes in process `syz.0.168'. [ 259.788994][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.621704][ T6740] tipc: Enabled bearer , priority 0 [ 260.716126][ T6740] syzkaller0: entered promiscuous mode [ 260.721671][ T6740] syzkaller0: entered allmulticast mode [ 260.876159][ T6740] tipc: Resetting bearer [ 260.893276][ T6739] tipc: Resetting bearer [ 260.951193][ T6739] tipc: Disabling bearer [ 262.558258][ T6759] syzkaller0: entered promiscuous mode [ 262.558311][ T6759] syzkaller0: entered allmulticast mode [ 263.227499][ T6768] netlink: 84 bytes leftover after parsing attributes in process `syz.3.179'. [ 263.243171][ T6770] syzkaller0: entered promiscuous mode [ 263.250586][ T6770] syzkaller0: entered allmulticast mode [ 264.269260][ T6782] tipc: Started in network mode [ 264.274218][ T6782] tipc: Node identity de4f98dd2879, cluster identity 4711 [ 264.299149][ T6782] tipc: Enabled bearer , priority 0 [ 264.319868][ T6782] syzkaller0: entered promiscuous mode [ 264.371311][ T6782] syzkaller0: entered allmulticast mode [ 264.423400][ T6782] tipc: Resetting bearer [ 264.478036][ T6781] tipc: Resetting bearer [ 264.614530][ T6781] tipc: Disabling bearer [ 266.352769][ T95] block nbd11: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 60 seconds [ 266.364029][ T95] block nbd11: Possible stuck request ffff8880224e8200: control (read@1024,1024B). Runtime 60 seconds [ 266.375258][ T95] block nbd11: Possible stuck request ffff8880224e8400: control (read@2048,1024B). Runtime 60 seconds [ 266.388770][ T95] block nbd11: Possible stuck request ffff8880224e8600: control (read@3072,1024B). Runtime 60 seconds [ 267.208946][ T6813] netlink: 84 bytes leftover after parsing attributes in process `syz.3.190'. [ 269.614254][ T24] block nbd2: Possible stuck request ffff888021d38000: control (read@0,1024B). Runtime 150 seconds [ 269.625156][ T24] block nbd2: Possible stuck request ffff888021d38200: control (read@1024,1024B). Runtime 150 seconds [ 269.636258][ T24] block nbd2: Possible stuck request ffff888021d38400: control (read@2048,1024B). Runtime 150 seconds [ 269.647267][ T24] block nbd2: Possible stuck request ffff888021d38600: control (read@3072,1024B). Runtime 150 seconds [ 270.619453][ T6848] netlink: 84 bytes leftover after parsing attributes in process `syz.0.200'. [ 273.450304][ T95] block nbd9: Possible stuck request ffff888021fe8000: control (read@0,4096B). Runtime 90 seconds [ 273.461667][ T6170] block nbd4: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 120 seconds [ 274.552258][ T6891] netlink: 84 bytes leftover after parsing attributes in process `syz.0.210'. [ 275.306421][ T6170] block nbd5: Possible stuck request ffff888021e48000: control (read@0,4096B). Runtime 120 seconds [ 278.101050][ T6931] netlink: 84 bytes leftover after parsing attributes in process `syz.2.220'. [ 278.527081][ T24] block nbd10: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 90 seconds [ 278.527090][ T6170] block nbd3: Possible stuck request ffff888021da0000: control (read@0,4096B). Runtime 150 seconds [ 278.555959][ T24] block nbd10: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 90 seconds [ 278.567284][ T24] block nbd10: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 90 seconds [ 278.578575][ T24] block nbd10: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 90 seconds [ 280.425748][ T95] block nbd0: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 180 seconds [ 280.436704][ T6170] block nbd7: Possible stuck request ffff888021f58000: control (read@0,1024B). Runtime 120 seconds [ 280.447611][ T6170] block nbd7: Possible stuck request ffff888021f58200: control (read@1024,1024B). Runtime 120 seconds [ 280.461407][ T6170] block nbd7: Possible stuck request ffff888021f58400: control (read@2048,1024B). Runtime 120 seconds [ 280.474651][ T6170] block nbd7: Possible stuck request ffff888021f58600: control (read@3072,1024B). Runtime 120 seconds [ 281.006241][ T6965] netlink: 84 bytes leftover after parsing attributes in process `syz.1.229'. [ 283.635918][ T6170] block nbd8: Possible stuck request ffff888021f70000: control (read@0,4096B). Runtime 120 seconds [ 285.484420][ T6990] tipc: Enabled bearer , priority 10 [ 286.599760][ T786] tipc: Node number set to 4227184608 [ 287.941801][ T7007] netlink: 84 bytes leftover after parsing attributes in process `syz.2.239'. [ 289.396191][ T6170] block nbd1: Possible stuck request ffff888021d00000: control (read@0,1024B). Runtime 180 seconds [ 289.407286][ T6170] block nbd1: Possible stuck request ffff888021d00200: control (read@1024,1024B). Runtime 180 seconds [ 289.418572][ T6170] block nbd1: Possible stuck request ffff888021d00400: control (read@2048,1024B). Runtime 180 seconds [ 289.429812][ T6170] block nbd1: Possible stuck request ffff888021d00600: control (read@3072,1024B). Runtime 180 seconds [ 297.197976][ T6170] block nbd11: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 90 seconds [ 297.209002][ T6170] block nbd11: Possible stuck request ffff8880224e8200: control (read@1024,1024B). Runtime 90 seconds [ 297.220654][ T6170] block nbd11: Possible stuck request ffff8880224e8400: control (read@2048,1024B). Runtime 90 seconds [ 297.232058][ T6170] block nbd11: Possible stuck request ffff8880224e8600: control (read@3072,1024B). Runtime 90 seconds [ 299.916681][ T7096] tipc: Started in network mode [ 299.934979][ T24] block nbd2: Possible stuck request ffff888021d38000: control (read@0,1024B). Runtime 180 seconds [ 299.946398][ T24] block nbd2: Possible stuck request ffff888021d38200: control (read@1024,1024B). Runtime 180 seconds [ 299.957482][ T24] block nbd2: Possible stuck request ffff888021d38400: control (read@2048,1024B). Runtime 180 seconds [ 299.968561][ T7096] tipc: Node identity ac1414aa, cluster identity 4711 [ 300.270804][ T7096] tipc: Enabled bearer , priority 10 [ 300.405794][ T24] block nbd2: Possible stuck request ffff888021d38600: control (read@3072,1024B). Runtime 180 seconds [ 300.577449][ T7100] tipc: Enabled bearer , priority 10 [ 300.588555][ T7101] tipc: Enabling of bearer rejected, already enabled [ 301.276593][ T28] tipc: Node number set to 2886997162 [ 301.595612][ T28] tipc: Node number set to 2346491428 [ 304.115625][ T6170] block nbd9: Possible stuck request ffff888021fe8000: control (read@0,4096B). Runtime 120 seconds [ 304.127186][ T95] block nbd4: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 150 seconds [ 305.388568][ T95] block nbd5: Possible stuck request ffff888021e48000: control (read@0,4096B). Runtime 150 seconds [ 306.784659][ T7122] tipc: Enabling of bearer rejected, already enabled [ 308.585995][ T95] block nbd3: Possible stuck request ffff888021da0000: control (read@0,4096B). Runtime 180 seconds [ 308.633082][ T24] block nbd10: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 120 seconds [ 308.644146][ T24] block nbd10: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 120 seconds [ 308.655522][ T24] block nbd10: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 120 seconds [ 308.666729][ T24] block nbd10: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 120 seconds [ 310.506794][ T95] block nbd0: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 210 seconds [ 310.527938][ T6170] block nbd7: Possible stuck request ffff888021f58000: control (read@0,1024B). Runtime 150 seconds [ 310.538947][ T6170] block nbd7: Possible stuck request ffff888021f58200: control (read@1024,1024B). Runtime 150 seconds [ 310.550546][ T6170] block nbd7: Possible stuck request ffff888021f58400: control (read@2048,1024B). Runtime 150 seconds [ 310.561829][ T6170] block nbd7: Possible stuck request ffff888021f58600: control (read@3072,1024B). Runtime 150 seconds [ 312.108724][ T7154] tipc: Enabling of bearer rejected, already enabled [ 313.981199][ T6170] block nbd8: Possible stuck request ffff888021f70000: control (read@0,4096B). Runtime 150 seconds [ 317.556176][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.562722][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.654403][ T7195] tipc: Enabled bearer , priority 10 [ 319.239110][ T2172] tipc: Node number set to 4130773213 [ 319.396379][ T7192] tipc: Enabling of bearer rejected, already enabled [ 319.665591][ T6170] block nbd1: Possible stuck request ffff888021d00000: control (read@0,1024B). Runtime 210 seconds [ 319.676470][ T6170] block nbd1: Possible stuck request ffff888021d00200: control (read@1024,1024B). Runtime 210 seconds [ 319.688059][ T6170] block nbd1: Possible stuck request ffff888021d00400: control (read@2048,1024B). Runtime 210 seconds [ 319.699173][ T6170] block nbd1: Possible stuck request ffff888021d00600: control (read@3072,1024B). Runtime 210 seconds [ 320.092809][ T5159] udevd[5159]: worker [5796] /devices/virtual/block/nbd0 timeout; kill it [ 320.126915][ T5159] udevd[5159]: seq 10608 '/devices/virtual/block/nbd0' killed [ 320.195521][ T5159] udevd[5159]: worker [6174] /devices/virtual/block/nbd7 is taking a long time [ 320.214494][ T5159] udevd[5159]: worker [5807] /devices/virtual/block/nbd1 timeout; kill it [ 320.275942][ T5159] udevd[5159]: seq 10617 '/devices/virtual/block/nbd1' killed [ 320.305540][ T5159] udevd[5159]: worker [6169] /devices/virtual/block/nbd8 is taking a long time [ 320.335071][ T5159] udevd[5159]: worker [6206] /devices/virtual/block/nbd9 is taking a long time [ 320.384575][ T5159] udevd[5159]: worker [6329] /devices/virtual/block/nbd10 is taking a long time [ 320.580800][ T5159] udevd[5159]: worker [6028] /devices/virtual/block/nbd3 timeout; kill it [ 320.608852][ T5159] udevd[5159]: seq 10650 '/devices/virtual/block/nbd3' killed [ 321.403509][ T7197] tipc: Enabling of bearer rejected, already enabled [ 323.218996][ T7215] tipc: Enabling of bearer rejected, already enabled [ 323.263123][ T7204] tipc: Enabling of bearer rejected, already enabled [ 323.980320][ T7219] tipc: Enabling of bearer rejected, already enabled [ 324.215891][ T5879] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 326.315720][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 326.327543][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.339490][ T5879] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.355063][ T5879] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 326.364824][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.373026][ T5879] usb 