last executing test programs: 2m43.137890696s ago: executing program 1 (id=60): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) socket(0x2, 0x3, 0xff) fsetxattr$security_evm(r0, &(0x7f0000000300), &(0x7f0000000340), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) 2m42.07335411s ago: executing program 1 (id=62): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0xe0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001100050003000000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="000200000220010014001a80100004800c000280"], 0x34}}, 0x880) 2m41.777480323s ago: executing program 1 (id=66): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) 2m41.408034853s ago: executing program 1 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006800e978feffffffffdbdf250a0000000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) 2m39.550324022s ago: executing program 1 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000004e40)=""/4098, 0x1002}, {&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000340)=""/137, 0x89}], 0x4}, 0x101}], 0x4, 0x40010020, 0x0) 2m36.859754738s ago: executing program 1 (id=77): setgroups(0x24, 0xffffffffffffffff) r0 = socket$inet(0x10, 0x3, 0x0) getgroups(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) 2m33.474877538s ago: executing program 3 (id=85): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000003800), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{0x0}, {&(0x7f0000008c80)="9d", 0x1}], 0x2}, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00003ab000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) close_range(0xffffffffffffffff, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f04061016200fea1405130cd0f62b9d001b"], 0x7) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x104d}], 0x1) 2m23.871127341s ago: executing program 3 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) close(0x3) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmsg$rds(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1039}], 0x1, 0x0, 0x0, 0x4000}, 0x0) write(r3, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000022, 0x0) 2m23.526452718s ago: executing program 3 (id=94): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2m23.224011946s ago: executing program 3 (id=95): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m21.475099876s ago: executing program 32 (id=77): setgroups(0x24, 0xffffffffffffffff) r0 = socket$inet(0x10, 0x3, 0x0) getgroups(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) 2m19.686764264s ago: executing program 3 (id=102): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000004e40)=""/4098, 0x1002}, {&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000340)=""/137, 0x89}], 0x4}, 0x101}], 0x4, 0x40010020, 0x0) 2m19.175907975s ago: executing program 3 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x1, 0x2, 0x2de}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000180)={0x5, &(0x7f0000000300)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}]}) mknod$loop(0x0, 0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m9.147138534s ago: executing program 2 (id=111): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x12}, {0x4}, {0x6, 0x6, '\'a'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) shutdown(0xffffffffffffffff, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00000000000000000a00000c0002800800178004f90180"], 0x30}, 0x1, 0x0, 0x0, 0x404c0c0}, 0xc000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x2480, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x23, 0x2, 0x0) 2m8.003381728s ago: executing program 2 (id=115): r0 = syz_open_dev$vim2m(&(0x7f0000003800), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{0x0}, {&(0x7f0000008c80)="9d", 0x1}], 0x2}, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x2}, 0xc) readv(r4, &(0x7f0000001c80), 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00003ab000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) close_range(r4, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f04061016200fea1405130cd0f62b9d001b"], 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x104d}], 0x1) 2m2.528130639s ago: executing program 33 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x1, 0x2, 0x2de}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000180)={0x5, &(0x7f0000000300)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}]}) mknod$loop(0x0, 0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m2.424226383s ago: executing program 2 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x42000000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, 0x0) 1m59.404008788s ago: executing program 2 (id=122): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) socket(0x2, 0x3, 0xff) fsetxattr$security_evm(r0, &(0x7f0000000300), &(0x7f0000000340), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) 1m58.27060874s ago: executing program 2 (id=124): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m56.020463518s ago: executing program 2 (id=128): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200) 1m40.685199832s ago: executing program 34 (id=128): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200) 19.188695402s ago: executing program 6 (id=259): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x34325241, 0x5, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x4, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 15.943492873s ago: executing program 6 (id=264): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x34325241, 0x5, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x4, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffc, 0x80000, 'syz1\x00'}, 0x5, 0x30, 0x1, r2, 0x0, 0x0, 'syz0\x00', 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 10.340282516s ago: executing program 6 (id=269): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x34325241, 0x5, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x4, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 9.877301305s ago: executing program 4 (id=270): socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) 9.411300625s ago: executing program 4 (id=271): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r3, &(0x7f00000014c0)=[{&(0x7f0000000280)='~', 0x1}], 0x1, 0x0, 0x0) 8.038311042s ago: executing program 4 (id=272): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) 7.977052678s ago: executing program 0 (id=273): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) 7.273360209s ago: executing program 6 (id=274): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x34325241, 0x5, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x4, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 7.268412129s ago: executing program 0 (id=275): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.953971133s ago: executing program 4 (id=276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x34325241, 0x5, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x4, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 6.591890741s ago: executing program 0 (id=277): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x34325241, 0x5, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x4, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 4.935729685s ago: executing program 0 (id=278): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000140)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x58) syz_open_procfs(0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) 4.754500401s ago: executing program 6 (id=279): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x34325241, 0x5, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x4, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffc, 0x80000, 'syz1\x00'}, 0x5, 0x30, 0x1, r2, 0x0, 0x0, 'syz0\x00', 0x0}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 3.936821758s ago: executing program 4 (id=280): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(r4, 0xffffffffffffffff, 0xffffffffffffff7c, 0x4) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) 2.069282246s ago: executing program 6 (id=281): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x34325241, 0x5, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x4, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffc, 0x80000, 'syz1\x00'}, 0x5, 0x30, 0x1, r2, 0x0, 0x0, 'syz0\x00', 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 1.596210073s ago: executing program 0 (id=282): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f00000029c0)={0x10}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000380)={r6}, &(0x7f0000000140)=0x8) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r7, 0x100, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x40}}, 0x20) 1.307052935s ago: executing program 4 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000028c0)=""/238, 0xee}, {&(0x7f00000006c0)=""/44, 0x2c}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/240, 0xf0}], 0x5}, 0x7ffffffd}], 0x3, 0x4022, 0x0) 0s ago: executing program 0 (id=284): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = socket(0x15, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 81.921624][ T5822] cgroup: Unknown subsys name 'net' [ 82.165625][ T5822] cgroup: Unknown subsys name 'cpuset' [ 82.231672][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.843512][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.773888][ T993] cfg80211: failed to load regulatory.db [ 88.076788][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.088217][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.089867][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.100403][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.107175][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.108147][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.109374][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.110147][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.133456][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.136069][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.179192][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.184295][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.187179][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.198065][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.199057][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.203122][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.204424][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.205145][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.205963][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.207570][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.227616][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.228076][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.232436][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.232783][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.233626][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.127027][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 89.178840][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 89.211945][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.226129][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 89.364107][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 90.044214][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.045163][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.045667][ T5838] bridge_slave_0: entered allmulticast mode [ 90.047305][ T5838] bridge_slave_0: entered promiscuous mode [ 90.213023][ T59] Bluetooth: hci0: command tx timeout [ 90.213026][ T5844] Bluetooth: hci1: command tx timeout [ 90.291465][ T59] Bluetooth: hci4: command tx timeout [ 90.291574][ T59] Bluetooth: hci3: command tx timeout [ 90.291767][ T5844] Bluetooth: hci2: command tx timeout [ 90.295650][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.295753][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.295884][ T5838] bridge_slave_1: entered allmulticast mode [ 90.297374][ T5838] bridge_slave_1: entered promiscuous mode [ 90.432942][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.433092][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.433275][ T5841] bridge_slave_0: entered allmulticast mode [ 90.436016][ T5841] bridge_slave_0: entered promiscuous mode [ 90.642834][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.642939][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.643089][ T5842] bridge_slave_0: entered allmulticast mode [ 90.644901][ T5842] bridge_slave_0: entered promiscuous mode [ 90.646994][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.647184][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.647348][ T5841] bridge_slave_1: entered allmulticast mode [ 90.649124][ T5841] bridge_slave_1: entered promiscuous mode [ 90.664527][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.664661][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.665197][ T5839] bridge_slave_0: entered allmulticast mode [ 90.667930][ T5839] bridge_slave_0: entered promiscuous mode [ 90.872885][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.873026][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.873218][ T5842] bridge_slave_1: entered allmulticast mode [ 90.876150][ T5842] bridge_slave_1: entered promiscuous mode [ 90.951326][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.951421][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.951532][ T5839] bridge_slave_1: entered allmulticast mode [ 90.953037][ T5839] bridge_slave_1: entered promiscuous mode [ 90.957337][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.957627][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.957771][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.957932][ T5845] bridge_slave_0: entered allmulticast mode [ 90.959653][ T5845] bridge_slave_0: entered promiscuous mode [ 91.214688][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.214928][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.215026][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.215134][ T5845] bridge_slave_1: entered allmulticast mode [ 91.217042][ T5845] bridge_slave_1: entered promiscuous mode [ 91.366708][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.581040][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.583792][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.586575][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.743848][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.806178][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.812292][ T5838] team0: Port device team_slave_0 added [ 91.817300][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.044525][ T5838] team0: Port device