last executing test programs: 18.95728612s ago: executing program 0 (id=888): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 18.886038343s ago: executing program 0 (id=889): memfd_create(&(0x7f0000000400)='\x00', 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf251200000008001500c000000008000100", @ANYRES32=r0, @ANYBLOB="0800150002000000080015008b2908ff"], 0x34}, 0x1, 0x0, 0x0, 0x40000a5}, 0x800) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x10, 0x8000, 0xc, 0x101, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x68, 0x0, 0xf, 0x0, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x5}, @timestamp_prespec={0x44, 0x44, 0xc, 0x3, 0x6, [{@empty, 0x6}, {@loopback, 0xb}, {@local, 0xf4c}, {@broadcast, 0x7fff}, {@private=0xa010102, 0xf41}, {@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x17, 0xe6, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x33}, @remote]}, @timestamp={0x44, 0x4, 0x47, 0x0, 0x6}]}}}}}) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x1000, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 17.762101923s ago: executing program 0 (id=891): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5b}, 0x94) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x8, 0x2) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 17.464842386s ago: executing program 2 (id=892): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) userfaultfd(0x801) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x9, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x9, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x7, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x20000000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x6, 0x25], [0x8009, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0xfffffffe, 0xb9, 0xce4, 0x1ff, 0x1, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x15, 0x1, 0x2000002, 0x14c, 0x60a7, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 16.411440773s ago: executing program 3 (id=894): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macvlan0\x00'}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 14.816018684s ago: executing program 2 (id=895): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r5 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r5, 0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) 14.245075699s ago: executing program 3 (id=897): io_setup(0x4, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r5, 0x0, 0x4cbe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000100000000000071120b00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) 13.850259186s ago: executing program 2 (id=898): io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0x2, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400000}]) 9.080945388s ago: executing program 2 (id=901): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f0000000d40)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f0000000d40)={0x80000000, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4c050) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = fsopen(&(0x7f0000000040)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='iocharset', 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x20, r8, 0x111, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) pwrite64(r0, &(0x7f0000000480)="d749768c56d2", 0x6, 0x1000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) 7.188871081s ago: executing program 1 (id=903): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) userfaultfd(0x801) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x9, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x9, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x7, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x20000000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x6, 0x25], [0x8009, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0xfffffffe, 0xb9, 0xce4, 0x1ff, 0x1, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x15, 0x1, 0x2000002, 0x14c, 0x60a7, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.919389613s ago: executing program 1 (id=904): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x41, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x28) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB], 0x10) open(&(0x7f00000000c0)='./file0\x00', 0x20082, 0x60) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000002440)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e4638f863f2887a03f9aa6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000"], 0x2, 0x6e2, &(0x7f0000000c80)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsim10se9h5x6Sg+6hR5Keje054ZA8VXHQCGXnHRTmdmZ1Ui72l3ZeiX9/cTMfDPfc/6zM7MPxATwf2txOqpPI4nF6bc30vXtrbn22NbcRJ7djohaRFQiqp1FJCuR5d7Kp/h2ujEvn8R4/34+Wl5499lX21901qr5lNWrlOqPota7aTOfohkRY/my1yFji08Pdr+vvduHtjeqpLuHacCuFYGLv7xQq/DCdntsdvM++U82H1T9KOctcE4lnftmj6mIyYioR3Tu+vnVoXK6ozt+m2c9AAAAADiqxtGrvLQTO7ERF05iOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBNlT//P8mnSpFuRlI8/7+Wb4s8fQ4NfxDi5xOd5dOTHwwAAAAAAAAAnLjXd2InNuJCsb6bZL/5v1H6jf9b8UGsxVKsxvXYiFasx3qsxmxETJUaqm201tdXZ7Oa0bg0oObN+KxPzZuHj/HWce80AAAAAAAAAJxv9SH598d7t/0+Fvd+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPMgiRjrLLLpUpGeiko1IuoRUUvLbUZ8VqS/JpJ+G5+e/jgAAADghdT3ryb1Eeq89CR2YiMuFOu7SfaZ/0r2ebkeH8RKrMdyrEc7luJO/hk6/dRf2d6aa29vzT1Ip952f/rlkYaetRid7x769/xqVqIRd2M523I9bkcSu5lK3sqr21tz6fJB/3F9mI4p+UluwGjGSuk76ezqp1n6z/u/RageaRefU+XQnKksd7wbkZl8bGmNi0UE+kdi6NGpDuxpNirdb34uDe6pf8w/HNz75IFSfb+5ORMHI3EzKt0jdGVwJCK++49Pfn2vvXL/3t216fOzS309GVriYCTmSpG4+g2KxHAzWSQud9cX4xfxq5iOLyfeidVYjt9EK9ZjqVnkt/LXczqfGhypzyfLa+8MG0l6Tja7169+Y2rGvjFFM36epVrxRnZML8RyJPEwIpbirezvZsx2rwZ7R/jyCGd9ZYQrbcm172WLbpiicXjZv43W5HFJ43qxFNfyNXcqyytv2YvSy32jVNzrRr8flVS/kyfSFv4w8P5w2g5GYrYUiVcOe710QvrX3XS+1l65v3qv9f6I/b2ZL9Pz6E/n6i6RHuGXo57v3MVsnmTn1EyW90r3Drs/XrX8F5eOSk/e5W69zpn6y3gYd/adqT+M+ZiPhaz0laz0eM8dK8272m1p/zU8zUvfaVW7P+yU3289jHbn/RAA59vk9ydrjf82/t34uPHHxr3G2/WfTfxo4rVajP9r/MfVmbE3K68lf4+P43d7n/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDnt/bo8f1Wu7202j9R6Z+VDK7Vau8WDxIbUGZfIskflTNC4WTt0ePdoQ0OTkzkw3vO6seZKJ7WOLxw8wSHkWwePF714ceieMrTCF0kPQFPKz/3mIue97aMn4NDeTDRHFImiZEbLF6wpayjv3ob/Y7XWETfYQy5cIwdx9UHOEs31h+8f2Pt0eMfLD9ovbf03tLK+Pz8wszC/FtzN+4ut5dmOvNShVN5+C1wGspvJ7pqEfH68LoDHtQKAAAAAAAAAAAAnKDT+F+Is95HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OttcTqqTyOJ2ZnrM+n69tZcO52K9F7JakRUIiL5bUTyz4hb8eTZrTRjqtRcclg/Hy0vvPvsq+0v9tqqFuUrEZuH1hvNZj5FMyLG8uVxtXd7eHu1veREn+ykG5k0YNfyJZy5/wUAAP//GP3tFA==") setxattr(&(0x7f000001f640)='./file0\x00', &(0x7f000001f700)=ANY=[@ANYBLOB="6f73782e260373cf285246f619e46fc5a25a6c6e12338fc9ad7035e5ed"], 0x0, 0x0, 0x0) 5.86414118s ago: executing program 1 (id=905): memfd_create(&(0x7f0000000400)='\x00', 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf251200000008001500c000000008000100", @ANYRES32=r0, @ANYBLOB="0800150002000000080015008b2908ff"], 0x34}, 0x1, 0x0, 0x0, 0x40000a5}, 0x800) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x10, 0x8000, 0xc, 0x101, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x68, 0x0, 0xf, 0x0, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x5}, @timestamp_prespec={0x44, 0x44, 0xc, 0x3, 0x6, [{@empty, 0x6}, {@loopback, 0xb}, {@local, 0xf4c}, {@broadcast, 0x7fff}, {@private=0xa010102, 0xf41}, {@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x17, 0xe6, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x33}, @remote]}, @timestamp={0x44, 0x4, 0x47, 0x0, 0x6}]}}}}}) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRESDEC, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5.565109833s ago: executing program 0 (id=906): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r5 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r5, 0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) 4.552826708s ago: executing program 2 (id=907): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) 4.495291491s ago: executing program 1 (id=908): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x8d, 0xc8, 0x31, 0x40, 0x830, 0x60, 0x132b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x15, 0xde, 0x7b}}]}}]}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x589001, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@empty, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4.324836848s ago: executing program 0 (id=909): io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0x2, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400000}]) 4.021034021s ago: executing program 3 (id=910): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r1, 0x5, 0x20, 0xe3f}, &(0x7f00000001c0)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES8=r0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$eJzs3b9rJHUUAPA3m9nZVYtNYSWCA1pYHZdrbRLkDsRUHilOCw3eHUh2ERKI+APXq8ROC0v/AkHwD7GxsxRsBTtPOBj5zs5kf9ywtye3Eb3Pp0jezve9nTc/kkyKvLz34uTkdhl37332awyHWfT2BxH3s9iNXrS+iCX7XwcA8F92v6rij2qmY/mXr5ZfZ4svelvuDQDYjkf8/G/k9cdbKePHy+sNANiOm7fefvPg8PD6W2U5jBuTL8+P0q/46fNs/eBufBDjuBNXYxQPIuoHhX7UTwspvFFV1TQvk914ZTI9P0qVk3d/at7/4PeIun4vRrFbb7p42qjr3zi8vlfOLNRPUx/PNvvfT/XXYhTPf9MWL9Vf66iPoyJefXmh/ysxip/fjw9jHLfrJub1n++V5evVt39++k5qL9Vn0/OjQZ03V+20O+9f8jUCAAAAAAAAAAAAAAAAAAAAAOD/50ozO2cQ9fyetKmZv7PzIL3oR9naXZ7PM6u/GAg8nw8UvaqqplV8187XuVqWZdUkzuvzeCFvBgsCAAAAAAAAAAAAAAAAAADAU+7s409OjsfjO6dPJGinAeQR8dfNiH/6PvsLW16K9cmDZp/H43GvCZdz8sUtsdPmZBFr20gH8YROy6OCZx7qOQW9OP3+h86qdERneXQtDVNQdC61Qb9jX48ffNSfncfOnPbuOjnOus/h4KLDYbpwsXrhiujeez9WthTt9VxNbm/FzQ6n6FwaPfZpKZ6rg+manMjWfV289tvS4WSxklzUEzc6y/tN0HU2ZvfGRvdzDGflD3+vyEzrAAAAAAAAAAAAAAAAAACArZr/9W/H4r21pb1qsLW2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSzf///yZBvly8QVURp2f/1rEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw9Pg7AAD//6ofUAA=") 3.424902298s ago: executing program 3 (id=911): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x80) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x4f00, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x148, 0xe74, 0x8, 0x401}}) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='osx.trusted.oveblay.upper\x00'], 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500009f921054000004000600000019c85b238724e7862eae43e0f97a4c83f67f5bdbc127823f6d83855ce9bc5d3d19b295e9b9552dd91e486fe401de996447a56a124455fac6078ce1d702c7882539da3d3a982b60714bcd2e42ba38", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000327bd7000fedbdf25830000000c009900040000001800000008001001010000000a0006010000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040041}, 0x4000) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0x3, 0x8, 0x0, 0x10, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x9, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x1000000000000, 0x1]}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)={0x40000}) ioctl$SG_SCSI_RESET(r3, 0x227b, 0x1000000000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.436908412s ago: executing program 3 (id=912): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) userfaultfd(0x801) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x9, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x9, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x7, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x20000000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x6, 0x25], [0x8009, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0xfffffffe, 0xb9, 0xce4, 0x1ff, 0x1, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x15, 0x1, 0x2000002, 0x14c, 0x60a7, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.200000202s ago: executing program 2 (id=913): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) 2.196145992s ago: executing program 3 (id=914): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2a) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5b}, 0x94) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x8, 0x2) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2.117630696s ago: executing program 1 (id=915): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) iopl(0x3) pidfd_send_signal(0xffffffffffffffff, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, 0x0, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000740000007400000007000000000000000300000d00000000000000000000000000000000000000000300000000000000000000000500000d000000000000000f0000000000000000000969d0b219af83288ecfe747c93a080000000000000000000000000000000000000010000000000000000000000002000006040000000500000000000000"], &(0x7f0000000600)=""/152, 0x93, 0x98, 0x1}, 0x28) 1.841090518s ago: executing program 0 (id=916): memfd_create(&(0x7f0000000400)='\x00', 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf251200000008001500c000000008000100", @ANYRES32=r0, @ANYBLOB="0800150002000000080015008b2908ff"], 0x34}, 0x1, 0x0, 0x0, 0x40000a5}, 0x800) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x10, 0x8000, 0xc, 0x101, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x68, 0x0, 0xf, 0x0, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x5}, @timestamp_prespec={0x44, 0x44, 0xc, 0x3, 0x6, [{@empty, 0x6}, {@loopback, 0xb}, {@local, 0xf4c}, {@broadcast, 0x7fff}, {@private=0xa010102, 0xf41}, {@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x17, 0xe6, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x33}, @remote]}, @timestamp={0x44, 0x4, 0x47, 0x0, 0x6}]}}}}}) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRESDEC, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 0s ago: executing program 1 (id=917): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): red promiscuous mode [ 82.960196][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.971578][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.987195][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.001611][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.018149][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.029295][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.041023][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.055367][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.065136][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.075000][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.083855][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.125817][ T5763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.135424][ T5763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.144939][ T5763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.153844][ T5763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.166832][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.179212][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.189430][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.199967][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.212476][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.255391][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.269859][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.280505][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.292133][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.304141][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.322464][ T5772] veth0_macvtap: entered promiscuous mode [ 83.335561][ T5772] veth1_macvtap: entered promiscuous mode [ 83.348790][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.357821][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.367413][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.376453][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.469579][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.480527][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.497541][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.509479][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.519985][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.530903][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.540873][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.552805][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.564695][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.578588][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.590092][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.600346][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.611826][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.623139][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.633653][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.644916][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.707786][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.716664][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.726327][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.736520][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.767113][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.775482][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.832873][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.836622][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.843314][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.883653][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.016847][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.042898][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.081107][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.094822][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.132459][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.160334][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.245191][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.264022][ T5773] Bluetooth: hci0: command tx timeout [ 84.331398][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.421685][ T5773] Bluetooth: hci3: command tx timeout [ 