3-1: Product: syz [ 326.377659][ T5879] usb 3-1: Manufacturer: syz [ 326.382312][ T5879] usb 3-1: SerialNumber: syz [ 326.446780][ T5879] usb 3-1: config 0 descriptor?? [ 326.732352][ T7225] tipc: Enabling of bearer rejected, already enabled [ 326.932077][ T5862] usb 3-1: USB disconnect, device number 2 [ 328.289842][ T6170] block nbd11: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 120 seconds [ 328.314346][ T6170] block nbd11: Possible stuck request ffff8880224e8200: control (read@1024,1024B). Runtime 120 seconds [ 328.314387][ T6170] block nbd11: Possible stuck request ffff8880224e8400: control (read@2048,1024B). Runtime 120 seconds [ 328.314417][ T6170] block nbd11: Possible stuck request ffff8880224e8600: control (read@3072,1024B). Runtime 120 seconds [ 330.679564][ T24] block nbd2: Possible stuck request ffff888021d38000: control (read@0,1024B). Runtime 210 seconds [ 330.679618][ T24] block nbd2: Possible stuck request ffff888021d38200: control (read@1024,1024B). Runtime 210 seconds [ 330.679648][ T24] block nbd2: Possible stuck request ffff888021d38400: control (read@2048,1024B). Runtime 210 seconds [ 330.688658][ T24] block nbd2: Possible stuck request ffff888021d38600: control (read@3072,1024B). Runtime 210 seconds [ 330.942217][ T7246] tipc: Enabled bearer , priority 0 [ 330.962569][ T7246] syzkaller0: entered promiscuous mode [ 330.979882][ T7246] syzkaller0: entered allmulticast mode [ 331.000930][ T7244] tipc: Enabling of bearer rejected, already enabled [ 331.060945][ T7246] tipc: Resetting bearer [ 331.158773][ T7245] tipc: Resetting bearer [ 331.773630][ T7245] tipc: Disabling bearer [ 334.201855][ T6170] block nbd9: Possible stuck request ffff888021fe8000: control (read@0,4096B). Runtime 150 seconds [ 334.213251][ T95] block nbd4: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 180 seconds [ 334.562679][ T7262] tipc: Enabling of bearer rejected, already enabled [ 334.586512][ T7263] tipc: Enabling of bearer rejected, already enabled [ 335.941974][ T95] block nbd5: Possible stuck request ffff888021e48000: control (read@0,4096B). Runtime 180 seconds [ 336.515591][ T5879] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 337.151407][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 337.248880][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.345405][ T5879] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 337.586955][ T5879] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 337.606924][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.626860][ T5879] usb 3-1: Product: syz [ 337.631080][ T5879] usb 3-1: Manufacturer: syz [ 337.657321][ T5879] usb 3-1: SerialNumber: syz [ 337.690671][ T5879] usb 3-1: config 0 descriptor?? [ 338.118991][ T2172] usb 3-1: USB disconnect, device number 3 [ 338.695240][ T24] block nbd10: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 150 seconds [ 338.706217][ T24] block nbd10: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 150 seconds [ 338.717627][ T24] block nbd10: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 150 seconds [ 338.729619][ T24] block nbd10: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 150 seconds [ 338.807450][ T7278] tipc: Enabling of bearer rejected, already enabled [ 338.854766][ T95] block nbd3: Possible stuck request ffff888021da0000: control (read@0,4096B). Runtime 210 seconds [ 340.400904][ T7284] nbd12: detected capacity change from 0 to 8589934655 [ 340.865835][ T6170] block nbd7: Possible stuck request ffff888021f58000: control (read@0,1024B). Runtime 180 seconds [ 340.878784][ T95] block nbd0: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 240 seconds [ 340.890102][ T6170] block nbd7: Possible stuck request ffff888021f58200: control (read@1024,1024B). Runtime 180 seconds [ 340.901287][ T6170] block nbd7: Possible stuck request ffff888021f58400: control (read@2048,1024B). Runtime 180 seconds [ 340.912447][ T6170] block nbd7: Possible stuck request ffff888021f58600: control (read@3072,1024B). Runtime 180 seconds [ 340.916892][ T7295] syzkaller0: entered promiscuous mode [ 340.975458][ T50] block nbd12: Receive control failed (result -32) [ 340.986934][ T7295] syzkaller0: entered allmulticast mode [ 341.462503][ T6170] block nbd12: Dead connection, failed to find a fallback [ 341.469940][ T6170] block nbd12: shutting down sockets [ 341.476386][ T6170] blk_print_req_error: 100 callbacks suppressed [ 341.476402][ T6170] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 341.492190][ T6170] buffer_io_error: 122 callbacks suppressed [ 341.492204][ T6170] Buffer I/O error on dev nbd12, logical block 0, async page read [ 341.507537][ T6170] Buffer I/O error on dev nbd12, logical block 1, async page read [ 341.515533][ T6170] Buffer I/O error on dev nbd12, logical block 2, async page read [ 341.523561][ T6170] Buffer I/O error on dev nbd12, logical block 3, async page read [ 341.531776][ T6170] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 341.540973][ T6170] Buffer I/O error on dev nbd12, logical block 0, async page read [ 341.548885][ T6170] Buffer I/O error on dev nbd12, logical block 1, async page read [ 341.556778][ T6170] Buffer I/O error on dev nbd12, logical block 2, async page read [ 342.182380][ T6170] Buffer I/O error on dev nbd12, logical block 3, async page read [ 342.190869][ T6170] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 342.200141][ T6170] Buffer I/O error on dev nbd12, logical block 0, async page read [ 342.225489][ T6170] Buffer I/O error on dev nbd12, logical block 1, async page read [ 342.235862][ T6170] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 342.246831][ T6170] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 342.350098][ T6170] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 342.359748][ T6170] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 342.369447][ T6170] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 342.381196][ T6378] ldm_validate_partition_table(): Disk read failed. [ 342.388155][ T6170] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 342.402383][ T6170] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 342.426055][ T6378] Dev nbd12: unable to read RDB block 0 [ 342.433487][ T6378] nbd12: unable to read partition table [ 342.447132][ T6378] ldm_validate_partition_table(): Disk read failed. [ 342.455959][ T6378] Dev nbd12: unable to read RDB block 0 [ 342.463063][ T6378] nbd12: unable to read partition table [ 343.715728][ T7308] tipc: Enabling of bearer rejected, already enabled [ 344.805638][ T6170] block nbd8: Possible stuck request ffff888021f70000: control (read@0,4096B). Runtime 180 seconds [ 349.807570][ T7343] tipc: Enabling of bearer rejected, already enabled [ 350.188939][ T6170] block nbd1: Possible stuck request ffff888021d00000: control (read@0,1024B). Runtime 240 seconds [ 350.203828][ T6170] block nbd1: Possible stuck request ffff888021d00200: control (read@1024,1024B). Runtime 240 seconds [ 350.217080][ T6170] block nbd1: Possible stuck request ffff888021d00400: control (read@2048,1024B). Runtime 240 seconds [ 350.228470][ T6170] block nbd1: Possible stuck request ffff888021d00600: control (read@3072,1024B). Runtime 240 seconds [ 352.642443][ T7348] tipc: Enabling of bearer rejected, already enabled [ 353.595079][ T7356] tipc: Enabling of bearer rejected, already enabled [ 357.355478][ T7373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.328'. [ 357.684340][ T7379] tipc: Enabling of bearer rejected, already enabled [ 358.547381][ T6170] block nbd11: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 150 seconds [ 358.558378][ T6170] block nbd11: Possible stuck request ffff8880224e8200: control (read@1024,1024B). Runtime 150 seconds [ 358.569684][ T6170] block nbd11: Possible stuck request ffff8880224e8400: control (read@2048,1024B). Runtime 150 seconds [ 358.580913][ T6170] block nbd11: Possible stuck request ffff8880224e8600: control (read@3072,1024B). Runtime 150 seconds [ 358.874333][ T7382] nbd13: detected capacity change from 0 to 8589934655 [ 359.988340][ T50] block nbd13: Receive control failed (result -32) [ 359.996122][ T6170] block nbd13: Send control failed (result -32) [ 360.006465][ T6170] block nbd13: Request send failed, requeueing [ 360.063294][ T6170] block nbd13: Dead connection, failed to find a fallback [ 360.076566][ T6170] block nbd13: shutting down sockets [ 360.085426][ T6170] blk_print_req_error: 63 callbacks suppressed [ 360.085443][ T6170] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 360.101227][ T6170] buffer_io_error: 122 callbacks suppressed [ 360.101240][ T6170] Buffer I/O error on dev nbd13, logical block 0, async page read [ 360.115610][ T6170] Buffer I/O error on dev nbd13, logical block 1, async page read [ 360.123923][ T6170] Buffer I/O error on dev nbd13, logical block 2, async page read [ 360.135417][ T6170] Buffer I/O error on dev nbd13, logical block 3, async page read [ 360.144554][ T95] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 360.153873][ T95] Buffer I/O error on dev nbd13, logical block 0, async page read [ 360.161778][ T95] Buffer I/O error on dev nbd13, logical block 1, async page read [ 360.169669][ T95] Buffer I/O error on dev nbd13, logical block 2, async page read [ 360.177609][ T95] Buffer I/O error on dev nbd13, logical block 3, async page read [ 360.185901][ T95] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 360.195041][ T95] Buffer I/O error on dev nbd13, logical block 0, async page read [ 360.202969][ T95] Buffer I/O error on dev nbd13, logical block 1, async page read [ 360.211112][ T95] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 360.220549][ T95] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 360.230007][ T95] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 360.239812][ T95] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 360.249263][ T95] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 360.258485][ T6378] ldm_validate_partition_table(): Disk read failed. [ 360.265234][ T95] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.274602][ T95] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.299199][ T6378] Dev nbd13: unable to read RDB block 0 [ 360.340738][ T6378] nbd13: unable to read partition table [ 360.533391][ T6378] ldm_validate_partition_table(): Disk read failed. [ 