84.427187][ T5081] Bluetooth: hci2: command tx timeout [ 84.501933][ T5773] Bluetooth: hci1: command tx timeout [ 84.550278][ T5851] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.359925][ T5854] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 85.480740][ T5866] binder: 5863:5866 ioctl 50009401 200000001700 returned -22 [ 85.842326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.850745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.115086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.319937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.342033][ T5773] Bluetooth: hci0: command tx timeout [ 86.421711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 86.504081][ T5773] Bluetooth: hci3: command tx timeout [ 86.509515][ T5773] Bluetooth: hci2: command tx timeout [ 86.581930][ T5773] Bluetooth: hci1: command tx timeout [ 86.928527][ T5874] syz.2.6 (5874) used greatest stack depth: 20688 bytes left [ 87.103229][ T5887] mkiss: ax0: crc mode is auto. [ 87.241568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.343955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.446298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.651279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.856028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.882063][ T5859] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.091442][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 90.240530][ T5905] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 92.112108][ T787] cfg80211: failed to load regulatory.db [ 92.705187][ T5975] overlayfs: missing 'lowerdir' [ 93.980097][ T5859] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.169589][ T5859] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 94.336083][ T5859] usb 2-1: can't read configurations, error -71 [ 95.071511][ T5992] syz.0.27 (5992) used greatest stack depth: 20208 bytes left [ 95.232378][ T5859] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.421407][ T5859] usb 2-1: Using ep0 maxpacket: 8 [ 96.246856][ T5859] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.282845][ T6000] mkiss: ax0: crc mode is auto. [ 96.466936][ T5859] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.477264][ T5859] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.487705][ T5859] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.502788][ T5859] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.525262][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.818690][ T5859] usb 2-1: GET_CAPABILITIES returned 0 [ 96.826057][ T5859] usbtmc 2-1:16.0: can't read capabilities [ 96.840363][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'. [ 97.048461][ T5859] usb 2-1: USB disconnect, device number 3 [ 97.162433][ T6016] overlayfs: missing 'lowerdir' [ 97.577074][ T6024] trusted_key: syz.0.28 sent an empty control message without MSG_MORE. [ 97.761337][ T5803] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.963742][ T5803] usb 4-1: Using ep0 maxpacket: 32 [ 100.809170][ T6065] mkiss: ax0: crc mode is auto. [ 103.676596][ T5803] usb 4-1: unable to get BOS descriptor or descriptor too short [ 103.802188][ T5803] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 103.838582][ T6073] overlayfs: missing 'lowerdir' [ 103.843304][ T5803] usb 4-1: can't read configurations, error -71 [ 103.903031][ T6071] syzkaller0: entered promiscuous mode [ 103.908570][ T6071] syzkaller0: entered allmulticast mode [ 104.708914][ T6090] comedi comedi1: dt2801: a I/O base address must be specified [ 105.721393][ T5859] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.847419][ T6102] mkiss: ax0: crc mode is auto. [ 107.977153][ T5859] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 108.011604][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.088706][ T5859] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 108.107051][ T5859] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 108.162689][ T5859] usb 4-1: Manufacturer: syz [ 108.210135][ T5859] usb 4-1: config 0 descriptor?? [ 108.366258][ T5859] rc_core: IR keymap rc-hauppauge not found [ 108.392995][ T5859] Registered IR keymap rc-empty [ 108.425762][ T5859] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 108.478885][ T5859] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 108.547518][ T5859] usb 4-1: USB disconnect, device number 4 [ 110.268475][ T6131] mkiss: ax0: crc mode is auto. [ 110.314070][ T6134] Zero length message leads to an empty skb [ 116.419558][ T6167] mkiss: ax0: crc mode is auto. [ 116.845183][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 117.253206][ T6180] hsr_slave_0 (unregistering): left promiscuous mode [ 117.326108][ T6185] syzkaller0: entered promiscuous mode [ 117.344437][ T6185] syzkaller0: entered allmulticast mode [ 118.108946][ T6194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.640892][ T6212] syz.3.80 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.243367][ T6229] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 119.281353][ T5803] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.563698][ T5803] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 119.579697][ T5803] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.591475][ T5803] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 119.622409][ T5803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.658939][ T5803] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.670955][ T5803] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 119.686019][ T5803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.781483][ T5803] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.812165][ T5803] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 119.834353][ T5803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.842862][ T5803] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.861351][ T5803] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 119.991814][ T5803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.000044][ T5803] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.025984][ T5803] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.051340][ T5803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.082586][ T5803] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.122384][ T5803] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.161745][ T5803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.185862][ T5803] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.205039][ T5803] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.241494][ T5803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.265163][ T5803] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.294923][ T5803] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.331471][ T5803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.372428][ T5803] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 120.378613][ T6236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.400347][ T5803] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 120.419053][ T5803] usb 4-1: Product: syz [ 120.429687][ T5803] usb 4-1: Manufacturer: syz [ 120.434765][ T5803] usb 4-1: SerialNumber: syz [ 120.453055][ T5803] usb 4-1: config 0 descriptor?? [ 120.483172][ T5803] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 120.483921][ T6239] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 120.497140][ T6239] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.561796][ T6239] vhci_hcd vhci_hcd.0: Device attached [ 120.718788][ T6244] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 120.805494][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 120.814397][ T5803] usb 4-1: USB disconnect, device number 5 [ 120.821553][ T171] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 120.848967][ T5803] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 120.856038][ T6245] yurex 4-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 121.750377][ T6240] vhci_hcd: connection reset by peer [ 121.788100][ T5966] vhci_hcd: stop threads [ 121.818681][ T5966] vhci_hcd: release socket [ 121.843522][ T5966] vhci_hcd: disconnect device [ 122.288777][ T6267] binder_alloc: 6265: binder_alloc_buf, no vma [ 122.376847][ T6270] sp0: Synchronizing with TNC [ 122.402038][ T6269] [U] è [ 122.709153][ T6276] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 122.715751][ T6276] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 122.735016][ T6276] vhci_hcd vhci_hcd.0: Device attached [ 123.001585][ T5803] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 123.360175][ T6286] 9pnet_virtio: no channels available for device syz [ 124.298838][ T6277] vhci_hcd: connection reset by peer [ 124.319534][ T5941] vhci_hcd: stop threads [ 124.328744][ T5941] vhci_hcd: release socket [ 124.346651][ T5941] vhci_hcd: disconnect device [ 125.942185][ T171] vhci_hcd: vhci_device speed not set [ 129.241478][ T5803] vhci_hcd: vhci_device speed not set [ 129.494697][ T6320] netlink: 14 bytes leftover after parsing attributes in process `syz.2.118'. [ 129.574185][ T6320] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 131.555756][ T6329] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 131.562338][ T6329] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.576484][ T6329] vhci_hcd vhci_hcd.0: Device attached [ 132.081382][ T171] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 132.104866][ T6332] vhci_hcd: connection reset by peer [ 132.126014][ T5941] vhci_hcd: stop threads [ 132.161419][ T5941] vhci_hcd: release socket [ 132.171289][ T5941] vhci_hcd: disconnect device [ 133.072747][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.091465][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.271390][ T5847] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.174666][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 134.206619][ T5847] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 134.231315][ T5847] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 134.276777][ T5847] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.321332][ T5847] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 134.502113][ T5847] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 134.557866][ T5847] usb 4-1: config 168 interface 0 has no altsetting 0 [ 134.582344][ T5847] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 134.594361][ T5847] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 134.642101][ T5847] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.681315][ T5847] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 134.966882][ T5847] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 135.024222][ T5847] usb 4-1: config 168 interface 0 has no altsetting 0 [ 135.042936][ T5847] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 135.068687][ T5847] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 135.090196][ T5847] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 135.130912][ T5847] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 135.183169][ T5847] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 135.206912][ T5847] usb 4-1: config 168 interface 0 has no altsetting 0 [ 135.227554][ T5847] usb 4-1: string descriptor 0 read error: -22 [ 135.234436][ T5847] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 135.258046][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.308824][ T5847] adutux 4-1:168.0: interrupt endpoints not found [ 135.524213][ T5847] usb 4-1: USB disconnect, device number 6 [ 135.601013][ T6375] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 135.607568][ T6375] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 135.624522][ T6375] vhci_hcd vhci_hcd.0: Device attached [ 135.891348][ T5830] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 137.231438][ T171] vhci_hcd: vhci_device speed not set [ 137.741392][ T6376] vhci_hcd: connection reset by peer [ 137.761907][ T5951] vhci_hcd: stop threads [ 137.768894][ T5951] vhci_hcd: release socket [ 137.787362][ T5951] vhci_hcd: disconnect device [ 138.283166][ T6417] pim6reg: entered allmulticast mode [ 138.366696][ T6418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.031478][ T5830] vhci_hcd: vhci_device speed not set [ 141.577828][ T6439] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 141.584393][ T6439] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.612798][ T6439] vhci_hcd vhci_hcd.0: Device attached [ 141.956700][ T8] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 142.575179][ T6440] vhci_hcd: connection reset by peer [ 142.582657][ T5954] vhci_hcd: stop threads [ 142.586956][ T5954] vhci_hcd: release socket [ 142.621015][ T6435] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 142.621398][ T5954] vhci_hcd: disconnect device [ 142.801502][ T6435] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 142.873667][ T6435] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 142.891641][ T6435] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 142.900173][ T6435] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 142.910774][ T6435] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 142.920333][ T6435] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 142.928386][ T6435] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 142.938597][ T6435] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 142.947112][ T6435] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 143.131771][ T6455] Bluetooth: MGMT ver 1.22 [ 143.602396][ T6456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.615769][ T6493] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 147.622349][ T6493] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 147.633156][ T6493] vhci_hcd vhci_hcd.0: Device attached [ 148.003303][ T6500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.027924][ T8] usb 39-1: device descriptor read/64, error -110 [ 149.030135][ T8] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 149.070715][ T6494] vhci_hcd: connection reset by peer [ 149.089283][ T5951] vhci_hcd: stop threads [ 149.094765][ T5951] vhci_hcd: release socket [ 149.121078][ T5951] vhci_hcd: disconnect device [ 151.361015][ T6530] tipc: Can't bind to reserved service type 0 [ 154.181368][ T8] vhci_hcd: vhci_device speed not set [ 154.311325][ T6541] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 154.317912][ T6541] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 154.433233][ T6541] vhci_hcd vhci_hcd.0: Device attached [ 154.701599][ T171] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 154.717918][ T6551] vhci_hcd: connection reset by peer [ 154.756078][ T5951] vhci_hcd: stop threads [ 154.760374][ T5951] vhci_hcd: release socket [ 154.773821][ T5951] vhci_hcd: disconnect device [ 155.097385][ T6563] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 156.348278][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.391468][ T6595] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 159.398023][ T6595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 159.411656][ T6595] vhci_hcd vhci_hcd.0: Device attached [ 159.691456][ T8] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 160.382927][ T171] vhci_hcd: vhci_device speed not set [ 160.403580][ T6596] vhci_hcd: connection reset by peer [ 160.421880][ T5965] vhci_hcd: stop threads [ 160.426177][ T5965] vhci_hcd: release socket [ 160.431067][ T5965] vhci_hcd: disconnect device [ 160.797198][ T6606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.452855][ T6646] syz.3.214[6646]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 163.494191][ T6644] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 163.500845][ T6644] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 163.540433][ T6644] vhci_hcd vhci_hcd.0: Device attached [ 163.841324][ T171] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 164.345371][ T6647] vhci_hcd: connection reset by peer [ 164.390276][ T5941] vhci_hcd: stop threads [ 164.409461][ T5941] vhci_hcd: release socket [ 164.418917][ T5941] vhci_hcd: disconnect device [ 165.541376][ T8] vhci_hcd: vhci_device speed not set [ 167.379437][ T5803] IPVS: starting estimator thread 0... [ 167.481451][ T6668] IPVS: using max 26 ests per chain, 62400 per kthread [ 167.505564][ T6673] ======================================================= [ 167.505564][ T6673] WARNING: The mand mount option has been deprecated and [ 167.505564][ T6673] and is ignored by this kernel. Remove the mand [ 167.505564][ T6673] option from the mount to silence this warning. [ 167.505564][ T6673] ======================================================= [ 167.548917][ T6673] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 167.702588][ T6673] overlayfs: failed to look up (tracing) for ino (-66) [ 168.375689][ T6672] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 168.382797][ T6672] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 168.392210][ T6672] vhci_hcd vhci_hcd.0: Device attached [ 168.691326][ T5859] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 168.744101][ T6677] vhci_hcd: connection reset by peer [ 168.753164][ T5966] vhci_hcd: stop threads [ 168.757549][ T5966] vhci_hcd: release socket [ 168.831125][ T5966] vhci_hcd: disconnect device [ 169.233892][ T6685] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.461946][ T171] vhci_hcd: vhci_device speed not set [ 170.264499][ T6695] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 170.271082][ T6695] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 170.305063][ T6695] vhci_hcd vhci_hcd.0: Device attached [ 170.621378][ T8] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 170.751897][ T6697] vhci_hcd: connection reset by peer [ 170.792062][ T5958] vhci_hcd: stop threads [ 170.797245][ T5958] vhci_hcd: release socket [ 170.841485][ T5958] vhci_hcd: disconnect device [ 175.101213][ C1] sched: RT throttling activated [ 176.102162][ T5859] vhci_hcd: vhci_device speed not set [ 177.119233][ T8] vhci_hcd: vhci_device speed not set [ 177.479674][ T6736] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 177.486240][ T6736] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.507445][ T6736] vhci_hcd vhci_hcd.0: Device attached [ 177.903743][ T9] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 178.207268][ T6737] vhci_hcd: connection reset by peer [ 178.219830][ T5951] vhci_hcd: stop threads [ 178.237800][ T5951] vhci_hcd: release socket [ 178.245210][ T5951] vhci_hcd: disconnect device [ 181.184202][ T6780] ALSA: mixer_oss: invalid OSS volume '' [ 181.231312][ T6780] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 181.237981][ T6780] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.262258][ T6780] vhci_hcd vhci_hcd.0: Device attached [ 181.612711][ T6781] vhci_hcd: connection closed [ 181.621431][ T5966] vhci_hcd: stop threads [ 181.630440][ T5966] vhci_hcd: release socket [ 181.648807][ T5966] vhci_hcd: disconnect device [ 181.735006][ T6795] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 181.741590][ T6795] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.772934][ T6795] vhci_hcd vhci_hcd.0: Device attached [ 182.131479][ T171] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 182.371403][ T6796] vhci_hcd: connection reset by peer [ 182.407106][ T5954] vhci_hcd: stop threads [ 182.416254][ T5954] vhci_hcd: release socket [ 182.433151][ T5954] vhci_hcd: disconnect device [ 182.464646][ T6802] process 'syz.3.255' launched './file0' with NULL argv: empty string added [ 182.482757][ T6802] Invalid argument reading file caps for ./file0 [ 183.591599][ T9] vhci_hcd: vhci_device speed not set [ 185.824115][ T6841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.911425][ T6676] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 186.954610][ T6851] nbd0: detected capacity change from 0 to 8589934655 [ 187.380986][ T171] vhci_hcd: vhci_device speed not set [ 187.890435][ T6676] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 187.921820][ T6676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.930296][ T6676] usb 1-1: Product: syz [ 187.959232][ T6676] usb 1-1: Manufacturer: syz [ 187.971314][ T6676] usb 1-1: SerialNumber: syz [ 188.005530][ T5773] block nbd0: Receive control failed (result -104) [ 188.626164][ T6676] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 188.740362][ T6676] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 188.761029][ T6862] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 188.849194][ T6676] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 188.875657][ T6676] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 189.046861][ T23] usb 1-1: USB disconnect, device number 2 [ 189.143919][ T23] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 189.223109][ T23] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 189.252112][ T23] visor 1-1:1.0: device disconnected [ 189.693895][ T6866] mkiss: ax0: crc mode is auto. [ 192.269143][ T6872] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 192.275741][ T6872] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 192.287810][ T6872] vhci_hcd vhci_hcd.0: Device attached [ 192.600060][ T6879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.611317][ T5152] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 192.916054][ T6873] vhci_hcd: connection reset by peer [ 193.662697][ T5965] vhci_hcd: stop threads [ 193.667049][ T5965] vhci_hcd: release socket [ 193.683435][ T5965] vhci_hcd: disconnect device [ 193.781871][ T6890] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 194.341606][ T171] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 194.530582][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.537016][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.565347][ T171] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 194.581479][ T171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.614357][ T171] usb 1-1: Product: syz [ 194.633477][ T171] usb 1-1: Manufacturer: syz [ 194.643797][ T171] usb 1-1: SerialNumber: syz [ 195.070092][ T171] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 195.087686][ T171] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 195.105053][ T171] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 195.117627][ T171] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 195.147632][ T171] usb 1-1: USB disconnect, device number 3 [ 195.189992][ T171] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 195.286291][ T171] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 195.325122][ T6905] nbd1: detected capacity change from 0 to 8589934655 [ 195.340346][ T171] visor 1-1:1.0: device disconnected [ 195.407397][ T5773] block nbd1: Receive control failed (result -104) [ 198.190463][ T6918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.261480][ T5152] vhci_hcd: vhci_device speed not set [ 198.457788][ T6925] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 198.464382][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 198.477660][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 198.649749][ T6930] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 198.872508][ T6676] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 199.120474][ T6927] vhci_hcd: connection reset by peer [ 199.132111][ T5941] vhci_hcd: stop threads [ 199.136585][ T5941] vhci_hcd: release socket [ 199.141143][ T5941] vhci_hcd: disconnect device [ 199.181432][ T171] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.265749][ T171] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 200.279224][ T171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.297929][ T171] usb 4-1: Product: syz [ 200.314482][ T171] usb 4-1: Manufacturer: syz [ 200.329377][ T171] usb 4-1: SerialNumber: syz [ 200.791383][ T171] usb 4-1: palm_os_4_probe - error -110 getting connection info [ 200.801398][ T171] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 200.828568][ T171] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 200.840667][ T171] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 200.899582][ T171] usb 4-1: USB disconnect, device number 7 [ 200.938334][ T171] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 200.989159][ T171] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 201.020694][ T171] visor 4-1:1.0: device disconnected [ 201.758280][ T6955] nbd2: detected capacity change from 0 to 8589934655 [ 203.220737][ T5773] block nbd2: Receive control failed (result -32) [ 203.522244][ T55] block nbd2: Dead connection, failed to find a fallback [ 203.529779][ T55] block nbd2: shutting down sockets [ 203.538636][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 203.552985][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 203.561143][ T55] Buffer I/O error on dev nbd2, logical block 1, async page read [ 203.573035][ T55] Buffer I/O error on dev nbd2, logical block 2, async page read [ 203.580978][ T55] Buffer I/O error on dev nbd2, logical block 3, async page read [ 203.609407][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 203.622270][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 203.633787][ T55] Buffer I/O error on dev nbd2, logical block 1, async page read [ 203.642583][ T55] Buffer I/O error on dev nbd2, logical block 2, async page read [ 203.660141][ T55] Buffer I/O error on dev nbd2, logical block 3, async page read [ 203.685811][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 203.698452][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 203.709498][ T55] Buffer I/O error on dev nbd2, logical block 1, async page read [ 203.727868][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 203.746284][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 203.763658][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 203.776979][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.787710][ T55] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 203.807830][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.818639][ T55] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 203.840007][ T6907] ldm_validate_partition_table(): Disk read failed. [ 203.915262][ T6907] Dev nbd2: unable to read RDB block 0 [ 203.935931][ T6907] nbd2: unable to read partition table [ 204.107171][ T6907] ldm_validate_partition_table(): Disk read failed. [ 204.115906][ T6907] Dev nbd2: unable to read RDB block 0 [ 204.137927][ T6907] nbd2: unable to read partition table [ 204.219683][ T6676] vhci_hcd: vhci_device speed not set [ 204.428678][ T6961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.319374][ T6964] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 205.757813][ T6975] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 205.764401][ T6975] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.813985][ T6975] vhci_hcd vhci_hcd.0: Device attached [ 206.624365][ T6976] vhci_hcd: connection closed [ 206.671345][ T5951] vhci_hcd: stop threads [ 206.680350][ T5951] vhci_hcd: release socket [ 206.711260][ T5951] vhci_hcd: disconnect device [ 206.761325][ T6676] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 206.782345][ T6676] usb 33-1: enqueue for inactive port 0 [ 206.999810][ T6676] vhci_hcd: vhci_device speed not set [ 208.070335][ T6992] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 208.152769][ T6993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.902066][ T7007] nbd3: detected capacity change from 0 to 8589934655 [ 211.000394][ T5773] block nbd3: Receive control failed (result -32) [ 211.041411][ T5875] block nbd3: Dead connection, failed to find a fallback [ 211.048704][ T5875] block nbd3: shutting down sockets [ 211.054049][ T5875] blk_print_req_error: 89 callbacks suppressed [ 211.054062][ T5875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 211.069824][ T5875] buffer_io_error: 122 callbacks suppressed [ 211.069834][ T5875] Buffer I/O error on dev nbd3, logical block 0, async page read [ 211.083960][ T5875] Buffer I/O error on dev nbd3, logical block 1, async page read [ 211.091750][ T5875] Buffer I/O error on dev nbd3, logical block 2, async page read [ 211.099760][ T5875] Buffer I/O error on dev nbd3, logical block 3, async page read [ 211.107913][ T5875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 211.117091][ T5875] Buffer I/O error on dev nbd3, logical block 0, async page read [ 211.125089][ T5875] Buffer I/O error on dev nbd3, logical block 1, async page read [ 211.132862][ T5875] Buffer I/O error on dev nbd3, logical block 2, async page read [ 211.140589][ T5875] Buffer I/O error on dev nbd3, logical block 3, async page read [ 211.148956][ T5875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 211.158068][ T5875] Buffer I/O error on dev nbd3, logical block 0, async page read [ 211.165847][ T5875] Buffer I/O error on dev nbd3, logical block 1, async page read [ 211.174291][ T5875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 211.183579][ T5875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 211.192973][ T5875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 211.202303][ T5875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 211.211630][ T5875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 211.220709][ T6907] ldm_validate_partition_table(): Disk read failed. [ 211.230914][ T5875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.240323][ T5875] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.251096][ T6907] Dev nbd3: unable to read RDB block 0 [ 211.257940][ T6907] nbd3: unable to read partition table [ 211.418081][ T6907] ldm_validate_partition_table(): Disk read failed. [ 211.439579][ T6907] Dev nbd3: unable to read RDB block 0 [ 211.893167][ T6907] nbd3: unable to read partition table [ 212.041418][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 212.937133][ T9] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 213.041289][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.063211][ T9] usb 1-1: Product: syz [ 213.067419][ T9] usb 1-1: Manufacturer: syz [ 213.111483][ T9] usb 1-1: SerialNumber: syz [ 213.471723][ T9] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 213.488409][ T9] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 213.525926][ T9] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 213.557181][ T9] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 213.834949][ T7025] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 213.958500][ T5859] usb 1-1: USB disconnect, device number 4 [ 213.972453][ T5859] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 213.985231][ T5859] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 214.013468][ T5859] visor 1-1:1.0: device disconnected [ 214.020629][ T7027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.654797][ T5986] block nbd0: Possible stuck request ffff888021c20000: control (read@0,4096B). Runtime 30 seconds [ 218.764369][ T7060] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 219.610026][ T7067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.835011][ T7070] nbd4: detected capacity change from 0 to 8589934655 [ 220.198662][ T5773] block nbd4: Receive control failed (result -104) [ 223.401311][ T5152] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 224.143893][ T5152] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 224.186365][ T5152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.219743][ T5152] usb 1-1: Product: syz [ 224.233621][ T7097] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 224.251249][ T5152] usb 1-1: Manufacturer: syz [ 224.256342][ T5152] usb 1-1: SerialNumber: syz [ 224.645974][ T5152] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 224.685409][ T5152] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 224.745717][ T5152] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 224.824952][ T5152] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 225.028994][ T9] usb 1-1: USB disconnect, device number 5 [ 225.048096][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 225.100383][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 225.135863][ T9] visor 1-1:1.0: device disconnected [ 225.503555][ T7105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.864676][ T5875] block nbd1: Possible stuck request ffff888021cc0000: control (read@0,4096B). Runtime 30 seconds [ 229.141440][ T7130] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.065882][ T7142] nbd5: detected capacity change from 0 to 8589934655 [ 230.281451][ T5773] block nbd5: Receive control failed (result -104) [ 230.681266][ T5859] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 230.870619][ T5859] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 230.906660][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.961294][ T5859] usb 2-1: Product: syz [ 230.965530][ T5859] usb 2-1: Manufacturer: syz [ 230.981877][ T5859] usb 2-1: SerialNumber: syz [ 231.131618][ T7148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.321280][ T5859] usb 2-1: palm_os_4_probe - error -110 getting connection info [ 231.356839][ T5859] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 231.387508][ T5859] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 231.424012][ T5859] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 231.706678][ T171] usb 2-1: USB disconnect, device number 4 [ 231.732893][ T171] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 231.869559][ T171] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 231.937186][ T171] visor 2-1:1.0: device disconnected [ 234.034931][ T7171] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 235.334750][ T7187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.977194][ T7190] nbd6: detected capacity change from 0 to 8589934655 [ 236.074532][ T5773] block nbd6: Receive control failed (result -104) [ 238.250856][ T5859] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 239.317910][ T5859] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 239.340079][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.350023][ T7213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 239.354600][ T5859] usb 1-1: Product: syz [ 239.370329][ T5859] usb 1-1: Manufacturer: syz [ 239.543705][ T5859] usb 1-1: SerialNumber: syz [ 239.576081][ T5859] usb 1-1: can't set config #1, error -71 [ 239.598913][ T5859] usb 1-1: USB disconnect, device number 6 [ 239.845845][ T7221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.846735][ T7249] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 244.676692][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.856009][ T7262] nbd7: detected capacity change from 0 to 8589934655 [ 244.989579][ T5773] block nbd7: Receive control failed (result -104) [ 245.081875][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 245.272304][ T787] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 245.321485][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.351466][ T787] usb 3-1: Product: syz [ 245.355711][ T787] usb 3-1: Manufacturer: syz [ 245.383300][ T787] usb 3-1: SerialNumber: syz [ 245.732668][ T787] usb 3-1: palm_os_4_probe - error -110 getting connection info [ 245.811865][ T787] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 245.939403][ T787] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 245.991580][ T787] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 246.920637][ T6676] usb 3-1: USB disconnect, device number 2 [ 246.931835][ T6676] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 246.956750][ T6676] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 246.967834][ T6676] visor 3-1:1.0: device disconnected [ 248.922458][ T5986] block nbd0: Possible stuck request ffff888021c20000: control (read@0,4096B). Runtime 60 seconds [ 249.501371][ T7293] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 250.038057][ T7301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.183523][ T5986] block nbd4: Possible stuck request ffff888021dd8000: control (read@0,1024B). Runtime 30 seconds [ 250.194535][ T5986] block nbd4: Possible stuck request ffff888021dd8200: control (read@1024,1024B). Runtime 30 seconds [ 250.206030][ T5986] block nbd4: Possible stuck request ffff888021dd8400: control (read@2048,1024B). Runtime 30 seconds [ 250.217326][ T5986] block nbd4: Possible stuck request ffff888021dd8600: control (read@3072,1024B). Runtime 30 seconds [ 254.392487][ T7330] nbd8: detected capacity change from 0 to 8589934655 [ 254.580932][ T5773] block nbd8: Receive control failed (result -104) [ 255.742642][ T7339] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.948391][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.955140][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.955514][ T5875] block nbd1: Possible stuck request ffff888021cc0000: control (read@0,4096B). Runtime 60 seconds [ 256.403495][ T7344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.884759][ T7373] mkiss: ax0: crc mode is auto. [ 260.757769][ T5875] block nbd5: Possible stuck request ffff888021e48000: control (read@0,1024B). Runtime 30 seconds [ 260.768996][ T5875] block nbd5: Possible stuck request ffff888021e38000: control (read@1024,1024B). Runtime 30 seconds [ 260.791684][ T5875] block nbd5: Possible stuck request ffff888021e38200: control (read@2048,1024B). Runtime 30 seconds [ 260.807193][ T5875] block nbd5: Possible stuck request ffff888021e38400: control (read@3072,1024B). Runtime 30 seconds [ 262.321751][ T7384] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 262.556292][ T7388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.526071][ T7411] mkiss: ax0: crc mode is auto. [ 266.293517][ T55] block nbd6: Possible stuck request ffff888021e70000: control (read@0,4096B). Runtime 30 seconds [ 266.846518][ T7418] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 267.837721][ T7424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.018743][ T7450] mkiss: ax0: crc mode is auto. [ 274.366711][ T7460] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.553739][ T7464] nbd9: detected capacity change from 0 to 8589934655 [ 275.501455][ T5773] block nbd9: Receive control failed (result -104) [ 275.539384][ T24] block nbd7: Possible stuck request ffff888021ec0000: control (read@0,1024B). Runtime 30 seconds [ 275.550130][ T24] block nbd7: Possible stuck request ffff888021ec0200: control (read@1024,1024B). Runtime 30 seconds [ 275.561582][ T24] block nbd7: Possible stuck request ffff888021ec0400: control (read@2048,1024B). Runtime 30 seconds [ 275.572616][ T24] block nbd7: Possible stuck request ffff888021ec0600: control (read@3072,1024B). Runtime 30 seconds [ 276.022206][ T7478] ALSA: mixer_oss: invalid OSS volume '' [ 276.117928][ T7478] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 276.124520][ T7478] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 276.242086][ T7478] vhci_hcd vhci_hcd.0: Device attached [ 276.427866][ T7479] vhci_hcd: connection closed [ 276.428892][ T5954] vhci_hcd: stop threads [ 276.463265][ T5954] vhci_hcd: release socket [ 276.511399][ T5803] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 277.321800][ T5954] vhci_hcd: disconnect device [ 277.451260][ T787] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 277.666151][ T787] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 277.706080][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.731432][ T787] usb 2-1: Product: syz [ 277.765358][ T787] usb 2-1: Manufacturer: syz [ 277.770028][ T787] usb 2-1: SerialNumber: syz [ 278.301890][ T787] usb 2-1: palm_os_4_probe - error -110 getting connection info [ 278.310425][ T787] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 278.739433][ T787] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 278.810493][ T787] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 278.823873][ T787] usb 2-1: USB disconnect, device number 5 [ 278.839715][ T787] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 278.852800][ T787] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 278.862931][ T787] visor 2-1:1.0: device disconnected [ 278.989240][ T24] block nbd0: Possible stuck request ffff888021c20000: control (read@0,4096B). Runtime 90 seconds [ 280.266948][ T24] block nbd4: Possible stuck request ffff888021dd8000: control (read@0,1024B). Runtime 60 seconds [ 280.278025][ T24] block nbd4: Possible stuck request ffff888021dd8200: control (read@1024,1024B). Runtime 60 seconds [ 280.290790][ T24] block nbd4: Possible stuck request ffff888021dd8400: control (read@2048,1024B). Runtime 60 seconds [ 280.302904][ T24] block nbd4: Possible stuck request ffff888021dd8600: control (read@3072,1024B). Runtime 60 seconds [ 281.731540][ T7519] ALSA: mixer_oss: invalid OSS volume '' [ 281.830029][ T7519] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 281.836607][ T7519] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 281.895500][ T7519] vhci_hcd vhci_hcd.0: Device attached [ 282.061036][ T7525] mkiss: ax0: crc mode is auto. [ 282.206203][ T787] usb 39-1: new high-speed USB device number 7 using vhci_hcd [ 284.262053][ T5803] vhci_hcd: vhci_device speed not set [ 284.552445][ T7520] vhci_hcd: connection reset by peer [ 284.567659][ T59] vhci_hcd: stop threads [ 284.575089][ T59] vhci_hcd: release socket [ 284.579719][ T59] vhci_hcd: disconnect device [ 284.747204][ T24] block nbd8: Possible stuck request ffff888021f48000: control (read@0,4096B). Runtime 30 seconds [ 284.971293][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 285.206151][ T23] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 285.401319][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.409379][ T23] usb 1-1: Product: syz [ 286.030993][ T55] block nbd1: Possible stuck request ffff888021cc0000: control (read@0,4096B). Runtime 90 seconds [ 286.601450][ T23] usb 1-1: Manufacturer: syz [ 286.606100][ T23] usb 1-1: SerialNumber: syz [ 287.400858][ T23] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 287.434382][ T23] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 288.485473][ T23] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 289.861940][ T23] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 289.901299][ T787] vhci_hcd: vhci_device speed not set [ 290.249615][ T6676] usb 1-1: USB disconnect, device number 7 [ 290.311851][ T6676] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 290.388539][ T6676] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 290.417651][ T6676] visor 1-1:1.0: device disconnected [ 290.485696][ T28] audit: type=1326 audit(1765386132.967:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d38f749 code=0x7ffc0000 [ 290.665803][ T28] audit: type=1326 audit(1765386132.977:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d38f749 code=0x7ffc0000 [ 290.806958][ T7567] mkiss: ax0: crc mode is auto. [ 291.141511][ T5875] block nbd5: Possible stuck request ffff888021e48000: control (read@0,1024B). Runtime 60 seconds [ 291.152325][ T5875] block nbd5: Possible stuck request ffff888021e38000: control (read@1024,1024B). Runtime 60 seconds [ 291.169279][ T5875] block nbd5: Possible stuck request ffff888021e38200: control (read@2048,1024B). Runtime 60 seconds [ 291.214880][ T5875] block nbd5: Possible stuck request ffff888021e38400: control (read@3072,1024B). Runtime 60 seconds [ 291.561776][ T28] audit: type=1326 audit(1765386132.987:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc67d38f749 code=0x7ffc0000 [ 291.969819][ T28] audit: type=1326 audit(1765386132.987:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d38f749 code=0x7ffc0000 [ 291.992181][ T28] audit: type=1326 audit(1765386132.987:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d38f749 code=0x7ffc0000 [ 292.042633][ T28] audit: type=1326 audit(1765386132.987:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc67d38f749 code=0x7ffc0000 [ 292.191254][ T28] audit: type=1326 audit(1765386132.987:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d38f749 code=0x7ffc0000 [ 292.307258][ T28] audit: type=1326 audit(1765386132.987:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d38f749 code=0x7ffc0000 [ 292.484088][ T28] audit: type=1326 audit(1765386132.997:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc67d38f749 code=0x7ffc0000 [ 292.506278][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.512957][ T28] audit: type=1326 audit(1765386132.997:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d38f749 code=0x7ffc0000 [ 292.887609][ T7569] nbd10: detected capacity change from 0 to 8589934655 [ 292.903949][ T5773] block nbd10: Receive control failed (result -104) [ 295.221923][ T7594] ALSA: mixer_oss: invalid OSS volume '' [ 295.285848][ T7594] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 295.292426][ T7594] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 295.310428][ T7594] vhci_hcd vhci_hcd.0: Device attached [ 295.458525][ T7595] vhci_hcd: connection closed [ 295.460251][ T59] vhci_hcd: stop threads [ 295.544642][ T59] vhci_hcd: release socket [ 295.579016][ T787] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 295.630952][ T59] vhci_hcd: disconnect device [ 295.646063][ T787] usb 33-1: enqueue for inactive port 0 [ 295.751311][ T787] vhci_hcd: vhci_device speed not set [ 296.021332][ T7604] mkiss: ax0: crc mode is auto. [ 298.039429][ T5875] block nbd6: Possible stuck request ffff888021e70000: control (read@0,4096B). Runtime 60 seconds [ 303.543578][ T7634] nbd11: detected capacity change from 0 to 8589934655 [ 303.787987][ T7646] mkiss: ax0: crc mode is auto. [ 304.634305][ T24] block nbd11: Send control failed (result -32) [ 304.641299][ T24] block nbd11: Request send failed, requeueing [ 304.648935][ T24] block nbd11: Dead connection, failed to find a fallback [ 304.657170][ T24] block nbd11: shutting down sockets [ 304.663613][ T24] blk_print_req_error: 48 callbacks suppressed [ 304.663627][ T24] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.679338][ T24] buffer_io_error: 122 callbacks suppressed [ 304.679352][ T24] Buffer I/O error on dev nbd11, logical block 1, async page read [ 304.723876][ T7606] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 304.736870][ T7606] Buffer I/O error on dev nbd11, logical block 2, async page read [ 304.755550][ T7606] Buffer I/O error on dev nbd11, logical block 3, async page read [ 305.218548][ T7659] ALSA: mixer_oss: invalid OSS volume '' [ 305.228292][ T7606] block nbd9: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 30 seconds [ 305.612525][ T7659] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 305.619100][ T7659] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 306.626309][ T24] block nbd7: Possible stuck request ffff888021ec0000: control (read@0,1024B). Runtime 60 seconds [ 307.219601][ T24] block nbd7: Possible stuck request ffff888021ec0200: control (read@1024,1024B). Runtime 60 seconds [ 307.231057][ T24] block nbd7: Possible stuck request ffff888021ec0400: control (read@2048,1024B). Runtime 60 seconds [ 307.242343][ T24] block nbd7: Possible stuck request ffff888021ec0600: control (read@3072,1024B). Runtime 60 seconds [ 307.258756][ T7659] vhci_hcd vhci_hcd.0: Device attached [ 307.402756][ T7666] vhci_hcd: connection closed [ 307.413012][ T5966] vhci_hcd: stop threads [ 307.438206][ T5966] vhci_hcd: release socket [ 307.448917][ T5966] vhci_hcd: disconnect device [ 308.827201][ T7689] mkiss: ax0: crc mode is auto. [ 310.357372][ T24] block nbd0: Possible stuck request ffff888021c20000: control (read@0,4096B). Runtime 120 seconds [ 310.481417][ T24] block nbd4: Possible stuck request ffff888021dd8000: control (read@0,1024B). Runtime 90 seconds [ 310.494585][ T24] block nbd4: Possible stuck request ffff888021dd8200: control (read@1024,1024B). Runtime 90 seconds [ 310.506492][ T24] block nbd4: Possible stuck request ffff888021dd8400: control (read@2048,1024B). Runtime 90 seconds [ 310.517909][ T24] block nbd4: Possible stuck request ffff888021dd8600: control (read@3072,1024B). Runtime 90 seconds [ 311.482405][ T7708] nbd12: detected capacity change from 0 to 8589934655 [ 311.498880][ T5773] block nbd12: Receive control failed (result -104) [ 312.352102][ T7729] ALSA: mixer_oss: invalid OSS volume '' [ 312.392445][ T7729] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 312.399019][ T7729] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 312.408783][ T7729] vhci_hcd vhci_hcd.0: Device attached [ 312.684069][ T787] usb 33-1: new high-speed USB device number 8 using vhci_hcd [ 313.127132][ T7730] vhci_hcd: connection closed [ 313.130661][ T7731] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 313.145559][ T7727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.158519][ T5965] vhci_hcd: stop threads [ 313.171500][ T5965] vhci_hcd: release socket [ 313.181611][ T5965] vhci_hcd: disconnect device [ 313.202221][ T7734] Falling back ldisc for ttyS3. [ 313.336037][ T7727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.507875][ T7727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.798257][ T7727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.970092][ T7727] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.985276][ T24] block nbd8: Possible stuck request ffff888021f48000: control (read@0,4096B). Runtime 60 seconds [ 315.204054][ T7727] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.218888][ T7727] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.270024][ T7727] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.360008][ T7751] syz.0.518[7751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.360153][ T7751] syz.0.518[7751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.143189][ T10] block nbd1: Possible stuck request ffff888021cc0000: control (read@0,4096B). Runtime 120 seconds [ 316.697285][ T5136] udevd[5136]: worker [7092] /devices/virtual/block/nbd5 is taking a long time [ 316.811419][ T5136] udevd[5136]: worker [6907] /devices/virtual/block/nbd4 is taking a long time [ 316.820567][ T5136] udevd[5136]: worker [6860] /devices/virtual/block/nbd1 is taking a long time [ 316.909762][ T5136] udevd[5136]: worker [7205] /devices/virtual/block/nbd7 is taking a long time [ 316.924885][ T5136] udevd[5136]: worker [6554] /devices/virtual/block/nbd0 is taking a long time [ 316.934428][ T5136] udevd[5136]: worker [7102] /devices/virtual/block/nbd6 is taking a long time [ 316.947429][ T5136] udevd[5136]: worker [6863] /devices/virtual/block/nbd8 is taking a long time [ 317.386763][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.396983][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.199748][ T7776] ALSA: mixer_oss: invalid OSS volume '' [ 318.263585][ T787] vhci_hcd: vhci_device speed not set [ 318.537482][ T7776] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 318.544045][ T7776] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 318.590214][ T7776] vhci_hcd vhci_hcd.0: Device attached [ 318.692815][ T7779] vhci_hcd: connection closed [ 318.693696][ T5965] vhci_hcd: stop threads [ 318.703110][ T5965] vhci_hcd: release socket [ 318.709790][ T5965] vhci_hcd: disconnect device [ 321.265844][ T10] block nbd5: Possible stuck request ffff888021e48000: control (read@0,1024B). Runtime 90 seconds [ 321.276672][ T10] block nbd5: Possible stuck request ffff888021e38000: control (read@1024,1024B). Runtime 90 seconds [ 321.287646][ T10] block nbd5: Possible stuck request ffff888021e38200: control (read@2048,1024B). Runtime 90 seconds [ 321.301542][ T10] block nbd5: Possible stuck request ffff888021e38400: control (read@3072,1024B). Runtime 90 seconds [ 323.141760][ T5986] block nbd10: Possible stuck request ffff888022418000: control (read@0,1024B). Runtime 30 seconds [ 323.152660][ T5986] block nbd10: Possible stuck request ffff888022418200: control (read@1024,1024B). Runtime 30 seconds [ 323.192381][ T5986] block nbd10: Possible stuck request ffff888022418400: control (read@2048,1024B). Runtime 30 seconds [ 323.240432][ T5986] block nbd10: Possible stuck request ffff888022418600: control (read@3072,1024B). Runtime 30 seconds [ 324.636326][ T7831] input: syz0 as /devices/virtual/input/input7 [ 324.831874][ T7836] 9pnet_virtio: no channels available for device syz [ 326.358151][ T7848] ALSA: mixer_oss: invalid OSS volume '' [ 326.437707][ T7848] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 326.444283][ T7848] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 326.478063][ T7848] vhci_hcd vhci_hcd.0: Device attached [ 326.736865][ T7849] vhci_hcd: connection closed [ 326.761666][ T5951] vhci_hcd: stop threads [ 327.294580][ T787] usb 33-1: new high-speed USB device number 9 using vhci_hcd [ 327.511740][ T5951] vhci_hcd: release socket [ 327.516961][ T5951] vhci_hcd: disconnect device [ 328.482304][ T10] block nbd6: Possible stuck request ffff888021e70000: control (read@0,4096B). Runtime 90 seconds [ 329.953773][ T7875] ALSA: mixer_oss: invalid OSS volume '' [ 329.987074][ T7875] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 329.993735][ T7875] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 330.018298][ T7875] vhci_hcd vhci_hcd.0: Device attached [ 330.236622][ T7874] nbd13: detected