360.603850][ T6378] Dev nbd13: unable to read RDB block 0 [ 360.616751][ T6378] nbd13: unable to read partition table [ 361.226916][ T24] block nbd2: Possible stuck request ffff888021d38000: control (read@0,1024B). Runtime 240 seconds [ 361.226966][ T24] block nbd2: Possible stuck request ffff888021d38200: control (read@1024,1024B). Runtime 240 seconds [ 361.226999][ T24] block nbd2: Possible stuck request ffff888021d38400: control (read@2048,1024B). Runtime 240 seconds [ 361.227031][ T24] block nbd2: Possible stuck request ffff888021d38600: control (read@3072,1024B). Runtime 240 seconds [ 363.930871][ T7410] tipc: Enabling of bearer rejected, already enabled [ 364.836639][ T6170] block nbd4: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 210 seconds [ 364.848083][ T95] block nbd9: Possible stuck request ffff888021fe8000: control (read@0,4096B). Runtime 180 seconds [ 364.961099][ T7408] tipc: Enabling of bearer rejected, already enabled [ 365.430529][ T7414] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'. [ 366.895082][ T95] block nbd5: Possible stuck request ffff888021e48000: control (read@0,4096B). Runtime 210 seconds [ 366.997935][ T7422] tipc: Enabling of bearer rejected, already enabled [ 367.597527][ T7426] tipc: Enabling of bearer rejected, already enabled [ 368.837564][ T24] block nbd10: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 180 seconds [ 368.883210][ T24] block nbd10: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 180 seconds [ 368.915011][ T24] block nbd10: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 180 seconds [ 368.926505][ T24] block nbd10: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 180 seconds [ 369.648311][ T95] block nbd3: Possible stuck request ffff888021da0000: control (read@0,4096B). Runtime 240 seconds [ 371.306750][ T6170] block nbd0: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 270 seconds [ 371.318147][ T95] block nbd7: Possible stuck request ffff888021f58000: control (read@0,1024B). Runtime 210 seconds [ 371.334403][ T95] block nbd7: Possible stuck request ffff888021f58200: control (read@1024,1024B). Runtime 210 seconds [ 371.345993][ T95] block nbd7: Possible stuck request ffff888021f58400: control (read@2048,1024B). Runtime 210 seconds [ 371.357453][ T95] block nbd7: Possible stuck request ffff888021f58600: control (read@3072,1024B). Runtime 210 seconds [ 372.473916][ T7447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.347'. [ 372.593173][ T7448] tipc: Enabling of bearer rejected, already enabled [ 374.288004][ T7457] tipc: Enabling of bearer rejected, already enabled [ 374.405573][ T7458] tipc: Enabling of bearer rejected, already enabled [ 375.635560][ T95] block nbd8: Possible stuck request ffff888021f70000: control (read@0,4096B). Runtime 210 seconds [ 376.149297][ T7465] tipc: Enabling of bearer rejected, already enabled [ 377.967665][ T7483] tipc: Enabling of bearer rejected, already enabled [ 378.992229][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.998750][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.351076][ T95] block nbd1: Possible stuck request ffff888021d00000: control (read@0,1024B). Runtime 270 seconds [ 380.362281][ T95] block nbd1: Possible stuck request ffff888021d00200: control (read@1024,1024B). Runtime 270 seconds [ 380.378601][ T95] block nbd1: Possible stuck request ffff888021d00400: control (read@2048,1024B). Runtime 270 seconds [ 380.390206][ T95] block nbd1: Possible stuck request ffff888021d00600: control (read@3072,1024B). Runtime 270 seconds [ 380.733736][ T7491] loop3: detected capacity change from 0 to 8192 [ 382.973348][ T7498] netlink: 36 bytes leftover after parsing attributes in process `syz.3.357'. [ 384.877608][ T7502] loop2: detected capacity change from 0 to 8192 [ 388.386206][ T7523] loop2: detected capacity change from 0 to 8192 [ 388.625994][ T95] block nbd11: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 180 seconds [ 388.637034][ T95] block nbd11: Possible stuck request ffff8880224e8200: control (read@1024,1024B). Runtime 180 seconds [ 388.648925][ T95] block nbd11: Possible stuck request ffff8880224e8400: control (read@2048,1024B). Runtime 180 seconds [ 388.660644][ T95] block nbd11: Possible stuck request ffff8880224e8600: control (read@3072,1024B). Runtime 180 seconds [ 389.522027][ T7533] loop3: detected capacity change from 0 to 8192 [ 389.713593][ T7537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.367'. [ 391.797869][ T24] block nbd2: Possible stuck request ffff888021d38000: control (read@0,1024B). Runtime 270 seconds [ 391.809587][ T24] block nbd2: Possible stuck request ffff888021d38200: control (read@1024,1024B). Runtime 270 seconds [ 391.820834][ T24] block nbd2: Possible stuck request ffff888021d38400: control (read@2048,1024B). Runtime 270 seconds [ 391.831998][ T24] block nbd2: Possible stuck request ffff888021d38600: control (read@3072,1024B). Runtime 270 seconds [ 394.348667][ T7557] nbd14: detected capacity change from 0 to 8589934655 [ 395.266337][ T95] block nbd4: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 240 seconds [ 395.277302][ T6170] block nbd9: Possible stuck request ffff888021fe8000: control (read@0,4096B). Runtime 210 seconds [ 395.400500][ T50] block nbd14: Receive control failed (result -32) [ 396.040281][ T7562] tipc: Enabling of bearer rejected, already enabled [ 397.880107][ T6170] block nbd5: Possible stuck request ffff888021e48000: control (read@0,4096B). Runtime 240 seconds [ 397.991988][ T6170] block nbd14: Dead connection, failed to find a fallback [ 397.999288][ T6170] block nbd14: shutting down sockets [ 398.004593][ T6170] blk_print_req_error: 72 callbacks suppressed [ 398.004603][ T6170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 398.025407][ T6170] buffer_io_error: 122 callbacks suppressed [ 398.025421][ T6170] Buffer I/O error on dev nbd14, logical block 0, async page read [ 398.046507][ T24] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 398.056142][ T24] Buffer I/O error on dev nbd14, logical block 1, async page read [ 398.265490][ T6170] I/O error, dev nbd14, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 398.274849][ T6170] Buffer I/O error on dev nbd14, logical block 2, async page read [ 398.283134][ T6170] Buffer I/O error on dev nbd14, logical block 3, async page read [ 398.436190][ T50] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 399.046153][ T6170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 399.062360][ T6170] Buffer I/O error on dev nbd14, logical block 0, async page read [ 399.070315][ T6170] Buffer I/O error on dev nbd14, logical block 1, async page read [ 399.082425][ T6170] Buffer I/O error on dev nbd14, logical block 2, async page read [ 399.090411][ T6170] Buffer I/O error on dev nbd14, logical block 3, async page read [ 399.098571][ T6170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 399.107783][ T6170] Buffer I/O error on dev nbd14, logical block 0, async page read [ 399.115678][ T6170] Buffer I/O error on dev nbd14, logical block 1, async page read [ 399.123766][ T6170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 399.133223][ T6170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 399.142782][ T6170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 399.155137][ T6170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 399.165311][ T6170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 399.174526][ T6378] ldm_validate_partition_table(): Disk read failed. [ 399.189380][ T6378] Dev nbd14: unable to read RDB block 0 [ 399.197148][ T6378] nbd14: unable to read partition table [ 399.209497][ T6378] ldm_validate_partition_table(): Disk read failed. [ 399.227879][ T6378] Dev nbd14: unable to read RDB block 0 [ 399.235207][ T6378] nbd14: unable to read partition table [ 399.392498][ T7577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.376'. [ 399.472294][ T24] block nbd10: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 210 seconds [ 399.485024][ T24] block nbd10: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 210 seconds [ 399.496786][ T24] block nbd10: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 210 seconds [ 399.509066][ T24] block nbd10: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 210 seconds [ 399.920341][ T7579] loop0: detected capacity change from 0 to 8192 [ 400.688204][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 400.698069][ T5800] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 400.725429][ T6170] block nbd3: Possible stuck request ffff888021da0000: control (read@0,4096B). Runtime 270 seconds [ 401.561178][ T6170] block nbd0: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 300 seconds [ 401.572486][ T95] block nbd7: Possible stuck request ffff888021f58000: control (read@0,1024B). Runtime 240 seconds [ 401.583560][ T95] block nbd7: Possible stuck request ffff888021f58200: control (read@1024,1024B). Runtime 240 seconds [ 401.594625][ T95] block nbd7: Possible stuck request ffff888021f58400: control (read@2048,1024B). Runtime 240 seconds [ 401.606919][ T95] block nbd7: Possible stuck request ffff888021f58600: control (read@3072,1024B). Runtime 240 seconds [ 402.755751][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 402.755807][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 403.652470][ T50] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 405.053671][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 405.500431][ T7611] tipc: Enabling of bearer rejected, already enabled [ 405.546295][ T7612] tipc: Enabling of bearer rejected, already enabled [ 406.210250][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 407.801332][ T95] block nbd8: Possible stuck request ffff888021f70000: control (read@0,4096B). Runtime 240 seconds [ 409.148469][ T7621] tipc: Enabling of bearer rejected, already enabled [ 409.875766][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 410.825877][ T5801] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 411.071427][ T5800] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 411.119143][ T5801] CPU: 1 PID: 5801 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 411.133647][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.143757][ T5801] Workqueue: hci3 hci_rx_work [ 411.148521][ T5801] Call Trace: [ 411.151830][ T5801] [ 411.154800][ T5801] dump_stack_lvl+0x16c/0x230 [ 411.159528][ T5801] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 411.165209][ T5801] ? show_regs_print_info+0x20/0x20 [ 411.170466][ T5801] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 411.176161][ T5801] sysfs_create_dir_ns+0x256/0x280 [ 411.181324][ T5801] ? sysfs_warn_dup+0xa0/0xa0 [ 411.186049][ T5801] ? preempt_schedule_thunk+0x1a/0x30 [ 411.191480][ T5801] kobject_add_internal+0x6b8/0xc70 [ 411.196729][ T5801] kobject_add+0x156/0x220 [ 411.201203][ T5801] ? kobject_init+0x1e0/0x1e0 [ 411.205932][ T5801] ? _raw_spin_unlock+0x3a/0x40 [ 411.210822][ T5801] ? get_device_parent+0x366/0x390 [ 411.215981][ T5801] device_add+0x408/0xc20 [ 411.220367][ T5801] hci_conn_add_sysfs+0xd5/0x1e0 [ 411.225372][ T5801] le_conn_complete_evt+0xf36/0x1500 [ 411.230714][ T5801] ? hci_event_packet+0x4a7/0x1210 [ 411.235895][ T5801] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 411.242184][ T5801] ? __copy_skb_header+0xa7/0x550 [ 411.247266][ T5801] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 411.252956][ T5801] ? skb_pull_data+0xfb/0x200 [ 411.257689][ T5801] hci_le_enh_conn_complete_evt+0x189/0x460 [ 411.263636][ T5801] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 411.270099][ T5801] ? hci_remote_host_features_evt+0x160/0x160 [ 411.276251][ T5801] hci_event_packet+0x795/0x1210 [ 411.281238][ T5801] ? bis_list+0x290/0x290 [ 411.285626][ T5801] ? kcov_remote_start+0x2b/0x7f0 [ 411.290694][ T5801] ? hci_send_to_monitor+0xd7/0x4f0 [ 411.295923][ T5801] hci_rx_work+0x43a/0xd80 [ 411.300375][ T5801] ? process_scheduled_works+0x957/0x15b0 [ 411.306123][ T5801] process_scheduled_works+0xa45/0x15b0 [ 411.311721][ T5801] ? assign_work+0x400/0x400 [ 411.316370][ T5801] ? assign_work+0x39e/0x400 [ 411.321046][ T5801] worker_thread+0xa55/0xfc0 [ 411.325701][ T5801] kthread+0x2fa/0x390 [ 411.329797][ T5801] ? pr_cont_work+0x560/0x560 [ 411.334506][ T5801] ? kthread_blkcg+0xd0/0xd0 [ 411.339132][ T5801] ret_from_fork+0x48/0x80 [ 411.343662][ T5801] ? kthread_blkcg+0xd0/0xd0 [ 411.348298][ T5801] ret_from_fork_asm+0x11/0x20 [ 411.353121][ T5801] [ 411.416076][ T6170] block nbd1: Possible stuck request ffff888021d00000: control (read@0,1024B). Runtime 300 seconds [ 411.427148][ T6170] block nbd1: Possible stuck request ffff888021d00200: control (read@1024,1024B). Runtime 300 seconds [ 411.438845][ T6170] block nbd1: Possible stuck request ffff888021d00400: control (read@2048,1024B). Runtime 300 seconds [ 411.450116][ T6170] block nbd1: Possible stuck request ffff888021d00600: control (read@3072,1024B). Runtime 300 seconds [ 411.461491][ T5801] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 411.475962][ T5801] Bluetooth: hci3: failed to register connection device [ 411.483819][ T5801] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 411.652573][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 411.767340][ T7637] loop2: detected capacity change from 0 to 1024 [ 411.774613][ T7637] EXT4-fs: Ignoring removed bh option [ 411.780698][ T7637] EXT4-fs: Ignoring removed nobh option [ 411.791828][ T7637] EXT4-fs: Ignoring removed bh option [ 411.811710][ T7637] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 412.130638][ T7637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.329850][ T7644] tipc: Enabling of bearer rejected, already enabled [ 413.265570][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 413.711714][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 415.274752][ T7646] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.391: Allocating blocks 497-513 which overlap fs metadata [ 415.521051][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 415.545813][ T7646] EXT4-fs (loop2): pa ffff888078591570: logic 256, phys. 385, len 8 [ 415.553949][ T7646] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 415.785511][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 415.878914][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.559693][ T7653] nbd15: detected capacity change from 0 to 8589934655 [ 416.629657][ T7652] loop0: detected capacity change from 0 to 8192 [ 416.811587][ T7655] loop3: detected capacity change from 0 to 8192 [ 418.271025][ T5801] block nbd15: Receive control failed (result -104) [ 419.266052][ T6170] block nbd11: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 210 seconds [ 419.277547][ T6170] block nbd11: Possible stuck request ffff8880224e8200: control (read@1024,1024B). Runtime 210 seconds [ 419.512206][ T6170] block nbd11: Possible stuck request ffff8880224e8400: control (read@2048,1024B). Runtime 210 seconds [ 419.523935][ T6170] block nbd11: Possible stuck request ffff8880224e8600: control (read@3072,1024B). Runtime 210 seconds [ 421.886216][ T24] block nbd2: Possible stuck request ffff888021d38000: control (read@0,1024B). Runtime 300 seconds [ 421.898792][ T24] block nbd2: Possible stuck request ffff888021d38200: control (read@1024,1024B). Runtime 300 seconds [ 421.909914][ T24] block nbd2: Possible stuck request ffff888021d38400: control (read@2048,1024B). Runtime 300 seconds [ 421.921084][ T24] block nbd2: Possible stuck request ffff888021d38600: control (read@3072,1024B). Runtime 300 seconds [ 422.583949][ T5801] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 422.840793][ T7679] tipc: Enabling of bearer rejected, already enabled [ 423.092567][ T7680] tipc: Enabling of bearer rejected, already enabled [ 425.145564][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 426.540245][ T95] block nbd9: Possible stuck request ffff888021fe8000: control (read@0,4096B). Runtime 240 seconds [ 426.555485][ T6170] block nbd4: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 270 seconds [ 426.718383][ T5801] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 427.164539][ T7682] tipc: Enabling of bearer rejected, already enabled [ 427.392436][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 428.706452][ T6170] block nbd5: Possible stuck request ffff888021e48000: control (read@0,4096B). Runtime 270 seconds [ 428.755400][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 428.837703][ T7690] tipc: Enabling of bearer rejected, already enabled [ 429.582949][ T24] block nbd10: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 240 seconds [ 429.622189][ T24] block nbd10: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 240 seconds [ 429.633505][ T24] block nbd10: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 240 seconds [ 429.644611][ T24] block nbd10: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 240 seconds [ 429.853475][ T50] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 430.374704][ T7694] loop0: detected capacity change from 0 to 8192 [ 430.886677][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 430.916469][ T6170] block nbd3: Possible stuck request ffff888021da0000: control (read@0,4096B). Runtime 300 seconds [ 432.360451][ T95] block nbd7: Possible stuck request ffff888021f58000: control (read@0,1024B). Runtime 270 seconds [ 432.401452][ T95] block nbd7: Possible stuck request ffff888021f58200: control (read@1024,1024B). Runtime 270 seconds [ 432.401584][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 432.412617][ T6170] block nbd0: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 330 seconds [ 432.422165][ T5800] CPU: 1 PID: 5800 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 432.433495][ T95] block nbd7: Possible stuck request ffff888021f58400: control (read@2048,1024B). Runtime 270 seconds [ 432.440389][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 432.440406][ T5800] Workqueue: hci2 hci_rx_work [ 432.451561][ T95] block nbd7: Possible stuck request ffff888021f58600: control (read@3072,1024B). Runtime 270 seconds [ 432.461496][ T5800] Call Trace: [ 432.461511][ T5800] [ 432.461522][ T5800] dump_stack_lvl+0x16c/0x230 [ 432.488185][ T5800] ? show_regs_print_info+0x20/0x20 [ 432.493421][ T5800] ? load_image+0x3b0/0x3b0 [ 432.497960][ T5800] sysfs_create_dir_ns+0x256/0x280 [ 432.503105][ T5800] ? hci_rx_work+0x43a/0xd80 [ 432.507724][ T5800] ? sysfs_warn_dup+0xa0/0xa0 [ 432.512440][ T5800] ? do_raw_spin_unlock+0x121/0x230 [ 432.517672][ T5800] kobject_add_internal+0x6b8/0xc70 [ 432.522904][ T5800] kobject_add+0x156/0x220 [ 432.527359][ T5800] ? __rwlock_init+0x150/0x150 [ 432.532157][ T5800] ? kobject_init+0x1e0/0x1e0 [ 432.536889][ T5800] ? _raw_spin_unlock+0x28/0x40 [ 432.541763][ T5800] ? get_device_parent+0x366/0x390 [ 432.546908][ T5800] device_add+0x408/0xc20 [ 432.551268][ T5800] hci_conn_add_sysfs+0xd5/0x1e0 [ 432.556249][ T5800] le_conn_complete_evt+0xf36/0x1500 [ 432.561567][ T5800] ? hci_event_packet+0x4a7/0x1210 [ 432.567758][ T5800] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 432.574026][ T5800] ? __copy_skb_header+0xa7/0x550 [ 432.579082][ T5800] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 432.584747][ T5800] ? skb_pull_data+0xfb/0x200 [ 432.589480][ T5800] hci_le_enh_conn_complete_evt+0x189/0x460 [ 432.595410][ T5800] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 432.601851][ T5800] ? hci_remote_host_features_evt+0x160/0x160 [ 432.607968][ T5800] hci_event_packet+0x795/0x1210 [ 432.613000][ T5800] ? bis_list+0x290/0x290 [ 432.617381][ T5800] ? lockdep_hardirqs_on+0x98/0x150 [ 432.622624][ T5800] ? hci_send_to_monitor+0xd7/0x4f0 [ 432.627858][ T5800] hci_rx_work+0x43a/0xd80 [ 432.632322][ T5800] ? process_scheduled_works+0x957/0x15b0 [ 432.638076][ T5800] process_scheduled_works+0xa45/0x15b0 [ 432.643672][ T5800] ? assign_work+0x400/0x400 [ 432.648297][ T5800] ? assign_work+0x39e/0x400 [ 432.652925][ T5800] worker_thread+0xa55/0xfc0 [ 432.657561][ T5800] kthread+0x2fa/0x390 [ 432.661664][ T5800] ? pr_cont_work+0x560/0x560 [ 432.666375][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 432.671044][ T5800] ret_from_fork+0x48/0x80 [ 432.675562][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 432.680181][ T5800] ret_from_fork_asm+0x11/0x20 [ 432.684985][ T5800] [ 432.709740][ T5800] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 432.728798][ T5800] Bluetooth: hci2: failed to register connection device [ 432.738239][ T5800] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 432.738347][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 433.798214][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 