capacity change from 0 to 8589934655 [ 330.291603][ T5803] usb 35-1: new high-speed USB device number 6 using vhci_hcd [ 330.393585][ T5773] block nbd13: Receive control failed (result -104) [ 330.655580][ T7876] vhci_hcd: connection reset by peer [ 330.745228][ T5941] vhci_hcd: stop threads [ 330.749713][ T5941] vhci_hcd: release socket [ 330.911692][ T5941] vhci_hcd: disconnect device [ 331.661482][ T7891] netlink: 'syz.2.554': attribute type 4 has an invalid length. [ 331.678733][ T7891] netlink: 17 bytes leftover after parsing attributes in process `syz.2.554'. [ 332.661998][ T787] vhci_hcd: vhci_device speed not set [ 335.413670][ T5986] block nbd11: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 30 seconds [ 335.462239][ T10] block nbd9: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 60 seconds [ 335.541803][ T5803] vhci_hcd: vhci_device speed not set [ 335.739396][ T7935] 9pnet_virtio: no channels available for device syz [ 337.231493][ T5986] block nbd7: Possible stuck request ffff888021ec0000: control (read@0,1024B). Runtime 90 seconds [ 337.242441][ T5986] block nbd7: Possible stuck request ffff888021ec0200: control (read@1024,1024B). Runtime 90 seconds [ 337.261493][ T5986] block nbd7: Possible stuck request ffff888021ec0400: control (read@2048,1024B). Runtime 90 seconds [ 337.272447][ T5986] block nbd7: Possible stuck request ffff888021ec0600: control (read@3072,1024B). Runtime 90 seconds [ 337.592853][ T5136] udevd[5136]: worker [7412] /devices/virtual/block/nbd9 is taking a long time [ 340.431532][ T24] block nbd0: Possible stuck request ffff888021c20000: control (read@0,4096B). Runtime 150 seconds [ 341.098762][ T5986] block nbd4: Possible stuck request ffff888021dd8000: control (read@0,1024B). Runtime 120 seconds [ 341.110090][ T5986] block nbd4: Possible stuck request ffff888021dd8200: control (read@1024,1024B). Runtime 120 seconds [ 341.121221][ T5986] block nbd4: Possible stuck request ffff888021dd8400: control (read@2048,1024B). Runtime 120 seconds [ 341.141499][ T5986] block nbd4: Possible stuck request ffff888021dd8600: control (read@3072,1024B). Runtime 120 seconds [ 341.432702][ T7991] mkiss: ax0: crc mode is auto. [ 341.950342][ T24] block nbd12: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 30 seconds [ 341.991424][ T171] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 341.992563][ T24] block nbd12: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 30 seconds [ 342.083113][ T24] block nbd12: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 30 seconds [ 342.133498][ T24] block nbd12: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 30 seconds [ 342.236755][ T171] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 342.263915][ T171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 342.296937][ T171] usb 3-1: Product: syz [ 342.317272][ T171] usb 3-1: Manufacturer: syz [ 342.506287][ T171] usb 3-1: SerialNumber: syz [ 342.534246][ T171] usb 3-1: config 0 descriptor?? [ 342.556624][ T171] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 342.587549][ T171] dvb-usb: bulk message failed: -22 (2/0) [ 342.649946][ T171] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 343.102627][ T171] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 343.115757][ T171] usb 3-1: media controller created [ 343.302240][ T171] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.592358][ T171] cxusb: set interface failed [ 343.825832][ T171] dvb-usb: bulk message failed: -22 (1/0) [ 344.219984][ T171] DVB: Unable to find symbol mt352_attach() [ 344.226564][ T171] dvb-usb: bulk message failed: -22 (5/0) [ 344.241259][ T171] zl10353_read_register: readreg error (reg=127, ret==-121) [ 344.256882][ T171] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 344.401195][ T171] rc_core: IR keymap rc-dvico-mce not found [ 344.422420][ T171] Registered IR keymap rc-empty [ 344.447200][ T171] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 344.520735][ T171] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input8 [ 344.587771][ T171] dvb-usb: schedule remote query interval to 100 msecs. [ 344.609317][ T171] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 344.622936][ T171] usb 3-1: USB disconnect, device number 3 [ 344.721818][ T171] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 346.271346][ T24] block nbd8: Possible stuck request ffff888021f48000: control (read@0,4096B). Runtime 90 seconds [ 346.594032][ T8027] netlink: 68 bytes leftover after parsing attributes in process `syz.2.596'. [ 346.821649][ T10] block nbd1: Possible stuck request ffff888021cc0000: control (read@0,4096B). Runtime 150 seconds [ 347.244445][ T8029] nbd14: detected capacity change from 0 to 8589934655 [ 347.330800][ T8028] syz.1.595 (8028) used greatest stack depth: 17960 bytes left [ 347.421788][ T5773] block nbd14: Receive control failed (result -32) [ 347.510820][ T8035] ALSA: mixer_oss: invalid OSS volume '' [ 347.563518][ T8035] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 347.570083][ T8035] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 347.615285][ T8039] tipc: Started in network mode [ 347.648735][ T8039] tipc: Node identity 86dc70b1905, cluster identity 4711 [ 347.681642][ T8035] vhci_hcd vhci_hcd.0: Device attached [ 347.702857][ T8039] tipc: Enabled bearer , priority 0 [ 347.800594][ T8040] syzkaller0: entered promiscuous mode [ 347.825663][ T8040] syzkaller0: entered allmulticast mode [ 347.892309][ T8039] tipc: Resetting bearer [ 347.899497][ T8037] vhci_hcd: connection closed [ 347.899766][ T5966] vhci_hcd: stop threads [ 347.910565][ T5966] vhci_hcd: release socket [ 347.926756][ T8036] tipc: Resetting bearer [ 347.931222][ T5966] vhci_hcd: disconnect device [ 347.951468][ T5803] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 347.960913][ T5803] usb 37-1: enqueue for inactive port 0 [ 347.990113][ T8036] tipc: Disabling bearer [ 348.054384][ T5803] vhci_hcd: vhci_device speed not set [ 348.375143][ T8057] mkiss: ax0: crc mode is auto. [ 351.301766][ T7606] block nbd5: Possible stuck request ffff888021e48000: control (read@0,1024B). Runtime 120 seconds [ 351.318120][ T7606] block nbd5: Possible stuck request ffff888021e38000: control (read@1024,1024B). Runtime 120 seconds [ 351.367189][ T7606] block nbd5: Possible stuck request ffff888021e38200: control (read@2048,1024B). Runtime 120 seconds [ 351.470036][ T7606] block nbd5: Possible stuck request ffff888021e38400: control (read@3072,1024B). Runtime 120 seconds [ 352.741732][ T8091] mkiss: ax0: crc mode is auto. [ 354.798729][ T5986] block nbd10: Possible stuck request ffff888022418000: control (read@0,1024B). Runtime 60 seconds [ 354.809755][ T5986] block nbd10: Possible stuck request ffff888022418200: control (read@1024,1024B). Runtime 60 seconds [ 354.831627][ T5986] block nbd10: Possible stuck request ffff888022418400: control (read@2048,1024B). Runtime 60 seconds [ 354.843071][ T5986] block nbd10: Possible stuck request ffff888022418600: control (read@3072,1024B). Runtime 60 seconds [ 354.862587][ T8085] nbd15: detected capacity change from 0 to 8589934655 [ 355.030744][ T5773] block nbd15: Receive control failed (result -32) [ 355.475784][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 355.501875][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.509504][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.806104][ T8099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.617'. [ 358.981588][ T10] block nbd6: Possible stuck request ffff888021e70000: control (read@0,4096B). Runtime 120 seconds [ 359.225260][ T787] IPVS: starting estimator thread 0... [ 359.259277][ T8122] Invalid argument reading file caps for ./file0 [ 359.331279][ T8123] IPVS: using max 26 ests per chain, 62400 per kthread [ 359.521376][ T8128] mkiss: ax0: crc mode is auto. [ 361.383264][ T10] block nbd13: Possible stuck request ffff888022510000: control (read@0,1024B). Runtime 30 seconds [ 361.397742][ T10] block nbd13: Possible stuck request ffff888022510200: control (read@1024,1024B). Runtime 30 seconds [ 361.409107][ T10] block nbd13: Possible stuck request ffff888022510400: control (read@2048,1024B). Runtime 30 seconds [ 361.425878][ T10] block nbd13: Possible stuck request ffff888022510600: control (read@3072,1024B). Runtime 30 seconds [ 364.949355][ T8166] mkiss: ax0: crc mode is auto. [ 366.025645][ T10] block nbd9: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 90 seconds [ 366.142231][ T5986] block nbd11: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 60 seconds [ 367.619375][ T5986] block nbd7: Possible stuck request ffff888021ec0000: control (read@0,1024B). Runtime 120 seconds [ 367.630366][ T5986] block nbd7: Possible stuck request ffff888021ec0200: control (read@1024,1024B). Runtime 120 seconds [ 367.942526][ T5986] block nbd7: Possible stuck request ffff888021ec0400: control (read@2048,1024B). Runtime 120 seconds [ 367.953960][ T5986] block nbd7: Possible stuck request ffff888021ec0600: control (read@3072,1024B). Runtime 120 seconds [ 368.361290][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 370.349312][ T9] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 370.381183][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.391643][ T9] usb 1-1: Product: syz [ 370.400830][ T9] usb 1-1: Manufacturer: syz [ 370.414755][ T9] usb 1-1: SerialNumber: syz [ 370.633240][ T5986] block nbd0: Possible stuck request ffff888021c20000: control (read@0,4096B). Runtime 180 seconds [ 370.731544][ T9] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 372.204853][ T5986] block nbd4: Possible stuck request ffff888021dd8000: control (read@0,1024B). Runtime 150 seconds [ 372.215675][ T5986] block nbd4: Possible stuck request ffff888021dd8200: control (read@1024,1024B). Runtime 150 seconds [ 372.227122][ T5986] block nbd4: Possible stuck request ffff888021dd8400: control (read@2048,1024B). Runtime 150 seconds [ 372.238197][ T5986] block nbd4: Possible stuck request ffff888021dd8600: control (read@3072,1024B). Runtime 150 seconds [ 372.422852][ T5986] block nbd12: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 60 seconds [ 372.433926][ T5986] block nbd12: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 60 seconds [ 372.444979][ T5986] block nbd12: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 60 seconds [ 372.455960][ T5986] block nbd12: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 60 seconds [ 372.472423][ T9] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 372.533830][ T9] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 372.578730][ T9] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 375.054231][ T23] usb 1-1: USB disconnect, device number 8 [ 375.066883][ T23] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 375.096354][ T23] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 375.128084][ T23] visor 1-1:1.0: device disconnected [ 375.289266][ T8212] mkiss: ax0: crc mode is auto. [ 377.361276][ T24] block nbd8: Possible stuck request ffff888021f48000: control (read@0,4096B). Runtime 120 seconds [ 377.371289][ T10] block nbd1: Possible stuck request ffff888021cc0000: control (read@0,4096B). Runtime 180 seconds [ 379.566519][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.574370][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.537082][ T5136] udevd[5136]: worker [7500] /devices/virtual/block/nbd10 is taking a long time [ 380.692750][ T5136] udevd[5136]: worker [6860] /devices/virtual/block/nbd1 timeout; kill it [ 380.712560][ T5136] udevd[5136]: seq 11030 '/devices/virtual/block/nbd1' killed [ 380.849856][ T8229] loop2: detected capacity change from 0 to 1024 [ 381.408649][ T10] block nbd5: Possible stuck request ffff888021e48000: control (read@0,1024B). Runtime 150 seconds [ 381.422047][ T10] block nbd5: Possible stuck request ffff888021e38000: control (read@1024,1024B). Runtime 150 seconds [ 381.442070][ T10] block nbd5: Possible stuck request ffff888021e38200: control (read@2048,1024B). Runtime 150 seconds [ 381.442966][ T5951] hfsplus: b-tree write err: -5, ino 4 [ 381.458981][ T5136] udevd[5136]: worker [6554] /devices/virtual/block/nbd0 timeout; kill it [ 381.480484][ T5136] udevd[5136]: seq 10975 '/devices/virtual/block/nbd0' killed [ 381.504785][ T5136] udevd[5136]: worker [7560] /devices/virtual/block/nbd12 is taking a long time [ 381.521731][ T10] block nbd5: Possible stuck request ffff888021e38400: control (read@3072,1024B). Runtime 150 seconds [ 381.557622][ T5136] udevd[5136]: worker [6556] /devices/virtual/block/nbd11 is taking a long time [ 382.567370][ T8242] sctp: [Deprecated]: syz.0.654 (pid 8242) Use of int in maxseg socket option. [ 382.567370][ T8242] Use struct sctp_assoc_value instead [ 385.651964][ T8254] sctp: [Deprecated]: syz.2.658 (pid 8254) Use of int in maxseg socket option. [ 385.651964][ T8254] Use struct sctp_assoc_value instead [ 386.054706][ T8254] loop2: detected capacity change from 0 to 256 [ 387.391823][ T8256] sctp: [Deprecated]: syz.0.657 (pid 8256) Use of int in maxseg socket option. [ 387.391823][ T8256] Use struct sctp_assoc_value instead [ 389.452093][ T10] block nbd6: Possible stuck request ffff888021e70000: control (read@0,4096B). Runtime 150 seconds [ 389.452138][ T5986] block nbd10: Possible stuck request ffff888022418000: control (read@0,1024B). Runtime 90 seconds [ 389.473720][ T171] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 389.486041][ T5986] block nbd10: Possible stuck request ffff888022418200: control (read@1024,1024B). Runtime 90 seconds [ 389.500059][ T5986] block nbd10: Possible stuck request ffff888022418400: control (read@2048,1024B). Runtime 90 seconds [ 389.511483][ T5986] block nbd10: Possible stuck request ffff888022418600: control (read@3072,1024B). Runtime 90 seconds [ 389.982160][ T8260] tipc: Started in network mode [ 389.987123][ T8260] tipc: Node identity ae1efc15fb93, cluster identity 4711 [ 389.999893][ T8260] tipc: Enabled bearer , priority 0 [ 390.012391][ T8260] syzkaller0: entered promiscuous mode [ 390.017921][ T8260] syzkaller0: entered allmulticast mode [ 390.828040][ T8265] tipc: Resetting bearer [ 390.860878][ T8259] tipc: Resetting bearer [ 390.956916][ T8259] tipc: Disabling bearer [ 392.101516][ T10] block nbd13: Possible stuck request ffff888022510000: control (read@0,1024B). Runtime 60 seconds [ 392.112613][ T10] block nbd13: Possible stuck request ffff888022510200: control (read@1024,1024B). Runtime 60 seconds [ 392.124108][ T10] block nbd13: Possible stuck request ffff888022510400: control (read@2048,1024B). Runtime 60 seconds [ 392.135112][ T10] block nbd13: Possible stuck request ffff888022510600: control (read@3072,1024B). Runtime 60 seconds [ 394.116081][ T8291] mkiss: ax0: crc mode is auto. [ 394.122509][ T6676] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 396.521702][ T10] block nbd9: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 120 seconds [ 396.753298][ T5986] block nbd11: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 90 seconds [ 398.331584][ T24] block nbd7: Possible stuck request ffff888021ec0000: control (read@0,1024B). Runtime 150 seconds [ 398.342693][ T24] block nbd7: Possible stuck request ffff888021ec0200: control (read@1024,1024B). Runtime 150 seconds [ 398.353717][ T24] block nbd7: Possible stuck request ffff888021ec0400: control (read@2048,1024B). Runtime 150 seconds [ 398.364771][ T24] block nbd7: Possible stuck request ffff888021ec0600: control (read@3072,1024B). Runtime 150 seconds [ 401.151367][ T6676] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 401.314348][ T24] block nbd0: Possible stuck request ffff888021c20000: control (read@0,4096B). Runtime 210 seconds [ 401.439063][ T6676] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 401.456308][ T6676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.539815][ T8327] mkiss: ax0: crc mode is auto. [ 402.498512][ T6676] usb 4-1: Product: syz [ 402.516014][ T8326] ALSA: mixer_oss: invalid OSS volume '' [ 402.549300][ T6676] usb 4-1: Manufacturer: syz [ 402.602166][ T1093] block nbd12: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 90 seconds [ 402.611228][ T6676] usb 4-1: SerialNumber: syz [ 402.612993][ T5986] block nbd4: Possible stuck request ffff888021dd8000: control (read@0,1024B). Runtime 180 seconds [ 402.628500][ T1093] block nbd12: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 90 seconds [ 402.639983][ T5986] block nbd4: Possible stuck request ffff888021dd8200: control (read@1024,1024B). Runtime 180 seconds [ 402.651582][ T1093] block nbd12: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 90 seconds [ 402.662625][ T5986] block nbd4: Possible stuck request ffff888021dd8400: control (read@2048,1024B). Runtime 180 seconds [ 402.673694][ T1093] block nbd12: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 90 seconds [ 402.684839][ T5986] block nbd4: Possible stuck request ffff888021dd8600: control (read@3072,1024B). Runtime 180 seconds [ 403.200282][ T8334] loop2: detected capacity change from 0 to 1024 [ 403.850940][ T6676] usb 4-1: palm_os_4_probe - error -110 getting connection info [ 403.858834][ T6676] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 403.868843][ T6676] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 403.879279][ T8326] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 403.885809][ T8326] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 403.893901][ T6676] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 403.961512][ T8326] vhci_hcd vhci_hcd.0: Device attached [ 403.975771][ T5830] usb 4-1: USB disconnect, device number 8 [ 403.984161][ T5830] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 