433.815432][ T5800] CPU: 0 PID: 5800 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 433.823059][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 433.833158][ T5800] Workqueue: hci2 hci_rx_work [ 433.837860][ T5800] Call Trace: [ 433.841149][ T5800] [ 433.844086][ T5800] dump_stack_lvl+0x16c/0x230 [ 433.848783][ T5800] ? show_regs_print_info+0x20/0x20 [ 433.853997][ T5800] ? load_image+0x3b0/0x3b0 [ 433.858526][ T5800] sysfs_create_dir_ns+0x256/0x280 [ 433.863662][ T5800] ? hci_rx_work+0x43a/0xd80 [ 433.868275][ T5800] ? sysfs_warn_dup+0xa0/0xa0 [ 433.872972][ T5800] ? do_raw_spin_unlock+0x121/0x230 [ 433.878190][ T5800] kobject_add_internal+0x6b8/0xc70 [ 433.883411][ T5800] kobject_add+0x156/0x220 [ 433.887854][ T5800] ? __rwlock_init+0x150/0x150 [ 433.892639][ T5800] ? kobject_init+0x1e0/0x1e0 [ 433.897336][ T5800] ? _raw_spin_unlock+0x28/0x40 [ 433.902200][ T5800] ? get_device_parent+0x366/0x390 [ 433.907334][ T5800] device_add+0x408/0xc20 [ 433.911711][ T5800] hci_conn_add_sysfs+0xd5/0x1e0 [ 433.916681][ T5800] le_conn_complete_evt+0xf36/0x1500 [ 433.921985][ T5800] ? hci_event_packet+0x4a7/0x1210 [ 433.927130][ T5800] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 433.933385][ T5800] ? __copy_skb_header+0xa7/0x550 [ 433.938465][ T5800] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 433.944120][ T5800] ? skb_pull_data+0xfb/0x200 [ 433.948825][ T5800] hci_le_enh_conn_complete_evt+0x189/0x460 [ 433.955377][ T5800] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 433.961843][ T5800] ? hci_remote_host_features_evt+0x160/0x160 [ 433.967935][ T5800] hci_event_packet+0x795/0x1210 [ 433.972904][ T5800] ? bis_list+0x290/0x290 [ 433.977264][ T5800] ? lockdep_hardirqs_on+0x98/0x150 [ 433.982487][ T5800] ? hci_send_to_monitor+0xd7/0x4f0 [ 433.987706][ T5800] hci_rx_work+0x43a/0xd80 [ 433.992153][ T5800] ? process_scheduled_works+0x957/0x15b0 [ 433.997908][ T5800] process_scheduled_works+0xa45/0x15b0 [ 434.003517][ T5800] ? assign_work+0x400/0x400 [ 434.008144][ T5800] ? assign_work+0x39e/0x400 [ 434.012760][ T5800] worker_thread+0xa55/0xfc0 [ 434.017395][ T5800] kthread+0x2fa/0x390 [ 434.021483][ T5800] ? pr_cont_work+0x560/0x560 [ 434.026183][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 434.030790][ T5800] ret_from_fork+0x48/0x80 [ 434.035219][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 434.039832][ T5800] ret_from_fork_asm+0x11/0x20 [ 434.044643][ T5800] [ 434.052077][ T5800] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 434.066520][ T5800] Bluetooth: hci2: failed to register connection device [ 434.074209][ T5800] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 434.254701][ T7711] tipc: Enabling of bearer rejected, already enabled [ 434.825423][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 435.881281][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 435.891151][ T50] CPU: 0 PID: 50 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 435.898568][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.908667][ T50] Workqueue: hci3 hci_rx_work [ 435.913414][ T50] Call Trace: [ 435.916722][ T50] [ 435.919689][ T50] dump_stack_lvl+0x16c/0x230 [ 435.924418][ T50] ? show_regs_print_info+0x20/0x20 [ 435.929664][ T50] ? load_image+0x3b0/0x3b0 [ 435.934228][ T50] sysfs_create_dir_ns+0x256/0x280 [ 435.939413][ T50] ? sysfs_warn_dup+0xa0/0xa0 [ 435.944182][ T50] ? preempt_schedule_thunk+0x1a/0x30 [ 435.949624][ T50] kobject_add_internal+0x6b8/0xc70 [ 435.954879][ T50] kobject_add+0x156/0x220 [ 435.959357][ T50] ? kobject_init+0x1e0/0x1e0 [ 435.964085][ T50] ? _raw_spin_unlock+0x3a/0x40 [ 435.968985][ T50] ? get_device_parent+0x366/0x390 [ 435.974151][ T50] device_add+0x408/0xc20 [ 435.978546][ T50] hci_conn_add_sysfs+0xd5/0x1e0 [ 435.983541][ T50] le_conn_complete_evt+0xf36/0x1500 [ 435.988888][ T50] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 435.995182][ T50] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 436.000859][ T50] ? lockdep_hardirqs_on+0x98/0x150 [ 436.006164][ T50] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 436.011855][ T50] hci_le_enh_conn_complete_evt+0x189/0x460 [ 436.017815][ T50] ? hci_remote_host_features_evt+0x160/0x160 [ 436.023929][ T50] hci_event_packet+0x795/0x1210 [ 436.028930][ T50] ? bis_list+0x290/0x290 [ 436.033314][ T50] ? kcov_remote_start+0x2b/0x7f0 [ 436.038380][ T50] ? hci_send_to_monitor+0xd7/0x4f0 [ 436.043628][ T50] hci_rx_work+0x43a/0xd80 [ 436.048102][ T50] ? process_scheduled_works+0x957/0x15b0 [ 436.053869][ T50] process_scheduled_works+0xa45/0x15b0 [ 436.059495][ T50] ? assign_work+0x400/0x400 [ 436.064134][ T50] ? assign_work+0x39e/0x400 [ 436.068780][ T50] worker_thread+0xa55/0xfc0 [ 436.073446][ T50] kthread+0x2fa/0x390 [ 436.077551][ T50] ? pr_cont_work+0x560/0x560 [ 436.082269][ T50] ? kthread_blkcg+0xd0/0xd0 [ 436.086894][ T50] ret_from_fork+0x48/0x80 [ 436.091348][ T50] ? kthread_blkcg+0xd0/0xd0 [ 436.095977][ T50] ret_from_fork_asm+0x11/0x20 [ 436.100801][ T50] [ 436.465371][ T50] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 436.479596][ T50] Bluetooth: hci3: failed to register connection device [ 436.487333][ T50] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 436.574237][ T7723] tipc: Enabling of bearer rejected, already enabled [ 436.924205][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 436.935412][ T50] CPU: 1 PID: 50 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 436.942842][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.952944][ T50] Workqueue: hci3 hci_rx_work [ 436.957674][ T50] Call Trace: [ 436.960990][ T50] [ 436.963959][ T50] dump_stack_lvl+0x16c/0x230 [ 436.968691][ T50] ? show_regs_print_info+0x20/0x20 [ 436.973938][ T50] ? load_image+0x3b0/0x3b0 [ 436.978500][ T50] sysfs_create_dir_ns+0x256/0x280 [ 436.983672][ T50] ? sysfs_warn_dup+0xa0/0xa0 [ 436.988396][ T50] ? preempt_schedule_thunk+0x1a/0x30 [ 436.993830][ T50] kobject_add_internal+0x6b8/0xc70 [ 436.999098][ T50] kobject_add+0x156/0x220 [ 437.003586][ T50] ? kobject_init+0x1e0/0x1e0 [ 437.008319][ T50] ? _raw_spin_unlock+0x3a/0x40 [ 437.013218][ T50] ? get_device_parent+0x366/0x390 [ 437.018382][ T50] device_add+0x408/0xc20 [ 437.022855][ T50] hci_conn_add_sysfs+0xd5/0x1e0 [ 437.027884][ T50] le_conn_complete_evt+0xf36/0x1500 [ 437.033231][ T50] ? hci_event_packet+0x4a7/0x1210 [ 437.038502][ T50] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 437.045230][ T50] ? __copy_skb_header+0xa7/0x550 [ 437.050336][ T50] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 437.056034][ T50] ? skb_pull_data+0xfb/0x200 [ 437.060940][ T50] hci_le_enh_conn_complete_evt+0x189/0x460 [ 437.066889][ T50] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 437.073357][ T50] ? hci_remote_host_features_evt+0x160/0x160 [ 437.079463][ T50] hci_event_packet+0x795/0x1210 [ 437.084471][ T50] ? bis_list+0x290/0x290 [ 437.088870][ T50] ? kcov_remote_start+0x2b/0x7f0 [ 437.093944][ T50] ? hci_send_to_monitor+0xd7/0x4f0 [ 437.099198][ T50] hci_rx_work+0x43a/0xd80 [ 437.103671][ T50] ? process_scheduled_works+0x957/0x15b0 [ 437.109438][ T50] process_scheduled_works+0xa45/0x15b0 [ 437.115108][ T50] ? assign_work+0x400/0x400 [ 437.119746][ T50] ? assign_work+0x39e/0x400 [ 437.124384][ T50] worker_thread+0xa55/0xfc0 [ 437.129048][ T50] kthread+0x2fa/0x390 [ 437.133150][ T50] ? pr_cont_work+0x560/0x560 [ 437.137872][ T50] ? kthread_blkcg+0xd0/0xd0 [ 437.142501][ T50] ret_from_fork+0x48/0x80 [ 437.146954][ T50] ? kthread_blkcg+0xd0/0xd0 [ 437.151580][ T50] ret_from_fork_asm+0x11/0x20 [ 437.156401][ T50] [ 437.162263][ T50] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 437.176978][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 437.202752][ T50] Bluetooth: hci3: failed to register connection device [ 437.213484][ T50] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 437.874361][ T95] block nbd8: Possible stuck request ffff888021f70000: control (read@0,4096B). Runtime 270 seconds [ 437.901891][ T7728] tipc: Enabling of bearer rejected, already enabled [ 438.513731][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 438.755627][ T7737] tipc: Enabling of bearer rejected, already enabled [ 439.238541][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 440.440143][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.446602][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.585526][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 441.730272][ T95] block nbd1: Possible stuck request ffff888021d00000: control (read@0,1024B). Runtime 330 seconds [ 441.741132][ T95] block nbd1: Possible stuck request ffff888021d00200: control (read@1024,1024B). Runtime 330 seconds [ 441.752974][ T95] block nbd1: Possible stuck request ffff888021d00400: control (read@2048,1024B). Runtime 330 seconds [ 441.764269][ T95] block nbd1: Possible stuck request ffff888021d00600: control (read@3072,1024B). Runtime 330 seconds [ 442.361948][ T7746] tipc: Enabling of bearer rejected, already enabled [ 442.668212][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 443.580528][ T50] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 445.408308][ T5800] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 446.587073][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 446.826620][ T24] block nbd15: Possible stuck request ffff888022638000: control (read@0,1024B). Runtime 30 seconds [ 446.837711][ T24] block nbd15: Possible stuck request ffff888022638200: control (read@1024,1024B). Runtime 30 seconds [ 446.848955][ T24] block nbd15: Possible stuck request ffff888022638400: control (read@2048,1024B). Runtime 30 seconds [ 446.860109][ T24] block nbd15: Possible stuck request ffff888022638600: control (read@3072,1024B). Runtime 30 seconds [ 447.002090][ T7751] tipc: Enabling of bearer rejected, already enabled [ 447.228227][ T7772] tipc: Enabling of bearer rejected, already enabled [ 447.465434][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 447.485035][ T7773] tipc: Enabling of bearer rejected, already enabled [ 448.154003][ T7778] tipc: Enabling of bearer rejected, already enabled [ 448.665676][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 449.395864][ T95] block nbd11: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 240 seconds [ 449.515518][ T95] block nbd11: Possible stuck request ffff8880224e8200: control (read@1024,1024B). Runtime 240 seconds [ 449.530710][ T95] block nbd11: Possible stuck request ffff8880224e8400: control (read@2048,1024B). Runtime 240 seconds [ 449.548544][ T95] block nbd11: Possible stuck request ffff8880224e8600: control (read@3072,1024B). Runtime 240 seconds [ 449.559741][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 450.449273][ T7787] loop3: detected capacity change from 0 to 8 [ 452.057256][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 452.081996][ T50] CPU: 1 PID: 50 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 452.089546][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.099733][ T50] Workqueue: hci3 hci_rx_work [ 452.104469][ T50] Call Trace: [ 452.107781][ T50] [ 452.110746][ T50] dump_stack_lvl+0x16c/0x230 [ 452.115477][ T50] ? show_regs_print_info+0x20/0x20 [ 452.120720][ T50] ? load_image+0x3b0/0x3b0 [ 452.125284][ T50] sysfs_create_dir_ns+0x256/0x280 [ 452.130445][ T50] ? hci_rx_work+0x43a/0xd80 [ 452.135085][ T50] ? sysfs_warn_dup+0xa0/0xa0 [ 452.139814][ T50] ? do_raw_spin_unlock+0x121/0x230 [ 452.145065][ T50] kobject_add_internal+0x6b8/0xc70 [ 452.150309][ T50] kobject_add+0x156/0x220 [ 452.154810][ T50] ? __rwlock_init+0x150/0x150 [ 452.159619][ T50] ? kobject_init+0x1e0/0x1e0 [ 452.164350][ T50] ? _raw_spin_unlock+0x28/0x40 [ 452.169245][ T50] ? get_device_parent+0x366/0x390 [ 452.174407][ T50] device_add+0x408/0xc20 [ 452.178790][ T50] hci_conn_add_sysfs+0xd5/0x1e0 [ 452.183780][ T50] le_conn_complete_evt+0xf36/0x1500 [ 452.189114][ T50] ? hci_event_packet+0x4a7/0x1210 [ 452.194291][ T50] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 452.200578][ T50] ? __copy_skb_header+0xa7/0x550 [ 452.205655][ T50] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 452.211341][ T50] ? skb_pull_data+0xfb/0x200 [ 452.216071][ T50] hci_le_enh_conn_complete_evt+0x189/0x460 [ 452.222015][ T50] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 452.228474][ T50] ? hci_remote_host_features_evt+0x160/0x160 [ 452.234580][ T50] hci_event_packet+0x795/0x1210 [ 452.239589][ T50] ? bis_list+0x290/0x290 [ 452.243984][ T50] ? lockdep_hardirqs_on+0x98/0x150 [ 452.249236][ T50] ? hci_send_to_monitor+0xd7/0x4f0 [ 452.254481][ T50] hci_rx_work+0x43a/0xd80 [ 452.258977][ T50] ? process_scheduled_works+0x957/0x15b0 [ 452.264734][ T50] process_scheduled_works+0xa45/0x15b0 [ 452.270359][ T50] ? assign_work+0x400/0x400 [ 452.275343][ T50] ? assign_work+0x39e/0x400 [ 452.280074][ T50] worker_thread+0xa55/0xfc0 [ 452.284735][ T50] kthread+0x2fa/0x390 [ 452.288876][ T50] ? pr_cont_work+0x560/0x560 [ 452.293644][ T50] ? kthread_blkcg+0xd0/0xd0 [ 452.298274][ T50] ret_from_fork+0x48/0x80 [ 452.303079][ T50] ? kthread_blkcg+0xd0/0xd0 [ 452.307792][ T50] ret_from_fork_asm+0x11/0x20 [ 452.312621][ T50] [ 452.320518][ T7787] SQUASHFS error: xz decompression failed, data probably corrupt [ 452.345347][ T7787] SQUASHFS error: Failed to read block 0x108: -5 [ 452.351845][ T7787] SQUASHFS error: Unable to read metadata cache entry [106] [ 452.365313][ T7787] SQUASHFS error: Unable to read inode 0x11f [ 452.377724][ T50] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 452.390947][ T24] block nbd2: Possible stuck request ffff888021d38000: control (read@0,1024B). Runtime 330 seconds [ 452.392733][ T50] Bluetooth: hci3: failed to register connection device [ 452.410233][ T24] block nbd2: Possible stuck request ffff888021d38200: control (read@1024,1024B). Runtime 330 seconds [ 452.411641][ T50] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 452.424455][ T24] block nbd2: Possible stuck request ffff888021d38400: control (read@2048,1024B). Runtime 330 seconds [ 452.442782][ T24] block nbd2: Possible stuck request ffff888021d38600: control (read@3072,1024B). Runtime 330 seconds [ 452.855975][ T7794] loop2: detected capacity change from 0 to 8192 [ 454.565452][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 454.677870][ T7806] loop1: detected capacity change from 0 to 8 [ 455.048929][ T7811] loop3: detected capacity change from 0 to 8 [ 455.085125][ T7810] tipc: Enabling of bearer rejected, already enabled [ 455.143563][ T7806] SQUASHFS error: xz decompression failed, data probably corrupt [ 455.277765][ T7806] SQUASHFS error: Failed to read block 0x108: -5 [ 455.325045][ T7806] SQUASHFS error: Unable to read metadata cache entry [106] [ 455.875488][ T7806] SQUASHFS error: Unable to read inode 0x11f [ 455.914239][ T7811] SQUASHFS error: xz decompression failed, data probably corrupt [ 455.982357][ T7811] SQUASHFS error: Failed to read block 0x108: -5 [ 456.075473][ T7811] SQUASHFS error: Unable to read metadata cache entry [106] [ 456.165478][ T7811] SQUASHFS error: Unable to read inode 0x11f [ 456.699525][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 457.067293][ T95] block nbd9: Possible stuck request ffff888021fe8000: control (read@0,4096B). Runtime 270 seconds [ 457.079738][ T95] block nbd4: Possible stuck request ffff888021e10000: control (read@0,4096B). Runtime 300 seconds [ 458.613921][ T5800] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 459.022766][ T7813] block nbd5: Possible stuck request ffff888021e48000: control (read@0,4096B). Runtime 300 seconds [ 459.635810][ T24] block nbd10: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 270 seconds [ 459.646718][ T24] block nbd10: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 270 seconds [ 459.657858][ T24] block nbd10: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 270 seconds [ 459.825487][ T24] block nbd10: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 270 seconds [ 460.852791][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 461.244612][ T7836] tipc: Enabling of bearer rejected, already enabled [ 461.314751][ T7833] tipc: Enabling of bearer rejected, already enabled [ 461.585562][ T7813] block nbd3: Possible stuck request ffff888021da0000: control (read@0,4096B). Runtime 330 seconds [ 461.975340][ T7842] tipc: Enabling of bearer rejected, already enabled [ 462.262314][ T7843] loop1: detected capacity change from 0 to 8 [ 462.813918][ T7843] SQUASHFS error: xz decompression failed, data probably corrupt [ 462.826988][ T6170] block nbd0: Possible stuck request ffff888021cd0000: control (read@0,4096B). Runtime 360 seconds [ 462.838217][ T7813] block nbd7: Possible stuck request ffff888021f58000: control (read@0,1024B). Runtime 300 seconds [ 462.849065][ T7813] block nbd7: Possible stuck request ffff888021f58200: control (read@1024,1024B). Runtime 300 seconds [ 462.860145][ T7813] block nbd7: Possible stuck request ffff888021f58400: control (read@2048,1024B). Runtime 300 seconds [ 462.871231][ T7813] block nbd7: Possible stuck request ffff888021f58600: control (read@3072,1024B). Runtime 300 seconds [ 462.985956][ T7843] SQUASHFS error: Failed to read block 0x108: -5 [ 463.001406][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 463.024216][ T7843] SQUASHFS error: Unable to read metadata cache entry [106] [ 463.072434][ T7843] SQUASHFS error: Unable to read inode 0x11f [ 466.984323][ T7862] tipc: Enabled bearer , priority 0 [ 467.013697][ T7862] syzkaller0: entered promiscuous mode [ 467.033179][ T7862] syzkaller0: entered allmulticast mode [ 467.070159][ T7861] tipc: Resetting bearer [ 467.103010][ T7861] tipc: Disabling bearer [ 468.165400][ T7813] block nbd8: Possible stuck request ffff888021f70000: control (read@0,4096B). Runtime 300 seconds [ 468.307543][ T7866] tipc: Enabling of bearer rejected, already enabled [ 469.980153][ T7882] loop0: detected capacity change from 0 to 8 [ 470.636590][ T7882] SQUASHFS error: xz decompression failed, data probably corrupt [ 470.659428][ T7882] SQUASHFS error: Failed to read block 0x108: -5 [ 470.708925][ T7882] SQUASHFS error: Unable to read metadata cache entry [106] [ 470.755708][ T7882] SQUASHFS error: Unable to read inode 0x11f [ 472.031731][ T7813] block nbd1: Possible stuck request ffff888021d00000: control (read@0,1024B). Runtime 360 seconds [ 472.042573][ T7813] block nbd1: Possible stuck request ffff888021d00200: control (read@1024,1024B). Runtime 360 seconds [ 472.054491][ T7813] block nbd1: Possible stuck request ffff888021d00400: control (read@2048,1024B). Runtime 360 seconds [ 472.065874][ T7813] block nbd1: Possible stuck request ffff888021d00600: control (read@3072,1024B). Runtime 360 seconds [ 473.070375][ T29] INFO: task udevd:5796 blocked for more than 143 seconds. [ 473.093918][ T29] Not tainted syzkaller #0 [ 473.099051][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.109259][ T7888] loop1: detected capacity change from 0 to 8 [ 473.115472][ T29] task:udevd state:D stack:25712 pid:5796 ppid:5159 flags:0x00004006 [ 473.124752][ T29] Call Trace: [ 473.132506][ T29] [ 473.143641][ T29] __schedule+0x14d2/0x44d0 [ 473.148353][ T29] ? asan.module_dtor+0x20/0x20 [ 473.153276][ T29] ? mark_lock+0x94/0x320 [ 473.159040][ T29] ? lock_chain_count+0x20/0x20 [ 473.171277][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 473.189359][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 473.198815][ T29] schedule+0xbd/0x170 [ 473.203038][ T29] io_schedule+0x80/0xd0 [ 473.207764][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 473.223009][ T29] ? folio_wait_bit+0x30/0x30 [ 473.238843][ T29] ? _compound_head+0x120/0x120 [ 473.238900][ T29] ? filemap_add_folio+0x192/0x3c0 [ 473.238933][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 473.238949][ T29] ? blkdev_writepage+0x30/0x30 [ 473.238970][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 473.238987][ T29] ? blkdev_writepage+0x30/0x30 [ 473.239012][ T29] read_part_sector+0xd2/0x350 [ 473.239037][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 473.239062][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 473.239085][ T29] ? put_partition+0x350/0x350 [ 473.239109][ T29] ? alloc_pages+0x4dc/0x740 [ 473.239137][ T29] bdev_disk_changed+0x73a/0x1410 [ 473.239175][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 473.239201][ T29] ? iput+0x347/0x920 [ 473.239219][ T29] blkdev_get_whole+0x30d/0x390 [ 473.239238][ T29] blkdev_get_by_dev+0x279/0x600 [ 473.239258][ T29] blkdev_open+0x152/0x360 [ 473.239275][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 473.239292][ T29] do_dentry_open+0x8c6/0x1500 [ 473.239319][ T29] path_openat+0x274b/0x3190 [ 473.239354][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 