404.001040][ T5830] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 404.019783][ T5830] visor 4-1:1.0: device disconnected [ 404.148801][ T8329] vhci_hcd: connection closed [ 404.154445][ T5960] vhci_hcd: stop threads [ 404.154972][ T5951] hfsplus: b-tree write err: -5, ino 4 [ 404.159182][ T5960] vhci_hcd: release socket [ 404.164920][ T5960] vhci_hcd: disconnect device [ 404.221600][ T23] usb 33-1: new high-speed USB device number 10 using vhci_hcd [ 404.229265][ T23] usb 33-1: enqueue for inactive port 0 [ 404.324358][ T23] vhci_hcd: vhci_device speed not set [ 405.834483][ T8356] sctp: [Deprecated]: syz.0.686 (pid 8356) Use of int in maxseg socket option. [ 405.834483][ T8356] Use struct sctp_assoc_value instead [ 406.511242][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 408.223134][ T7606] block nbd1: Possible stuck request ffff888021cc0000: control (read@0,4096B). Runtime 210 seconds [ 408.234028][ T5986] block nbd8: Possible stuck request ffff888021f48000: control (read@0,4096B). Runtime 150 seconds [ 409.318659][ T8366] mkiss: ax0: crc mode is auto. [ 411.471330][ T10] block nbd5: Possible stuck request ffff888021e48000: control (read@0,1024B). Runtime 180 seconds [ 411.482248][ T10] block nbd5: Possible stuck request ffff888021e38000: control (read@1024,1024B). Runtime 180 seconds [ 411.521714][ T10] block nbd5: Possible stuck request ffff888021e38200: control (read@2048,1024B). Runtime 180 seconds [ 413.414980][ T10] block nbd5: Possible stuck request ffff888021e38400: control (read@3072,1024B). Runtime 180 seconds [ 413.419423][ T5136] udevd[5136]: worker [7092] /devices/virtual/block/nbd5 timeout; kill it [ 413.647757][ T5136] udevd[5136]: seq 11132 '/devices/virtual/block/nbd5' killed [ 413.681404][ T5136] udevd[5136]: worker [6907] /devices/virtual/block/nbd4 timeout; kill it [ 413.734873][ T5136] udevd[5136]: seq 11100 '/devices/virtual/block/nbd4' killed [ 413.745404][ T8384] ALSA: mixer_oss: invalid OSS volume '' [ 413.801271][ T5136] udevd[5136]: worker [7288] /devices/virtual/block/nbd13 is taking a long time [ 413.822004][ T8384] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 413.828588][ T8384] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 413.862569][ T8384] vhci_hcd vhci_hcd.0: Device attached [ 414.093347][ T8385] vhci_hcd: connection closed [ 414.798815][ T5941] vhci_hcd: stop threads [ 414.808102][ T5941] vhci_hcd: release socket [ 414.813266][ T5941] vhci_hcd: disconnect device [ 414.890409][ T23] usb 33-1: new high-speed USB device number 11 using vhci_hcd [ 414.927336][ T23] usb 33-1: enqueue for inactive port 0 [ 415.171474][ T23] vhci_hcd: vhci_device speed not set [ 416.141342][ T5830] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 416.501024][ T5830] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 416.532023][ T8400] nbd16: detected capacity change from 0 to 8589934655 [ 417.050775][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.069101][ T5830] usb 4-1: Product: syz [ 417.078539][ T5830] usb 4-1: Manufacturer: syz [ 417.086289][ T5830] usb 4-1: SerialNumber: syz [ 417.192947][ T8410] mkiss: ax0: crc mode is auto. [ 417.455609][ T5830] usb 4-1: palm_os_4_probe - error -110 getting connection info [ 417.511161][ T5773] block nbd16: Receive control failed (result -32) [ 417.782279][ T5830] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 418.644036][ T5830] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 418.665901][ T5830] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 418.681678][ T5830] usb 4-1: USB disconnect, device number 9 [ 418.694371][ T5830] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 418.713348][ T5830] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 418.733297][ T5830] visor 4-1:1.0: device disconnected [ 419.781426][ T10] block nbd6: Possible stuck request ffff888021e70000: control (read@0,4096B). Runtime 180 seconds [ 419.811219][ T5986] block nbd10: Possible stuck request ffff888022418000: control (read@0,1024B). Runtime 120 seconds [ 419.822240][ T5986] block nbd10: Possible stuck request ffff888022418200: control (read@1024,1024B). Runtime 120 seconds [ 419.833808][ T5986] block nbd10: Possible stuck request ffff888022418400: control (read@2048,1024B). Runtime 120 seconds [ 419.845568][ T5986] block nbd10: Possible stuck request ffff888022418600: control (read@3072,1024B). Runtime 120 seconds [ 422.351391][ T7606] block nbd13: Possible stuck request ffff888022510000: control (read@0,1024B). Runtime 90 seconds [ 422.362163][ T7606] block nbd13: Possible stuck request ffff888022510200: control (read@1024,1024B). Runtime 90 seconds [ 422.374121][ T7606] block nbd13: Possible stuck request ffff888022510400: control (read@2048,1024B). Runtime 90 seconds [ 422.385155][ T7606] block nbd13: Possible stuck request ffff888022510600: control (read@3072,1024B). Runtime 90 seconds [ 422.577730][ T8432] tipc: Enabled bearer , priority 0 [ 422.596976][ T8432] syzkaller0: entered promiscuous mode [ 422.615821][ T8432] syzkaller0: entered allmulticast mode [ 422.661912][ T8432] tipc: Resetting bearer [ 422.681939][ T8431] tipc: Resetting bearer [ 422.749702][ T8431] tipc: Disabling bearer [ 423.072094][ T8443] ALSA: mixer_oss: invalid OSS volume '' [ 423.099156][ T8443] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 423.105730][ T8443] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 423.125216][ T8442] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 423.131764][ T8442] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 423.139433][ T8442] vhci_hcd vhci_hcd.0: Device attached [ 423.152841][ T8446] vhci_hcd: connection closed [ 423.153539][ T5965] vhci_hcd: stop threads [ 423.168259][ T5965] vhci_hcd: release socket [ 423.170480][ T8443] vhci_hcd vhci_hcd.0: Device attached [ 423.181043][ T5965] vhci_hcd: disconnect device [ 423.441309][ T23] usb 33-1: new high-speed USB device number 12 using vhci_hcd [ 423.526113][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.712'. [ 423.616208][ T8444] vhci_hcd: connection reset by peer [ 423.624882][ T5954] vhci_hcd: stop threads [ 423.638491][ T5954] vhci_hcd: release socket [ 423.666584][ T5954] vhci_hcd: disconnect device [ 424.472963][ T8449] [U]  [ 426.821827][ T1093] block nbd11: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 120 seconds [ 426.981392][ T7606] block nbd9: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 150 seconds [ 428.532287][ T8485] tipc: Enabled bearer , priority 0 [ 428.540132][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 428.581342][ T23] vhci_hcd: vhci_device speed not set [ 428.610651][ T8491] sctp: [Deprecated]: syz.0.723 (pid 8491) Use of int in maxseg socket option. [ 428.610651][ T8491] Use struct sctp_assoc_value instead [ 428.755334][ T5986] block nbd7: Possible stuck request ffff888021ec0000: control (read@0,1024B). Runtime 180 seconds [ 428.766462][ T5986] block nbd7: Possible stuck request ffff888021ec0200: control (read@1024,1024B). Runtime 180 seconds [ 428.778038][ T5986] block nbd7: Possible stuck request ffff888021ec0400: control (read@2048,1024B). Runtime 180 seconds [ 428.789409][ T5986] block nbd7: Possible stuck request ffff888021ec0600: control (read@3072,1024B). Runtime 180 seconds [ 429.741871][ T8501] ALSA: mixer_oss: invalid OSS volume '' [ 431.006946][ T8501] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 431.013519][ T8501] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 431.060431][ T8501] vhci_hcd vhci_hcd.0: Device attached [ 431.100723][ T8509] vhci_hcd: connection closed [ 431.115206][ T5960] vhci_hcd: stop threads [ 431.128939][ T5960] vhci_hcd: release socket [ 431.142436][ T5960] vhci_hcd: disconnect device [ 431.293358][ T5136] udevd[5136]: worker [7205] /devices/virtual/block/nbd7 timeout; kill it [ 431.302921][ T5136] udevd[5136]: seq 11185 '/devices/virtual/block/nbd7' killed [ 431.323894][ T5136] udevd[5136]: worker [7102] /devices/virtual/block/nbd6 timeout; kill it [ 431.338789][ T5136] udevd[5136]: seq 11163 '/devices/virtual/block/nbd6' killed [ 431.487084][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.494553][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.148785][ T5986] block nbd0: Possible stuck request ffff888021c20000: control (read@0,4096B). Runtime 240 seconds [ 433.083183][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.142456][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.233610][ T5986] block nbd12: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 120 seconds [ 433.244563][ T1093] block nbd4: Possible stuck request ffff888021dd8000: control (read@0,1024B). Runtime 210 seconds [ 433.255920][ T1093] block nbd4: Possible stuck request ffff888021dd8200: control (read@1024,1024B). Runtime 210 seconds [ 433.267108][ T5986] block nbd12: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 120 seconds [ 433.278470][ T1093] block nbd4: Possible stuck request ffff888021dd8400: control (read@2048,1024B). Runtime 210 seconds [ 433.289993][ T5986] block nbd12: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 120 seconds [ 433.301693][ T1093] block nbd4: Possible stuck request ffff888021dd8600: control (read@3072,1024B). Runtime 210 seconds [ 433.313130][ T5986] block nbd12: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 120 seconds [ 433.696948][ T8489] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.706047][ T8489] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.715023][ T8489] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.731291][ T8489] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.982853][ T8485] syzkaller0: entered promiscuous mode [ 433.988404][ T8485] syzkaller0: entered allmulticast mode [ 434.007152][ T8494] tipc: Resetting bearer [ 434.013482][ T8484] tipc: Resetting bearer [ 434.045319][ T8484] tipc: Disabling bearer [ 434.057030][ T9] tipc: Node number set to 1435368469 [ 435.041495][ T5136] udevd[5136]: worker [6863] /devices/virtual/block/nbd8 timeout; kill it [ 435.111197][ T5136] udevd[5136]: seq 11213 '/devices/virtual/block/nbd8' killed [ 435.625361][ T8535] sctp: [Deprecated]: syz.0.733 (pid 8535) Use of int in maxseg socket option. [ 435.625361][ T8535] Use struct sctp_assoc_value instead [ 436.006886][ T8537] nbd17: detected capacity change from 0 to 8589934655 [ 436.086205][ T5773] block nbd17: Receive control failed (result -32) [ 436.364251][ T8542] ALSA: mixer_oss: invalid OSS volume '' [ 436.413010][ T8542] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 436.419674][ T8542] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 436.446652][ T8542] vhci_hcd vhci_hcd.0: Device attached [ 436.655661][ T8547] vhci_hcd: connection closed [ 436.655882][ T59] vhci_hcd: stop threads [ 436.684099][ T59] vhci_hcd: release socket [ 436.696462][ T8552] tipc: Started in network mode [ 436.704595][ T59] vhci_hcd: disconnect device [ 436.710472][ T8552] tipc: Node identity 66b95986efd, cluster identity 4711 [ 436.711840][ T5803] usb 35-1: new high-speed USB device number 7 using vhci_hcd [ 436.719854][ T8552] tipc: Enabled bearer , priority 0 [ 436.738132][ T8552] syzkaller0: entered promiscuous mode [ 436.746942][ T8552] syzkaller0: entered allmulticast mode [ 436.763936][ T5803] usb 35-1: enqueue for inactive port 0 [ 436.775015][ T8552] tipc: Resetting bearer [ 436.786898][ T8551] tipc: Resetting bearer [ 436.834522][ T8551] tipc: Disabling bearer [ 436.902006][ T5803] vhci_hcd: vhci_device speed not set [ 437.050142][ T8555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.740'. [ 437.995283][ T8554] [U]  [ 438.288344][ T8568] lo speed is unknown, defaulting to 1000 [ 438.301575][ T8568] lo speed is unknown, defaulting to 1000 [ 438.345071][ T7606] block nbd1: Possible stuck request ffff888021cc0000: control (read@0,4096B). Runtime 240 seconds [ 438.354115][ T5986] block nbd8: Possible stuck request ffff888021f48000: control (read@0,4096B). Runtime 180 seconds [ 438.378371][ T8568] lo speed is unknown, defaulting to 1000 [ 438.404404][ T8568] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 438.770255][ T8578] sctp: [Deprecated]: syz.1.746 (pid 8578) Use of int in maxseg socket option. [ 438.770255][ T8578] Use struct sctp_assoc_value instead [ 438.863247][ T8568] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 438.998088][ T8568] lo speed is unknown, defaulting to 1000 [ 439.211944][ T8568] lo speed is unknown, defaulting to 1000 [ 439.219509][ T8568] lo speed is unknown, defaulting to 1000 [ 439.226318][ T8584] nbd18: detected capacity change from 0 to 8589934655 [ 439.388419][ T8568] lo speed is unknown, defaulting to 1000 [ 439.462813][ T5773] block nbd18: Receive control failed (result -32) [ 439.790879][ T8593] tipc: Enabled bearer , priority 0 [ 439.801603][ T8593] syzkaller0: entered promiscuous mode [ 439.807393][ T8593] syzkaller0: entered allmulticast mode [ 439.831429][ T8593] tipc: Resetting bearer [ 440.000178][ T8592] tipc: Resetting bearer [ 440.113042][ T8592] tipc: Disabling bearer [ 440.170680][ T8598] ALSA: mixer_oss: invalid OSS volume '' [ 440.215018][ T8598] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 440.221607][ T8598] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 440.243656][ T8598] vhci_hcd vhci_hcd.0: Device attached [ 440.266892][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.273521][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.501583][ T23] usb 37-1: new high-speed USB device number 7 using vhci_hcd [ 440.753790][ T8599] vhci_hcd: connection reset by peer [ 440.769392][ T59] vhci_hcd: stop threads [ 440.922557][ T59] vhci_hcd: release socket [ 440.928225][ T59] vhci_hcd: disconnect device [ 441.161264][ T8616] sctp: [Deprecated]: syz.3.759 (pid 8616) Use of int in maxseg socket option. [ 441.161264][ T8616] Use struct sctp_assoc_value instead [ 441.190663][ T8615] loop3: detected capacity change from 0 to 256 [ 441.675815][ T7606] block nbd5: Possible stuck request ffff888021e48000: control (read@0,1024B). Runtime 210 seconds [ 441.687123][ T7606] block nbd5: Possible stuck request ffff888021e38000: control (read@1024,1024B). Runtime 210 seconds [ 441.698657][ T7606] block nbd5: Possible stuck request ffff888021e38200: control (read@2048,1024B). Runtime 210 seconds [ 443.474723][ T7606] block nbd5: Possible stuck request ffff888021e38400: control (read@3072,1024B). Runtime 210 seconds [ 445.702192][ T23] vhci_hcd: vhci_device speed not set [ 445.886541][ T8658] tipc: Started in network mode [ 445.894713][ T8658] tipc: Node identity ea1bf53ca8de, cluster identity 4711 [ 445.903722][ T8658] tipc: Enabled bearer , priority 0 [ 445.915462][ T8658] syzkaller0: entered promiscuous mode [ 445.953469][ T8658] syzkaller0: entered allmulticast mode [ 445.985675][ T8658] tipc: Resetting bearer [ 446.001633][ T8657] tipc: Resetting bearer [ 446.032710][ T8657] tipc: Disabling bearer [ 447.339300][ T8667] sctp: [Deprecated]: syz.0.771 (pid 8667) Use of int in maxseg socket option. [ 447.339300][ T8667] Use struct sctp_assoc_value instead [ 449.861397][ T5986] block nbd10: Possible stuck request ffff888022418000: control (read@0,1024B). Runtime 150 seconds [ 449.861407][ T7606] block nbd6: Possible stuck request ffff888021e70000: control (read@0,4096B). Runtime 210 seconds [ 449.883490][ T5986] block nbd10: Possible stuck request ffff888022418200: control (read@1024,1024B). Runtime 150 seconds [ 449.894607][ T5986] block nbd10: Possible stuck request ffff888022418400: control (read@2048,1024B). Runtime 150 seconds [ 449.906517][ T5986] block nbd10: Possible stuck request ffff888022418600: control (read@3072,1024B). Runtime 150 seconds [ 450.291376][ T8685] ALSA: mixer_oss: invalid OSS volume '' [ 451.389635][ T8685] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 451.396219][ T8685] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 451.406510][ T8685] vhci_hcd vhci_hcd.0: Device attached [ 453.238052][ T7606] block nbd13: Possible stuck request ffff888022510000: control (read@0,1024B). Runtime 120 seconds [ 453.257637][ T7606] block nbd13: Possible stuck request ffff888022510200: control (read@1024,1024B). Runtime 120 seconds [ 453.269056][ T7606] block nbd13: Possible stuck request ffff888022510400: control (read@2048,1024B). Runtime 120 seconds [ 453.280360][ T7606] block nbd13: Possible stuck request ffff888022510600: control (read@3072,1024B). Runtime 120 seconds [ 453.538113][ T8686] vhci_hcd: connection closed [ 453.546968][ T5954] vhci_hcd: stop threads [ 453.556115][ T5954] vhci_hcd: release socket [ 453.565056][ T5954] vhci_hcd: disconnect device [ 453.612703][ T8682] nbd19: detected capacity change from 0 to 8589934655 [ 454.361395][ T5829] usb 39-1: new high-speed USB device number 8 using vhci_hcd [ 454.403612][ T5829] usb 39-1: enqueue for inactive port 0 [ 454.501443][ T5829] vhci_hcd: vhci_device speed not set [ 454.526957][ T5773] block nbd19: Receive control failed (result -32) [ 456.394341][ T8720] sctp: [Deprecated]: syz.0.784 (pid 8720) Use of int in maxseg socket option. [ 456.394341][ T8720] Use struct sctp_assoc_value instead [ 457.561275][ T7606] block nbd9: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 180 seconds [ 457.764152][ T5986] block nbd11: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 150 seconds [ 458.851270][ T5986] block nbd7: Possible stuck request ffff888021ec0000: control (read@0,1024B). Runtime 210 seconds [ 458.862038][ T5986] block nbd7: Possible stuck request ffff888021ec0200: control (read@1024,1024B). Runtime 210 seconds [ 458.873080][ T5986] block nbd7: Possible stuck request ffff888021ec0400: control (read@2048,1024B). Runtime 210 seconds [ 458.884207][ T5986] block nbd7: Possible stuck request ffff888021ec0600: control (read@3072,1024B). Runtime 210 seconds [ 459.272934][ T8736] loop3: detected capacity change from 0 to 256 [ 460.910376][ T8750] siw: device registration error -23 [ 461.015239][ T8751] ALSA: mixer_oss: invalid OSS volume '' [ 461.091229][ T8751] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 461.097809][ T8751] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 461.176952][ T8751] vhci_hcd vhci_hcd.0: Device attached [ 461.660074][ T8763] sctp: [Deprecated]: syz.1.795 (pid 8763) Use of int in maxseg socket option. [ 461.660074][ T8763] Use struct sctp_assoc_value instead [ 461.754533][ T8752] vhci_hcd: connection closed [ 461.754972][ T5941] vhci_hcd: stop threads [ 461.767092][ T5941] vhci_hcd: release socket [ 461.772144][ T5941] vhci_hcd: disconnect device [ 461.821272][ T787] usb 37-1: new high-speed USB device number 8 using vhci_hcd [ 461.861635][ T787] usb 37-1: enqueue for inactive port 0 [ 461.951835][ T787] vhci_hcd: vhci_device speed not set [ 463.183970][ T5986] block nbd0: Possible stuck request ffff888021c20000: control (read@0,4096B). Runtime 270 seconds [ 463.301864][ T5986] block nbd4: Possible stuck request ffff888021dd8000: control (read@0,1024B). Runtime 240 seconds [ 463.312918][ T1093] block nbd12: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 150 seconds [ 463.323824][ T1093] block nbd12: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 150 seconds [ 463.341263][ T5986] block nbd4: Possible stuck request ffff888021dd8200: control (read@1024,1024B). Runtime 240 seconds [ 463.352379][ T5986] block nbd4: Possible stuck request ffff888021dd8400: control (read@2048,1024B). Runtime 240 seconds [ 463.364295][ T1093] block nbd12: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 150 seconds [ 463.375606][ T1093] block nbd12: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 150 seconds [ 463.386776][ T5986] block nbd4: Possible stuck request ffff888021dd8600: control (read@3072,1024B). Runtime 240 seconds [ 464.562797][ T8775] tipc: Enabled bearer , priority 0 [ 464.583159][ T8775] syzkaller0: entered promiscuous mode [ 464.588884][ T8775] syzkaller0: entered allmulticast mode [ 464.649910][ T8775] tipc: Resetting bearer [ 464.691309][ T8773] tipc: Resetting bearer [ 464.732224][ T8773] tipc: Disabling bearer [ 465.226324][ T8786] loop3: detected capacity change from 0 to 1024 [ 465.853276][ T5960] hfsplus: b-tree write err: -5, ino 4 [ 466.451187][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 466.666604][ T787] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 466.712981][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.745079][ T787] usb 3-1: Product: syz [ 466.752363][ T787] usb 3-1: Manufacturer: syz [ 466.757323][ T787] usb 3-1: SerialNumber: syz [ 467.018395][ T8798] loop3: detected capacity change from 0 to 256 [ 467.268346][ T787] usb 3-1: palm_os_4_probe - error -110 getting connection info [ 467.276296][ T787] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 467.286211][ T787] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 467.297100][ T787] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 467.757021][ T787] usb 3-1: USB disconnect, device number 4 [ 467.772979][ T787] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 467.803198][ T787] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 467.819504][ T787] visor 3-1:1.0: device disconnected [ 468.421436][ T10] block nbd1: Possible stuck request ffff888021cc0000: control (read@0,4096B). Runtime 270 seconds [ 468.779613][ T1093] block nbd8: Possible stuck request ffff888021f48000: control (read@0,4096B). Runtime 210 seconds [ 468.891396][ T8807] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 468.897970][ T8807] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 468.955415][ T8807] vhci_hcd vhci_hcd.0: Device attached [ 469.122077][ T8808] vhci_hcd: connection closed [ 469.122788][ T5960] vhci_hcd: stop threads [ 469.141029][ T8800] ALSA: mixer_oss: invalid OSS volume '' [ 469.185004][ T5960] vhci_hcd: release socket [ 469.221639][ T787] usb 35-1: new high-speed USB device number 8 using vhci_hcd [ 470.003916][ T5960] vhci_hcd: disconnect device [ 470.042014][ T787] usb 35-1: enqueue for inactive port 0 [ 470.141305][ T787] vhci_hcd: vhci_device speed not set [ 470.799994][ T8838] overlayfs: failed to resolve './file1': -2 [ 471.611209][ T171] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 473.215059][ T7606] block nbd5: Possible stuck request ffff888021e48000: control (read@0,1024B). Runtime 240 seconds [ 473.225969][ T7606] block nbd5: Possible stuck request ffff888021e38000: control (read@1024,1024B). Runtime 240 seconds [ 473.237156][ T7606] block nbd5: Possible stuck request ffff888021e38200: control (read@2048,1024B). Runtime 240 seconds [ 473.252841][ T171] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 473.447891][ T171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.461193][ T171] usb 1-1: Product: syz [ 473.465411][ T171] usb 1-1: Manufacturer: syz [ 473.471502][ T171] usb 1-1: SerialNumber: syz [ 473.491515][ T7606] block nbd5: Possible stuck request ffff888021e38400: control (read@3072,1024B). Runtime 240 seconds [ 473.922090][ T171] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 474.099297][ T171] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 474.286805][ T171] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 474.405195][ T171] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 474.447199][ T787] usb 1-1: USB disconnect, device number 9 [ 474.476153][ T787] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 474.489671][ T787] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 474.511731][ T787] visor 1-1:1.0: device disconnected [ 474.663049][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.821'. [ 475.556647][ T8859] [U]  [ 477.375691][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 477.375708][ T28] audit: type=1326 audit(1765386319.697:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.1.825" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67d38f749 code=0x0 [ 477.410169][ T8877] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 477.416715][ T8877] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 477.441702][ T8877] vhci_hcd vhci_hcd.0: Device attached [ 477.519168][ T8880] vhci_hcd: connection closed [ 477.540164][ T5965] vhci_hcd: stop threads [ 477.559709][ T5965] vhci_hcd: release socket [ 477.572024][ T5965] vhci_hcd: disconnect device [ 477.579908][ T8866] ALSA: mixer_oss: invalid OSS volume '' [ 477.650711][ T8889] overlayfs: failed to resolve './file1': -2 [ 477.915784][ T8892] overlayfs: failed to resolve './file0': -2 [ 478.420485][ T8900] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 478.427062][ T8900] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 478.467803][ T8900] vhci_hcd vhci_hcd.0: Device attached [ 478.731788][ T171] usb 35-1: new high-speed USB device number 9 using vhci_hcd [ 478.917672][ T8901] vhci_hcd: connection reset by peer [ 478.932464][ T5965] vhci_hcd: stop threads [ 478.958647][ T5965] vhci_hcd: release socket [ 478.958707][ T5965] vhci_hcd: disconnect device [ 481.714261][ T7606] block nbd6: Possible stuck request ffff888021e70000: control (read@0,4096B). Runtime 240 seconds [ 481.750125][ T1093] block nbd10: Possible stuck request ffff888022418000: control (read@0,1024B). Runtime 180 seconds [ 481.761393][ T1093] block nbd10: Possible stuck request ffff888022418200: control (read@1024,1024B). Runtime 180 seconds [ 481.772533][ T1093] block nbd10: Possible stuck request ffff888022418400: control (read@2048,1024B). Runtime 180 seconds [ 481.784099][ T1093] block nbd10: Possible stuck request ffff888022418600: control (read@3072,1024B). Runtime 180 seconds [ 482.355739][ T5136] udevd[5136]: worker [7500] /devices/virtual/block/nbd10 timeout; kill it [ 482.476199][ T5136] udevd[5136]: seq 11321 '/devices/virtual/block/nbd10' killed [ 482.535504][ T5136] udevd[5136]: worker [7412] /devices/virtual/block/nbd9 timeout; kill it [ 482.589536][ T5136] udevd[5136]: seq 11243 '/devices/virtual/block/nbd9' killed [ 482.802743][ T8930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.386258][ T8939] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 483.392834][ T8939] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 483.425559][ T8939] vhci_hcd vhci_hcd.0: Device attached [ 483.753254][ T8940] vhci_hcd: connection closed [ 483.754779][ T5960] vhci_hcd: stop threads [ 483.781338][ T10] block nbd13: Possible stuck request ffff888022510000: control (read@0,1024B). Runtime 150 seconds [ 483.792515][ T10] block nbd13: Possible stuck request ffff888022510200: control (read@1024,1024B). Runtime 150 seconds [ 483.812416][ T10] block nbd13: Possible stuck request ffff888022510400: control (read@2048,1024B). Runtime 150 seconds [ 483.860972][ T10] block nbd13: Possible stuck request ffff888022510600: control (read@3072,1024B). Runtime 150 seconds [ 484.481500][ T8934] ALSA: mixer_oss: invalid OSS volume '' [ 484.497485][ T5960] vhci_hcd: release socket [ 484.725139][ T5960] vhci_hcd: disconnect device [ 484.956923][ T8955] loop3: detected capacity change from 0 to 256 [ 486.404800][ T171] vhci_hcd: vhci_device speed not set [ 487.622436][ T7606] block nbd9: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 210 seconds [ 488.411981][ T1093] block nbd11: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 180 seconds [ 488.838558][ T8979] ALSA: mixer_oss: invalid OSS volume '' [ 488.941214][ T1093] block nbd7: Possible stuck request ffff888021ec0000: control (read@0,1024B). Runtime 240 seconds [ 488.952206][ T1093] block nbd7: Possible stuck request ffff888021ec0200: control (read@1024,1024B). Runtime 240 seconds [ 488.963762][ T1093] block nbd7: Possible stuck request ffff888021ec0400: control (read@2048,1024B). Runtime 240 seconds [ 488.974822][ T1093] block nbd7: Possible stuck request ffff888021ec0600: control (read@3072,1024B). Runtime 240 seconds [ 489.014314][ T8979] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 489.020902][ T8979] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 489.124253][ T8979] vhci_hcd vhci_hcd.0: Device attached [ 489.661195][ T787] usb 33-1: new high-speed USB device number 13 using vhci_hcd [ 489.914330][ T8980] vhci_hcd: connection reset by peer [ 489.936495][ T5960] vhci_hcd: stop threads [ 489.940879][ T5960] vhci_hcd: release socket [ 489.945925][ T5960] vhci_hcd: disconnect device [ 491.236655][ T5136] udevd[5136]: worker [6556] /devices/virtual/block/nbd11 timeout; kill it [ 491.273646][ T5136] udevd[5136]: seq 11341 '/devices/virtual/block/nbd11' killed [ 492.561190][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 492.746520][ T23] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 492.758258][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.905743][ T23] usb 4-1: Product: syz [ 492.909986][ T23] usb 4-1: Manufacturer: syz [ 492.915583][ T23] usb 4-1: SerialNumber: syz [ 493.104085][ T9004] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 493.110664][ T9004] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 493.121485][ T9004] vhci_hcd vhci_hcd.0: Device attached [ 493.241953][ T23] usb 4-1: palm_os_4_probe - error -110 getting connection info [ 493.250053][ T23] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 493.401331][ T5803] usb 35-1: new high-speed USB device number 10 using vhci_hcd [ 493.416463][ T24] block nbd4: Possible stuck request ffff888021dd8000: control (read@0,1024B). Runtime 270 seconds [ 493.427780][ T1093] block nbd0: Possible stuck request ffff888021c20000: control (read@0,4096B). Runtime 300 seconds [ 493.438668][ T24] block nbd4: Possible stuck request ffff888021dd8200: control (read@1024,1024B). Runtime 270 seconds [ 493.449827][ T5986] block nbd12: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 180 seconds [ 493.461691][ T5986] block nbd12: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 180 seconds [ 493.472931][ T24] block nbd4: Possible stuck request ffff888021dd8400: control (read@2048,1024B). Runtime 270 seconds [ 493.484145][ T24] block nbd4: Possible stuck request ffff888021dd8600: control (read@3072,1024B). Runtime 270 seconds [ 493.495256][ T5986] block nbd12: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 180 seconds [ 493.507615][ T5986] block nbd12: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 180 seconds [ 493.776248][ T23] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 493.815536][ T23] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 494.015231][ T9005] vhci_hcd: connection reset by peer [ 494.070697][ T5966] vhci_hcd: stop threads [ 494.077822][ T5966] vhci_hcd: release socket [ 494.087829][ T5966] vhci_hcd: disconnect device [ 494.282563][ T23] usb 4-1: USB disconnect, device number 10 [ 494.315783][ T23] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 494.351619][ T23] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 494.634618][ T9012] sctp: [Deprecated]: syz.2.863 (pid 9012) Use of int in maxseg socket option. [ 494.634618][ T9012] Use struct sctp_assoc_value instead [ 494.652246][ T9012] loop2: detected capacity change from 0 to 256 [ 494.672121][ T23] visor 4-1:1.0: device disconnected [ 494.981216][ T787] vhci_hcd: vhci_device speed not set [ 495.133873][ T9014] loop2: detected capacity change from 0 to 1024 [ 498.501481][ T5803] vhci_hcd: vhci_device speed not set [ 498.526403][ T7606] block nbd1: Possible stuck request ffff888021cc0000: control (read@0,4096B). Runtime 300 seconds [ 499.021505][ T5136] udevd[5136]: worker [7560] /devices/virtual/block/nbd12 timeout; kill it [ 499.100447][ T5136] udevd[5136]: seq 11354 '/devices/virtual/block/nbd12' killed [ 499.864142][ T5986] block nbd8: Possible stuck request ffff888021f48000: control (read@0,4096B). Runtime 240 seconds [ 500.160179][ T9053] sctp: [Deprecated]: syz.1.874 (pid 9053) Use of int in maxseg socket option. [ 500.160179][ T9053] Use struct sctp_assoc_value instead [ 500.395133][ T9056] loop2: detected capacity change from 0 to 1024 [ 500.450847][ T9058] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 500.450875][ T9058] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 500.453081][ T9058] vhci_hcd vhci_hcd.0: Device attached [ 500.493090][ T9059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.875'. [ 500.735425][ T5859] usb 39-1: new high-speed USB device number 9 using vhci_hcd [ 501.251703][ T9060] vhci_hcd: connection reset by peer [ 501.385666][ T9057] [U]  [ 501.404315][ T5951] vhci_hcd: stop threads [ 501.408651][ T5951] vhci_hcd: release socket [ 501.447034][ T5951] vhci_hcd: disconnect device [ 501.495629][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.878'. [ 501.532099][ T9066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.767347][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.793483][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.393518][ T9068] [U]  [ 503.174707][ T9083] loop3: detected capacity change from 0 to 1024 [ 503.621860][ T7606] block nbd5: Possible stuck request ffff888021e48000: control (read@0,1024B). Runtime 270 seconds [ 503.632986][ T7606] block nbd5: Possible stuck request ffff888021e38000: control (read@1024,1024B). Runtime 270 seconds [ 503.644273][ T7606] block nbd5: Possible stuck request ffff888021e38200: control (read@2048,1024B). Runtime 270 seconds [ 503.655403][ T7606] block nbd5: Possible stuck request ffff888021e38400: control (read@3072,1024B). Runtime 270 seconds [ 503.860540][ T5966] hfsplus: b-tree write err: -5, ino 4 [ 505.861777][ T5859] vhci_hcd: vhci_device speed not set [ 506.707519][ T9104] sctp: [Deprecated]: syz.2.886 (pid 9104) Use of int in maxseg socket option. [ 506.707519][ T9104] Use struct sctp_assoc_value instead [ 506.727241][ T9104] loop2: detected capacity change from 0 to 256 [ 508.157468][ T9111] [U]  [ 509.617491][ T9128] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 509.624052][ T9128] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 511.262726][ T9128] vhci_hcd vhci_hcd.0: Device attached [ 511.944009][ T5859] usb 33-1: new high-speed USB device number 14 using vhci_hcd [ 512.096864][ T5986] block nbd10: Possible stuck request ffff888022418000: control (read@0,1024B). Runtime 210 seconds [ 512.096954][ T7606] block nbd6: Possible stuck request ffff888021e70000: control (read@0,4096B). Runtime 270 seconds [ 512.108114][ T5986] block nbd10: Possible stuck request ffff888022418200: control (read@1024,1024B). Runtime 210 seconds [ 512.129821][ T5986] block nbd10: Possible stuck request ffff888022418400: control (read@2048,1024B). Runtime 210 seconds [ 512.140937][ T5986] block nbd10: Possible stuck request ffff888022418600: control (read@3072,1024B). Runtime 210 seconds [ 512.442938][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'. [ 513.873736][ T7606] block nbd13: Possible stuck request ffff888022510000: control (read@0,1024B). Runtime 180 seconds [ 513.904562][ T7606] block nbd13: Possible stuck request ffff888022510200: control (read@1024,1024B). Runtime 180 seconds [ 513.916351][ T7606] block nbd13: Possible stuck request ffff888022510400: control (read@2048,1024B). Runtime 180 seconds [ 513.970856][ T7606] block nbd13: Possible stuck request ffff888022510600: control (read@3072,1024B). Runtime 180 seconds [ 516.556208][ T9164] sctp: [Deprecated]: syz.1.900 (pid 9164) Use of int in maxseg socket option. [ 516.556208][ T9164] Use struct sctp_assoc_value instead [ 516.686713][ T5136] udevd[5136]: worker [7288] /devices/virtual/block/nbd13 timeout; kill it [ 516.712671][ T5136] udevd[5136]: seq 11393 '/devices/virtual/block/nbd13' killed [ 517.749005][ T7606] block nbd9: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 240 seconds [ 519.001174][ T24] block nbd7: Possible stuck request ffff888021ec0000: control (read@0,1024B). Runtime 270 seconds [ 519.021245][ T5986] block nbd11: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 210 seconds [ 519.032294][ T24] block nbd7: Possible stuck request ffff888021ec0200: control (read@1024,1024B). Runtime 270 seconds [ 519.043445][ T24] block nbd7: Possible stuck request ffff888021ec0400: control (read@2048,1024B). Runtime 270 seconds [ 519.061618][ T24] block nbd7: Possible stuck request ffff888021ec0600: control (read@3072,1024B). Runtime 270 seconds [ 520.341649][ T9130] vhci_hcd: connection reset by peer [ 520.356676][ T5966] vhci_hcd: stop threads [ 520.360990][ T5966] vhci_hcd: release socket [ 520.366026][ T5966] vhci_hcd: disconnect device [ 520.454884][ T5859] vhci_hcd: vhci_device speed not set [ 520.770101][ T9150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.823156][ T9150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.205923][ T9183] [U]  [ 521.317884][ T9150] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.328537][ T9150] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.339512][ T9150] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.348462][ T9150] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.467083][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.905'. [ 522.349841][ T9200] loop3: detected capacity change from 0 to 256 [ 522.362978][ T171] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 522.743413][ T171] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 522.773453][ T171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.794205][ T171] usb 2-1: Product: syz [ 522.798426][ T171] usb 2-1: Manufacturer: syz [ 522.832021][ T171] usb 2-1: SerialNumber: syz [ 523.171343][ T171] usb 2-1: palm_os_4_probe - error -110 getting connection info [ 523.179087][ T171] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 523.224273][ T171] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 523.253542][ T171] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 523.326468][ T171] usb 2-1: USB disconnect, device number 9 [ 523.336873][ T171] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 523.354229][ T171] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 523.371435][ T171] visor 2-1:1.0: device disconnected [ 523.482721][ T5986] block nbd0: Possible stuck request ffff888021c20000: control (read@0,4096B). Runtime 330 seconds [ 523.495515][ T24] block nbd4: Possible stuck request ffff888021dd8000: control (read@0,1024B). Runtime 300 seconds [ 523.521270][ T24] block nbd4: Possible stuck request ffff888021dd8200: control (read@1024,1024B). Runtime 300 seconds [ 523.532567][ T24] block nbd4: Possible stuck request ffff888021dd8400: control (read@2048,1024B). Runtime 300 seconds [ 523.543742][ T24] block nbd4: Possible stuck request ffff888021dd8600: control (read@3072,1024B). Runtime 300 seconds [ 524.111474][ T24] block nbd12: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 210 seconds [ 524.122366][ T24] block nbd12: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 210 seconds [ 524.133515][ T24] block nbd12: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 210 seconds [ 524.144639][ T24] block nbd12: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 210 seconds [ 525.937514][ T9221] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 525.944104][ T9221] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 525.952467][ T9221] vhci_hcd vhci_hcd.0: Device attached [ 526.051973][ T29] INFO: task udevd:6554 blocked for more than 144 seconds. [ 526.059243][ T29] Not tainted syzkaller #0 [ 526.072342][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 526.100776][ T29] task:udevd state:D stack:23688 pid:6554 ppid:5136 flags:0x00004006 [ 526.115835][ T29] Call Trace: [ 526.119301][ T29] [ 526.122536][ T29] __schedule+0x14d2/0x44d0 [ 526.127379][ T29] ? asan.module_dtor+0x20/0x20 [ 526.149065][ T29] ? mark_lock+0x94/0x320 [ 526.156099][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.916'. [ 526.165411][ T29] ? lock_chain_count+0x20/0x20 [ 526.176500][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 526.187401][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 526.203686][ T9222] vhci_hcd: connection closed [ 526.205691][ T5965] vhci_hcd: stop threads [ 526.211210][ T29] schedule+0xbd/0x170 [ 526.223462][ T5965] vhci_hcd: release socket [ 526.229193][ T29] io_schedule+0x80/0xd0 [ 526.237263][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 526.252227][ T29] ? folio_wait_bit+0x30/0x30 [ 526.257147][ T29] ? _compound_head+0x120/0x120 [ 526.261193][ T5965] vhci_hcd: disconnect device [ 526.266919][ T29] ? filemap_add_folio+0x192/0x3c0 [ 526.280029][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 526.291343][ T5829] vhci_hcd: vhci_device speed not set [ 526.303619][ T29] ? blkdev_writepage+0x30/0x30 [ 526.313820][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 526.364082][ T29] ? blkdev_writepage+0x30/0x30 [ 526.369013][ T29] read_part_sector+0xd2/0x350 [ 526.420980][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 526.571336][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 526.576814][ T29] ? put_partition+0x350/0x350 [ 526.604879][ T29] ? alloc_pages+0x4dc/0x740 [ 526.609563][ T29] bdev_disk_changed+0x73a/0x1410 [ 526.649440][ T9224] [U]  [ 526.682397][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 526.698075][ T29] ? iput+0x347/0x920 [ 526.708189][ T29] blkdev_get_whole+0x30d/0x390 [ 526.723409][ T29] blkdev_get_by_dev+0x279/0x600 [ 526.762299][ T29] blkdev_open+0x152/0x360 [ 526.766894][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 526.772418][ T29] do_dentry_open+0x8c6/0x1500 [ 526.780285][ T29] path_openat+0x274b/0x3190 [ 526.785917][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 526.791122][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.797499][ T29] ? verify_lock_unused+0x140/0x140 [ 526.806313][ T29] ? do_filp_open+0x3d0/0x3d0 [ 526.817723][ T29] ? __virt_addr_valid+0x18c/0x540 [ 526.824348][ T29] do_filp_open+0x1c5/0x3d0 [ 526.828933][ T29] ? vfs_tmpfile+0x490/0x490 [ 526.836566][ T29] ? _raw_spin_unlock+0x28/0x40 [ 526.846312][ T29] ? alloc_fd+0x58f/0x630 [ 526.853137][ T29] do_sys_openat2+0x12c/0x1c0 [ 526.857931][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 526.865137][ T29] ? do_sys_open+0xe0/0xe0 [ 526.874909][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 526.880965][ T29] ? lock_chain_count+0x20/0x20 [ 526.888262][ T29] __x64_sys_openat+0x139/0x160 [ 526.894997][ T29] do_syscall_64+0x55/0xb0 [ 526.902812][ T29] ? clear_bhb_loop+0x40/0x90 [ 526.908437][ T29] ? clear_bhb_loop+0x40/0x90 [ 526.916262][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.927871][ T29] RIP: 0033:0x7f14fd0a7407 [ 526.974741][ T29] RSP: 002b:00007ffc56ab3dd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 527.013498][ T29] RAX: ffffffffffffffda RBX: 00007f14fd74d880 RCX: 00007f14fd0a7407 [ 527.040423][ T29] RDX: 00000000000a0800 RSI: 000055d8a13e1430 RDI: ffffffffffffff9c [ 527.068838][ T29] RBP: 000055d8a13e0910 R08: 0000000000000000 R09: 0000000000000000 [ 527.107995][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d8a13fdf10 [ 527.130213][ T29] R13: 000055d8a13f8410 R14: 0000000000000000 R15: 000055d8a13fdf10 [ 527.158053][ T29] [ 527.165182][ T29] INFO: task udevd:6860 blocked for more than 145 seconds. [ 527.185796][ T29] Not tainted syzkaller #0 [ 527.199885][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 527.225575][ T29] task:udevd state:D stack:25864 pid:6860 ppid:5136 flags:0x00004006 [ 527.246768][ T29] Call Trace: [ 527.259246][ T29] [ 527.265830][ T29] __schedule+0x14d2/0x44d0 [ 527.280658][ T29] ? asan.module_dtor+0x20/0x20 [ 527.301137][ T29] ? mark_lock+0x94/0x320 [ 527.309884][ T29] ? lock_chain_count+0x20/0x20 [ 527.334231][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 527.348960][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 527.367169][ T29] schedule+0xbd/0x170 [ 527.388583][ T29] io_schedule+0x80/0xd0 [ 527.396739][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 527.409092][ T29] ? folio_wait_bit+0x30/0x30 [ 527.419493][ T29] ? _compound_head+0x120/0x120 [ 527.430415][ T29] ? filemap_add_folio+0x192/0x3c0 [ 527.441233][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 527.453370][ T29] ? blkdev_writepage+0x30/0x30 [ 527.458421][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 527.484894][ T29] ? blkdev_writepage+0x30/0x30 [ 527.489830][ T29] read_part_sector+0xd2/0x350 [ 527.516259][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 527.535364][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 527.540890][ T29] ? put_partition+0x350/0x350 [ 527.546090][ T29] ? alloc_pages+0x4dc/0x740 [ 527.554785][ T29] bdev_disk_changed+0x73a/0x1410 [ 527.559949][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 527.565902][ T29] ? iput+0x347/0x920 [ 527.570068][ T29] blkdev_get_whole+0x30d/0x390 [ 527.576638][ T29] blkdev_get_by_dev+0x279/0x600 [ 527.581670][ T29] blkdev_open+0x152/0x360 [ 527.586150][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 527.590815][ T29] do_dentry_open+0x8c6/0x1500 [ 527.596141][ T29] path_openat+0x274b/0x3190 [ 527.600834][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 527.606037][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.612218][ T29] ? verify_lock_unused+0x140/0x140 [ 527.617486][ T29] ? do_filp_open+0x3d0/0x3d0 [ 527.622523][ T29] ? __virt_addr_valid+0x18c/0x540 [ 527.627703][ T29] do_filp_open+0x1c5/0x3d0 [ 527.632399][ T29] ? vfs_tmpfile+0x490/0x490 [ 527.637096][ T29] ? _raw_spin_unlock+0x28/0x40 [ 527.642076][ T29] ? alloc_fd+0x58f/0x630 [ 527.646454][ T29] do_sys_openat2+0x12c/0x1c0 [ 527.651242][ T29] ? do_sys_open+0xe0/0xe0 [ 527.655693][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 527.661788][ T29] ? lock_chain_count+0x20/0x20 [ 527.666805][ T29] __x64_sys_openat+0x139/0x160 [ 527.671928][ T29] do_syscall_64+0x55/0xb0 [ 527.676555][ T29] ? clear_bhb_loop+0x40/0x90 [ 527.681979][ T29] ? clear_bhb_loop+0x40/0x90 [ 527.687032][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.693090][ T29] RIP: 0033:0x7f14fd0a7407 [ 527.697557][ T29] RSP: 002b:00007ffc56ab3dd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 527.706263][ T29] RAX: ffffffffffffffda RBX: 00007f14fd74d880 RCX: 00007f14fd0a7407 [ 527.714432][ T29] RDX: 00000000000a0800 RSI: 000055d8a13fc6e0 RDI: ffffffffffffff9c [ 527.725132][ T29] RBP: 000055d8a13e0910 R08: 0000000000000000 R09: 0000000000000000 [ 527.734072][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d8a13f3e20 [ 527.744858][ T29] R13: 000055d8a13f8410 R14: 0000000000000000 R15: 000055d8a13f3e20 [ 527.753997][ T29] [ 527.757300][ T29] [ 527.757300][ T29] Showing all locks held in the system: [ 527.766314][ T29] 1 lock held by khungtaskd/29: [ 527.788892][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 527.811657][ T29] 2 locks held by getty/5527: [ 527.816440][ T29] #0: ffff8880314720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 527.826588][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 527.837763][ T29] 3 locks held by kworker/u4:21/5966: [ 527.843415][ T29] 1 lock held by udevd/6554: [ 527.848818][ T29] #0: ffff888021a674c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 527.861565][ T29] 1 lock held by udevd/6556: [ 527.866948][ T29] #0: ffff888021f1b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 527.884707][ T29] 1 lock held by udevd/6860: [ 527.889351][ T29] #0: ffff888021abe4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 527.899682][ T29] 1 lock held by udevd/6863: [ 527.908616][ T29] #0: ffff888021e854c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 527.927677][ T29] 1 lock held by udevd/6907: [ 527.932587][ T29] #0: ffff888021d2b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 527.943645][ T29] 1 lock held by udevd/7092: [ 527.948313][ T29] #0: ffff8881413784c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 527.958641][ T29] 1 lock held by udevd/7102: [ 527.963329][ T29] #0: ffff888021d3b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 527.973582][ T29] 1 lock held by udevd/7205: [ 527.978180][ T29] #0: ffff888021e804c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 527.988248][ T29] 1 lock held by udevd/7288: [ 527.992892][ T29] #0: ffff88802249d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 528.002989][ T29] 1 lock held by udevd/7412: [ 528.007598][ T29] #0: ffff888021efb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 528.017693][ T29] 1 lock held by udevd/7500: [ 528.023993][ T29] #0: ffff8881413a04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 528.034143][ T29] 1 lock held by udevd/7560: [ 528.038758][ T29] #0: ffff8880224984c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 528.048898][ T29] [ 528.052298][ T29] ============================================= [ 528.052298][ T29] [ 528.060728][ T29] NMI backtrace for cpu 1 [ 528.065085][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 528.072306][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.082381][ T29] Call Trace: [ 528.085686][ T29] [ 528.088635][ T29] dump_stack_lvl+0x16c/0x230 [ 528.093349][ T29] ? show_regs_print_info+0x20/0x20 [ 528.098559][ T29] ? load_image+0x3b0/0x3b0 [ 528.103105][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 528.108163][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 528.114337][ T29] ? _printk+0xd0/0x110 [ 528.118500][ T29] ? load_image+0x3b0/0x3b0 [ 528.123031][ T29] ? load_image+0x3b0/0x3b0 [ 528.127585][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 528.133678][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 528.139680][ T29] watchdog+0xf41/0xf80 [ 528.143863][ T29] ? watchdog+0x1e1/0xf80 [ 528.148219][ T29] kthread+0x2fa/0x390 [ 528.152327][ T29] ? hungtask_pm_notify+0x90/0x90 [ 528.157380][ T29] ? kthread_blkcg+0xd0/0xd0 [ 528.161990][ T29] ret_from_fork+0x48/0x80 [ 528.166424][ T29] ? kthread_blkcg+0xd0/0xd0 [ 528.171025][ T29] ret_from_fork_asm+0x11/0x20 [ 528.175827][ T29] [ 528.179263][ T29] Sending NMI from CPU 1 to CPUs 0: [ 528.184729][ C0] NMI backtrace for cpu 0 [ 528.184739][ C0] CPU: 0 PID: 5966 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 528.184755][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.184765][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 528.184788][ C0] RIP: 0010:batadv_iv_ogm_schedule+0x3c1/0xe90 [ 528.184808][ C0] Code: 03 00 00 48 81 44 24 50 80 0c 00 00 31 db 48 8b 44 24 20 48 89 c1 48 c1 e9 03 48 89 8c 24 88 00 00 00 48 8b 8c 24 88 00 00 00 <42> 80 3c 21 00 74 0f 48 8b 7c 24 20 e8 9e a4 b1 f7 48 8b 44 24 20 [ 528.184822][ C0] RSP: 0018:ffffc90004f479c0 EFLAGS: 00000293 [ 528.184833][ C0] RAX: ffff888060de2500 RBX: 0000000000000012 RCX: 1ffff1100c1bc4a0 [ 528.184845][ C0] RDX: 0000000000000000 RSI: ffffffff8aaace60 RDI: ffffffff8afc6f80 [ 528.184855][ C0] RBP: ffffc90004f47b00 R08: ffffffff8e4a212f R09: 1ffffffff1c94425 [ 528.184866][ C0] R10: dffffc0000000000 R11: fffffbfff1c94426 R12: dffffc0000000000 [ 528.184877][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888030cf48a4 [ 528.184888][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 528.184901][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.184911][ C0] CR2: 00007fc67b5d4f98 CR3: 0000000031524000 CR4: 00000000003506f0 [ 528.184924][ C0] Call Trace: [ 528.184930][ C0] [ 528.184942][ C0] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 528.184977][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 528.185019][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x731/0x840 [ 528.185044][ C0] ? process_scheduled_works+0x957/0x15b0 [ 528.185065][ C0] ? process_scheduled_works+0x957/0x15b0 [ 528.185084][ C0] process_scheduled_works+0xa45/0x15b0 [ 528.185118][ C0] ? assign_work+0x400/0x400 [ 528.185139][ C0] ? assign_work+0x39e/0x400 [ 528.185161][ C0] worker_thread+0xa55/0xfc0 [ 528.185193][ C0] kthread+0x2fa/0x390 [ 528.185211][ C0] ? pr_cont_work+0x560/0x560 [ 528.185235][ C0] ? kthread_blkcg+0xd0/0xd0 [ 528.185249][ C0] ret_from_fork+0x48/0x80 [ 528.185268][ C0] ? kthread_blkcg+0xd0/0xd0 [ 528.185283][ C0] ret_from_fork_asm+0x11/0x20 [ 528.185312][ C0] [ 528.403321][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 528.410211][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 528.417433][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.427501][ T29] Call Trace: [ 528.430790][ T29] [ 528.433730][ T29] dump_stack_lvl+0x16c/0x230 [ 528.438446][ T29] ? show_regs_print_info+0x20/0x20 [ 528.443670][ T29] ? load_image+0x3b0/0x3b0 [ 528.448296][ T29] panic+0x2c0/0x710 [ 528.452209][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 528.457865][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 528.462383][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 528.467948][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 528.474118][ T29] watchdog+0xf80/0xf80 [ 528.478300][ T29] ? watchdog+0x1e1/0xf80 [ 528.482649][ T29] kthread+0x2fa/0x390 [ 528.486722][ T29] ? hungtask_pm_notify+0x90/0x90 [ 528.491759][ T29] ? kthread_blkcg+0xd0/0xd0 [ 528.496375][ T29] ret_from_fork+0x48/0x80 [ 528.500802][ T29] ? kthread_blkcg+0xd0/0xd0 [ 528.505490][ T29] ret_from_fork_asm+0x11/0x20 [ 528.510278][ T29] [ 528.513665][ T29] Kernel Offset: disabled [ 528.517995][ T29] Rebooting in 86400 seconds..