473.239381][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.239407][ T29] ? verify_lock_unused+0x140/0x140 [ 473.240597][ T29] ? do_filp_open+0x3d0/0x3d0 [ 473.240627][ T29] ? __virt_addr_valid+0x18c/0x540 [ 473.240656][ T29] do_filp_open+0x1c5/0x3d0 [ 473.240681][ T29] ? vfs_tmpfile+0x490/0x490 [ 473.240721][ T29] ? _raw_spin_unlock+0x28/0x40 [ 473.240736][ T29] ? alloc_fd+0x58f/0x630 [ 473.240762][ T29] do_sys_openat2+0x12c/0x1c0 [ 473.240783][ T29] ? do_sys_open+0xe0/0xe0 [ 473.240801][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 473.240821][ T29] ? lock_chain_count+0x20/0x20 [ 473.240841][ T29] __x64_sys_openat+0x139/0x160 [ 473.240864][ T29] do_syscall_64+0x55/0xb0 [ 473.240883][ T29] ? clear_bhb_loop+0x40/0x90 [ 473.240899][ T29] ? clear_bhb_loop+0x40/0x90 [ 473.240922][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.240938][ T29] RIP: 0033:0x7f847bea7407 [ 473.240962][ T29] RSP: 002b:00007ffc4e7a95d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 473.240980][ T29] RAX: ffffffffffffffda RBX: 00007f847c595880 RCX: 00007f847bea7407 [ 473.240992][ T29] RDX: 00000000000a0800 RSI: 0000559f5f7a4f80 RDI: ffffffffffffff9c [ 473.241003][ T29] RBP: 0000559f5f78b910 R08: 0000000000000000 R09: 0000000000000000 [ 473.241012][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559f5f7a3e00 [ 473.241023][ T29] R13: 0000559f5f7a3410 R14: 0000000000000000 R15: 0000559f5f7a3e00 [ 473.241044][ T29] [ 473.241873][ T29] INFO: task udevd:5802 blocked for more than 144 seconds. [ 473.241958][ T29] Not tainted syzkaller #0 [ 473.242037][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.242138][ T29] task:udevd state:D stack:25840 pid:5802 ppid:5159 flags:0x00004006 [ 473.242384][ T29] Call Trace: [ 473.242393][ T29] [ 473.242403][ T29] __schedule+0x14d2/0x44d0 [ 473.242441][ T29] ? asan.module_dtor+0x20/0x20 [ 473.242465][ T29] ? mark_lock+0x94/0x320 [ 473.242488][ T29] ? lock_chain_count+0x20/0x20 [ 473.242503][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 473.242518][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 473.242535][ T29] schedule+0xbd/0x170 [ 473.242556][ T29] io_schedule+0x80/0xd0 [ 473.242578][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 473.242617][ T29] ? folio_wait_bit+0x30/0x30 [ 473.242642][ T29] ? _compound_head+0x120/0x120 [ 473.242667][ T29] ? filemap_add_folio+0x192/0x3c0 [ 473.242693][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 473.242709][ T29] ? blkdev_writepage+0x30/0x30 [ 473.242729][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 473.242752][ T29] ? blkdev_writepage+0x30/0x30 [ 473.242779][ T29] read_part_sector+0xd2/0x350 [ 473.243818][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 473.243931][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 473.243968][ T29] ? put_partition+0x350/0x350 [ 473.243994][ T29] ? alloc_pages+0x4dc/0x740 [ 473.244022][ T29] bdev_disk_changed+0x73a/0x1410 [ 473.244059][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 473.244085][ T29] ? iput+0x347/0x920 [ 473.244113][ T29] blkdev_get_whole+0x30d/0x390 [ 473.244132][ T29] blkdev_get_by_dev+0x279/0x600 [ 473.244157][ T29] blkdev_open+0x152/0x360 [ 473.244176][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 473.244193][ T29] do_dentry_open+0x8c6/0x1500 [ 473.244221][ T29] path_openat+0x274b/0x3190 [ 473.244256][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 473.244275][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.244292][ T29] ? verify_lock_unused+0x140/0x140 [ 473.244312][ T29] ? do_filp_open+0x3d0/0x3d0 [ 473.244339][ T29] ? __virt_addr_valid+0x18c/0x540 [ 473.244367][ T29] do_filp_open+0x1c5/0x3d0 [ 473.244393][ T29] ? vfs_tmpfile+0x490/0x490 [ 473.244432][ T29] ? _raw_spin_unlock+0x28/0x40 [ 473.244447][ T29] ? alloc_fd+0x58f/0x630 [ 473.244473][ T29] do_sys_openat2+0x12c/0x1c0 [ 473.244493][ T29] ? do_sys_open+0xe0/0xe0 [ 473.244512][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 473.244531][ T29] ? lock_chain_count+0x20/0x20 [ 473.244551][ T29] __x64_sys_openat+0x139/0x160 [ 473.244574][ T29] do_syscall_64+0x55/0xb0 [ 473.244593][ T29] ? clear_bhb_loop+0x40/0x90 [ 473.244610][ T29] ? clear_bhb_loop+0x40/0x90 [ 473.244627][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.244643][ T29] RIP: 0033:0x7f847bea7407 [ 473.244657][ T29] RSP: 002b:00007ffc4e7a95d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 473.244675][ T29] RAX: ffffffffffffffda RBX: 00007f847c595880 RCX: 00007f847bea7407 [ 473.244686][ T29] RDX: 00000000000a0800 RSI: 0000559f5f7a4a50 RDI: ffffffffffffff9c [ 473.244698][ T29] RBP: 0000559f5f78b910 R08: 0000000000000000 R09: 0000000000000000 [ 473.244707][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559f5f7ab270 [ 473.244717][ T29] R13: 0000559f5f7a3410 R14: 0000000000000000 R15: 0000559f5f7ab270 [ 473.244739][ T29] [ 473.244747][ T29] INFO: task udevd:5807 blocked for more than 144 seconds. [ 473.244757][ T29] Not tainted syzkaller #0 [ 473.244765][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.244771][ T29] task:udevd state:D stack:25480 pid:5807 ppid:5159 flags:0x00004006 [ 473.244796][ T29] Call Trace: [ 473.244801][ T29] [ 473.244810][ T29] __schedule+0x14d2/0x44d0 [ 473.244846][ T29] ? asan.module_dtor+0x20/0x20 [ 473.244869][ T29] ? mark_lock+0x94/0x320 [ 473.244893][ T29] ? lock_chain_count+0x20/0x20 [ 473.244907][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 473.244993][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 473.245018][ T29] schedule+0xbd/0x170 [ 473.254244][ T29] io_schedule+0x80/0xd0 [ 473.254277][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 473.254317][ T29] ? folio_wait_bit+0x30/0x30 [ 473.254342][ T29] ? _compound_head+0x120/0x120 [ 473.254366][ T29] ? filemap_add_folio+0x192/0x3c0 [ 473.254392][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 473.254407][ T29] ? blkdev_writepage+0x30/0x30 [ 473.254427][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 473.254443][ T29] ? blkdev_writepage+0x30/0x30 [ 473.254461][ T29] read_part_sector+0xd2/0x350 [ 473.254486][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 473.254510][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 473.254532][ T29] ? put_partition+0x350/0x350 [ 473.254555][ T29] ? alloc_pages+0x4dc/0x740 [ 473.254582][ T29] bdev_disk_changed+0x73a/0x1410 [ 473.254617][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 473.254643][ T29] ? iput+0x347/0x920 [ 473.254660][ T29] blkdev_get_whole+0x30d/0x390 [ 473.254679][ T29] blkdev_get_by_dev+0x279/0x600 [ 473.254699][ T29] blkdev_open+0x152/0x360 [ 473.254716][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 473.254733][ T29] do_dentry_open+0x8c6/0x1500 [ 473.254760][ T29] path_openat+0x274b/0x3190 [ 473.254793][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 473.254813][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.254829][ T29] ? verify_lock_unused+0x140/0x140 [ 473.254849][ T29] ? do_filp_open+0x3d0/0x3d0 [ 473.254874][ T29] ? __virt_addr_valid+0x18c/0x540 [ 473.254902][ T29] do_filp_open+0x1c5/0x3d0 [ 473.254938][ T29] ? vfs_tmpfile+0x490/0x490 [ 473.254977][ T29] ? _raw_spin_unlock+0x28/0x40 [ 473.254992][ T29] ? alloc_fd+0x58f/0x630 [ 473.255017][ T29] do_sys_openat2+0x12c/0x1c0 [ 473.255037][ T29] ? do_sys_open+0xe0/0xe0 [ 473.255055][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 473.255075][ T29] ? lock_chain_count+0x20/0x20 [ 473.255095][ T29] __x64_sys_openat+0x139/0x160 [ 473.255117][ T29] do_syscall_64+0x55/0xb0 [ 473.255136][ T29] ? clear_bhb_loop+0x40/0x90 [ 473.255152][ T29] ? clear_bhb_loop+0x40/0x90 [ 473.255171][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.255186][ T29] RIP: 0033:0x7f847bea7407 [ 473.255200][ T29] RSP: 002b:00007ffc4e7a95d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 473.255265][ T29] RAX: ffffffffffffffda RBX: 00007f847c595880 RCX: 00007f847bea7407 [ 473.255283][ T29] RDX: 00000000000a0800 RSI: 0000559f5f79caa0 RDI: ffffffffffffff9c [ 473.255298][ T29] RBP: 0000559f5f78b910 R08: 0000000000000000 R09: 0000000000000000 [ 473.259193][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559f5f7ab440 [ 473.259213][ T29] R13: 0000559f5f7a3410 R14: 0000000000000000 R15: 0000559f5f7ab440 [ 473.259247][ T29] [ 473.259275][ T29] INFO: task udevd:6028 blocked for more than 144 seconds. [ 473.259290][ T29] Not tainted syzkaller #0 [ 473.259301][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.259310][ T29] task:udevd state:D stack:25800 pid:6028 ppid:5159 flags:0x00004006 [ 473.259348][ T29] Call Trace: [ 473.259356][ T29] [ 473.259369][ T29] __schedule+0x14d2/0x44d0 [ 473.259427][ T29] ? asan.module_dtor+0x20/0x20 [ 473.259461][ T29] ? mark_lock+0x94/0x320 [ 473.259496][ T29] ? lock_chain_count+0x20/0x20 [ 473.259517][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 473.259539][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 473.259565][ T29] schedule+0xbd/0x170 [ 473.259594][ T29] io_schedule+0x80/0xd0 [ 473.259626][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 473.259681][ T29] ? folio_wait_bit+0x30/0x30 [ 473.259715][ T29] ? _compound_head+0x120/0x120 [ 473.259749][ T29] ? filemap_add_folio+0x192/0x3c0 [ 473.259783][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 473.259806][ T29] ? blkdev_writepage+0x30/0x30 [ 473.259834][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 473.259856][ T29] ? blkdev_writepage+0x30/0x30 [ 473.259884][ T29] read_part_sector+0xd2/0x350 [ 473.259926][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 473.259960][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 473.259993][ T29] ? put_partition+0x350/0x350 [ 473.260025][ T29] ? alloc_pages+0x4dc/0x740 [ 473.260065][ T29] bdev_disk_changed+0x73a/0x1410 [ 473.260117][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 473.260152][ T29] ? iput+0x347/0x920 [ 473.260178][ T29] blkdev_get_whole+0x30d/0x390 [ 473.260204][ T29] blkdev_get_by_dev+0x279/0x600 [ 473.260234][ T29] blkdev_open+0x152/0x360 [ 473.260258][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 473.260282][ T29] do_dentry_open+0x8c6/0x1500 [ 473.260321][ T29] path_openat+0x274b/0x3190 [ 473.260370][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 473.260397][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.260421][ T29] ? verify_lock_unused+0x140/0x140 [ 473.260449][ T29] ? do_filp_open+0x3d0/0x3d0 [ 473.260485][ T29] ? __virt_addr_valid+0x18c/0x540 [ 473.260524][ T29] do_filp_open+0x1c5/0x3d0 [ 473.260559][ T29] ? vfs_tmpfile+0x490/0x490 [ 473.260616][ T29] ? _raw_spin_unlock+0x28/0x40 [ 473.260636][ T29] ? alloc_fd+0x58f/0x630 [ 473.260672][ T29] do_sys_openat2+0x12c/0x1c0 [ 473.260701][ T29] ? do_sys_open+0xe0/0xe0 [ 473.260726][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 473.260754][ T29] ? lock_chain_count+0x20/0x20 [ 473.260783][ T29] __x64_sys_openat+0x139/0x160 [ 473.260814][ T29] do_syscall_64+0x55/0xb0 [ 473.260840][ T29] ? clear_bhb_loop+0x40/0x90 [ 473.260862][ T29] ? clear_bhb_loop+0x40/0x90 [ 473.260886][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.260908][ T29] RIP: 0033:0x7f847bea7407 [ 473.260933][ T29] RSP: 002b:00007ffc4e7a95d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 473.260956][ T29] RAX: ffffffffffffffda RBX: 00007f847c595880 RCX: 00007f847bea7407 [ 473.260971][ T29] RDX: 00000000000a0800 RSI: 0000559f5f78c520 RDI: ffffffffffffff9c [ 473.260987][ T29] RBP: 0000559f5f78b910 R08: 0000000000000000 R09: 0000000000000000 [ 473.261001][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559f5f7b3a40 [ 473.261015][ T29] R13: 0000559f5f7a3410 R14: 0000000000000000 R15: 0000559f5f7b3a40 [ 473.261047][ T29] [ 473.269982][ T29] [ 473.269982][ T29] Showing all locks held in the system: [ 473.270001][ T29] 1 lock held by khungtaskd/29: [ 473.270015][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 473.270086][ T29] 2 locks held by kworker/u4:3/48: [ 473.270132][ T29] 1 lock held by klogd/5148: [ 473.270145][ T29] 1 lock held by udevd/5159: [ 473.270157][ T29] 2 locks held by getty/5552: [ 473.270168][ T29] #0: ffff88802c5080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 473.270238][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 473.270303][ T29] 1 lock held by udevd/5794: [ 473.270315][ T29] #0: ffff888021d574c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 473.270374][ T29] 1 lock held by udevd/5796: [ 473.270385][ T29] #0: ffff888021c014c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 473.270439][ T29] 1 lock held by udevd/5802: [ 473.270450][ T29] #0: ffff888021c684c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 473.270503][ T29] 1 lock held by udevd/5807: [ 473.270513][ T29] #0: ffff888021c534c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 473.270573][ T29] 1 lock held by udevd/6028: [ 473.270584][ T29] #0: ffff888021c6d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 473.270640][ T29] 1 lock held by udevd/6034: [ 473.270651][ T29] #0: ffff888021d524c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 473.270707][ T29] 1 lock held by udevd/6169: [ 473.270719][ T29] #0: ffff888021eb64c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 473.270774][ T29] 1 lock held by udevd/6174: [ 473.270786][ T29] #0: ffff888021eb14c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 473.270838][ T29] 1 lock held by udevd/6203: [ 473.270849][ T29] #0: ffff888021fab4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 473.270905][ T29] 1 lock held by udevd/6206: [ 473.271006][ T29] #0: ffff888021edb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 473.271064][ T29] 1 lock held by udevd/6329: [ 473.271076][ T29] #0: ffff8881413004c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 473.271132][ T29] 1 lock held by udevd/6378: [ 473.271144][ T29] #0: ffff8880225534c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 473.271201][ T29] 1 lock held by syz.1.445/7888: [ 473.271214][ T29] 1 lock held by syz.2.446/7889: [ 473.271226][ T29] 7 locks held by syz.2.446/7890: [ 473.271238][ T29] #0: ffffffff8cd24240 (console_lock){+.+.}-{0:0}, at: do_fb_ioctl+0x57e/0x740 [ 473.271299][ T29] #1: ffff888146ed9078 (&fb_info->lock){+.+.}-{3:3}, at: do_fb_ioctl+0x593/0x740 [ 473.271359][ T29] #2: ffff88801b7d5280 (&helper->lock){+.+.}-{3:3}, at: __drm_fb_helper_restore_fbdev_mode_unlocked+0x77/0x140 [ 473.271431][ T29] #3: ffff88802117c1b0 (&dev->master_mutex){+.+.}-{3:3}, at: drm_master_internal_acquire+0x20/0x70 [ 473.271489][ T29] #4: ffff88801b7d5098 (&client->modeset_mutex){+.+.}-{3:3}, at: drm_client_modeset_commit_locked+0x4c/0x4c0 [ 473.271551][ T29] #5: ffffc9000f77f7b0 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0xe1/0x760 [ 473.271613][ T29] #6: ffff88801b7d40b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: modeset_lock+0x2b0/0x630 [ 473.271670][ T29] [ 473.271676][ T29] ============================================= [ 473.271676][ T29] [ 473.271695][ T29] NMI backtrace for cpu 1 [ 473.271706][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 473.271724][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 473.271735][ T29] Call Trace: [ 473.271744][ T29] [ 473.271752][ T29] dump_stack_lvl+0x16c/0x230 [ 473.271778][ T29] ? preempt_count_add+0x91/0x1a0 [ 473.271809][ T29] ? show_regs_print_info+0x20/0x20 [ 473.271835][ T29] ? load_image+0x3b0/0x3b0 [ 473.271868][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 473.271900][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 473.271937][ T29] ? _printk+0xd0/0x110 [ 473.271957][ T29] ? load_image+0x3b0/0x3b0 [ 473.271981][ T29] ? load_image+0x3b0/0x3b0 [ 473.272005][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 473.272039][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 473.272071][ T29] watchdog+0xf41/0xf80 [ 473.272100][ T29] ? watchdog+0x1e1/0xf80 [ 473.272132][ T29] kthread+0x2fa/0x390 [ 473.272151][ T29] ? hungtask_pm_notify+0x90/0x90 [ 473.272177][ T29] ? kthread_blkcg+0xd0/0xd0 [ 473.272197][ T29] ret_from_fork+0x48/0x80 [ 473.272220][ T29] ? kthread_blkcg+0xd0/0xd0 [ 473.272240][ T29] ret_from_fork_asm+0x11/0x20 [ 473.272283][ T29] [ 473.272291][ T29] Sending NMI from CPU 1 to CPUs 0: [ 473.272323][ C0] NMI backtrace for cpu 0 [ 473.272332][ C0] CPU: 0 PID: 5159 Comm: udevd Not tainted syzkaller #0 [ 473.272347][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 473.272355][ C0] RIP: 0010:check_preemption_disabled+0x56/0x110 [ 473.272375][ C0] Code: 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 cc 65 4c 8b 3d 36 29 95 75 41 f6 [ 473.272389][ C0] RSP: 0018:ffffc900032f7680 EFLAGS: 00000046 [ 473.272402][ C0] RAX: 0000000000000000 RBX: ffff88807f36c6dc RCX: 0000000080000000 [ 473.272413][ C0] RDX: 0000000000000000 RSI: ffffffff8aaac9c0 RDI: ffffffff8afc64c0 [ 473.272424][ C0] RBP: ffffc900032f77d0 R08: ffffffff8e4a856f R09: 1ffffffff1c950ad [ 473.272436][ C0] R10: dffffc0000000000 R11: fffffbfff1c950ae R12: ffffffff8211b923 [ 473.272448][ C0] R13: dffffc0000000000 R14: ffff88807f36bc00 R15: 1ffff9200065eee4 [ 473.272460][ C0] FS: 00007f847c595880(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 473.272473][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.272484][ C0] CR2: 0000200000023030 CR3: 000000001aaac000 CR4: 00000000003506f0 [ 473.272498][ C0] Call Trace: [ 473.272503][ C0] [ 473.272511][ C0] lock_release+0x155/0x8b0 [ 473.272531][ C0] ? read_lock_is_recursive+0x20/0x20 [ 473.272548][ C0] ? dput+0x3b/0x1e0 [ 473.272568][ C0] ? step_into+0x42b/0xf10 [ 473.272585][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 473.272603][ C0] ? step_into+0x42b/0xf10 [ 473.272617][ C0] ? make_vfsuid+0x51/0xb0 [ 473.272638][ C0] ? generic_permission+0x1f3/0x590 [ 473.272663][ C0] up_read+0x16/0x20 [ 473.272676][ C0] kernfs_iop_permission+0x2b3/0x390 [ 473.272699][ C0] ? kernfs_evict_inode+0x60/0x60 [ 473.272718][ C0] inode_permission+0x23d/0x480 [ 473.272744][ C0] link_path_walk+0x2da/0xe00 [ 473.272768][ C0] ? handle_lookup_down+0x130/0x130 [ 473.272790][ C0] path_openat+0x283/0x3190 [ 473.272822][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 473.272842][ C0] ? __x64_sys_openat+0x139/0x160 [ 473.272860][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.272877][ C0] ? verify_lock_unused+0x140/0x140 [ 473.272897][ C0] ? do_filp_open+0x3d0/0x3d0 [ 473.272924][ C0] ? __virt_addr_valid+0x18c/0x540 [ 473.272951][ C0] do_filp_open+0x1c5/0x3d0 [ 473.272977][ C0] ? vfs_tmpfile+0x490/0x490 [ 473.273020][ C0] ? _raw_spin_unlock+0x28/0x40 [ 473.273035][ C0] ? alloc_fd+0x58f/0x630 [ 473.273059][ C0] do_sys_openat2+0x12c/0x1c0 [ 473.273079][ C0] ? do_sys_open+0xe0/0xe0 [ 473.273097][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 473.273117][ C0] ? lock_chain_count+0x20/0x20 [ 473.273136][ C0] __x64_sys_openat+0x139/0x160 [ 473.273158][ C0] do_syscall_64+0x55/0xb0 [ 473.273183][ C0] ? clear_bhb_loop+0x40/0x90 [ 473.273199][ C0] ? clear_bhb_loop+0x40/0x90 [ 473.273216][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.273232][ C0] RIP: 0033:0x7f847bf15c3a [ 473.273244][ C0] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 473.273256][ C0] RSP: 002b:00007ffc4e7a9718 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 473.273271][ C0] RAX: ffffffffffffffda RBX: 0000559f5f8103a0 RCX: 00007f847bf15c3a [ 473.273283][ C0] RDX: 0000000000090800 RSI: 0000559f5f910de0 RDI: 00000000ffffff9c [ 473.273293][ C0] RBP: 0000559f5f910de0 R08: 0000000000000000 R09: 0000000000000001 [ 473.273302][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000559f5f7a67b0 [ 473.273312][ C0] R13: 00000000000000fd R14: 0000559f5c4cabe0 R15: 00007ffc4e7a9a20 [ 473.273331][ C0] [ 473.274333][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 473.274344][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 473.274363][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 473.274374][ T29] Call Trace: [ 473.274382][ T29] [ 473.274390][ T29] dump_stack_lvl+0x16c/0x230 [ 473.274421][ T29] ? show_regs_print_info+0x20/0x20 [ 473.274447][ T29] ? load_image+0x3b0/0x3b0 [ 473.274480][ T29] panic+0x2c0/0x710 [ 473.274504][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 473.274523][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 473.274548][ T29] ? irq_work_queue+0xbc/0x140 [ 473.274578][ T29] watchdog+0xf80/0xf80 [ 473.274604][ T29] ? watchdog+0x1e1/0xf80 [ 473.274637][ T29] kthread+0x2fa/0x390 [ 473.274655][ T29] ? hungtask_pm_notify+0x90/0x90 [ 473.274681][ T29] ? kthread_blkcg+0xd0/0xd0 [ 473.274700][ T29] ret_from_fork+0x48/0x80 [ 473.274723][ T29] ? kthread_blkcg+0xd0/0xd0 [ 473.274742][ T29] ret_from_fork_asm+0x11/0x20 [ 473.274782][ T29] [ 473.275167][ T29] Kernel Offset: disabled