team_slave_1 added [ 92.048492][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.115368][ T5841] team0: Port device team_slave_0 added [ 92.290812][ T5154] Bluetooth: hci1: command tx timeout [ 92.290914][ T5844] Bluetooth: hci0: command tx timeout [ 92.323947][ T5842] team0: Port device team_slave_0 added [ 92.326056][ T5841] team0: Port device team_slave_1 added [ 92.327857][ T5839] team0: Port device team_slave_0 added [ 92.370668][ T5154] Bluetooth: hci3: command tx timeout [ 92.370698][ T5154] Bluetooth: hci4: command tx timeout [ 92.370749][ T5844] Bluetooth: hci2: command tx timeout [ 92.485029][ T5842] team0: Port device team_slave_1 added [ 92.564079][ T5839] team0: Port device team_slave_1 added [ 92.813364][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.813375][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.813388][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.816488][ T5845] team0: Port device team_slave_0 added [ 93.042616][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.042632][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.042655][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.044549][ T5845] team0: Port device team_slave_1 added [ 93.172217][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.172233][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.172255][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.352808][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.352824][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.352847][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.355357][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.355370][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.355393][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.356332][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.356342][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.356354][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.524336][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.524351][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.524375][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.539568][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.539583][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.539605][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.543193][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.543206][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.543228][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.663299][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.663314][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.663338][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.856172][ T5838] hsr_slave_0: entered promiscuous mode [ 93.857098][ T5838] hsr_slave_1: entered promiscuous mode [ 94.207860][ T5841] hsr_slave_0: entered promiscuous mode [ 94.208654][ T5841] hsr_slave_1: entered promiscuous mode [ 94.209270][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 94.209351][ T5841] Cannot create hsr debugfs directory [ 94.299994][ T5842] hsr_slave_0: entered promiscuous mode [ 94.303299][ T5842] hsr_slave_1: entered promiscuous mode [ 94.304128][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 94.304149][ T5842] Cannot create hsr debugfs directory [ 94.314118][ T5839] hsr_slave_0: entered promiscuous mode [ 94.315312][ T5839] hsr_slave_1: entered promiscuous mode [ 94.316125][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 94.316146][ T5839] Cannot create hsr debugfs directory [ 94.370896][ T5844] Bluetooth: hci0: command tx timeout [ 94.370902][ T59] Bluetooth: hci1: command tx timeout [ 94.450743][ T5844] Bluetooth: hci2: command tx timeout [ 94.450762][ T59] Bluetooth: hci4: command tx timeout [ 94.450774][ T5844] Bluetooth: hci3: command tx timeout [ 94.582839][ T5845] hsr_slave_0: entered promiscuous mode [ 94.583895][ T5845] hsr_slave_1: entered promiscuous mode [ 94.584438][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 94.584459][ T5845] Cannot create hsr debugfs directory [ 96.293839][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.329072][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.376496][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.435445][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.450599][ T5844] Bluetooth: hci1: command tx timeout [ 96.466257][ T5844] Bluetooth: hci0: command tx timeout [ 96.530844][ T5844] Bluetooth: hci3: command tx timeout [ 96.530875][ T5844] Bluetooth: hci4: command tx timeout [ 96.530895][ T5844] Bluetooth: hci2: command tx timeout [ 96.588192][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.648218][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.686023][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.728454][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.872084][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.929074][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.968738][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.010003][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.190670][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.225445][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.259456][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.330423][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.509747][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.544373][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.591542][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.595283][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.643941][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.771969][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.776178][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.833226][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.834082][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.880019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.880150][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.917028][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.962728][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.967328][ T1417] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.967462][ T1417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.032718][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.032869][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.104892][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.157428][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.157639][ T1510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.187875][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.232609][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.232977][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.374442][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.408165][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.445936][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.446180][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.517492][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.517637][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.618577][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.703985][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.704133][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.792837][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.792985][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.879085][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.082486][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.256985][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.292826][ T5838] veth0_vlan: entered promiscuous mode [ 99.344296][ T5838] veth1_vlan: entered promiscuous mode [ 99.472590][ T5841] veth0_vlan: entered promiscuous mode [ 99.536767][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.548385][ T5841] veth1_vlan: entered promiscuous mode [ 99.621334][ T5838] veth0_macvtap: entered promiscuous mode [ 99.623980][ T5842] veth0_vlan: entered promiscuous mode [ 99.660107][ T5838] veth1_macvtap: entered promiscuous mode [ 99.678693][ T5842] veth1_vlan: entered promiscuous mode [ 99.716361][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.790295][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.831907][ T5841] veth0_macvtap: entered promiscuous mode [ 99.879120][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.918626][ T5841] veth1_macvtap: entered promiscuous mode [ 99.928462][ T5839] veth0_vlan: entered promiscuous mode [ 99.956496][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.975189][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.984126][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.002944][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.037811][ T5842] veth0_macvtap: entered promiscuous mode [ 100.075215][ T5839] veth1_vlan: entered promiscuous mode [ 100.093770][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.127677][ T5842] veth1_macvtap: entered promiscuous mode [ 100.202456][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.318854][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.337234][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.364754][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.396161][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.417099][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.443622][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.443646][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.512828][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.614150][ T5839] veth0_macvtap: entered promiscuous mode [ 100.635010][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.683886][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.708266][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.708382][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.708395][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.743555][ T5839] veth1_macvtap: entered promiscuous mode [ 100.745077][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.907364][ T5845] veth0_vlan: entered promiscuous mode [ 100.911572][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.911588][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.091765][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.167087][ T5845] veth1_vlan: entered promiscuous mode [ 101.182968][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.185477][ T1417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.185492][ T1417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.257483][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.257503][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.279387][ T1510] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.294754][ T1510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.316638][ T1510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.344433][ T1510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.475463][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.475484][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.674007][ T5845] veth0_macvtap: entered promiscuous mode [ 101.679694][ T5845] veth1_macvtap: entered promiscuous mode [ 101.691151][ T5954] nbd0: detected capacity change from 0 to 127 [ 102.195427][ T5960] 9pnet_virtio: no channels available for device syz [ 102.691593][ T5154] block nbd0: Receive control failed (result -104) [ 103.079706][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.229810][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.280288][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.280308][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.336950][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.342958][ T1275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.344121][ T1275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.356956][ T1275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.402920][ T5964] nbd1: detected capacity change from 0 to 127 [ 103.638772][ T5154] block nbd1: Receive control failed (result -104) [ 103.668280][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.668299][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.914059][ T5975] nbd2: detected capacity change from 0 to 127 [ 104.079376][ T5154] block nbd2: Receive control failed (result -104) [ 104.265585][ T1510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.265605][ T1510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.347946][ T5984] nbd3: detected capacity change from 0 to 127 [ 104.980491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.041750][ T5154] block nbd3: Receive control failed (result -104) [ 105.089688][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.089708][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.600305][ T6011] netlink: 'syz.1.17': attribute type 7 has an invalid length. [ 105.600327][ T6011] netlink: 'syz.1.17': attribute type 8 has an invalid length. [ 105.984358][ T6023] openvswitch: netlink: Flow key attr not present in new flow. [ 106.633666][ T5154] block nbd4: Receive control failed (result -32) [ 106.871337][ T6007] nbd4: detected capacity change from 0 to 127 [ 106.982749][ T5999] block nbd4: Dead connection, failed to find a fallback [ 106.982774][ T5999] block nbd4: shutting down sockets [ 106.982869][ T5999] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.982945][ T5999] Buffer I/O error on dev nbd4, logical block 0, async page read [ 106.984531][ T5999] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.984557][ T5999] Buffer I/O error on dev nbd4, logical block 1, async page read [ 106.984713][ T5999] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.984735][ T5999] Buffer I/O error on dev nbd4, logical block 2, async page read [ 106.984881][ T5999] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.984901][ T5999] Buffer I/O error on dev nbd4, logical block 3, async page read [ 106.985063][ T5999] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.985084][ T5999] Buffer I/O error on dev nbd4, logical block 0, async page read [ 106.985231][ T5999] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.985251][ T5999] Buffer I/O error on dev nbd4, logical block 1, async page read [ 106.985403][ T5999] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.985423][ T5999] Buffer I/O error on dev nbd4, logical block 2, async page read [ 106.985570][ T5999] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.985591][ T5999] Buffer I/O error on dev nbd4, logical block 3, async page read [ 106.985750][ T5999] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.985770][ T5999] Buffer I/O error on dev nbd4, logical block 0, async page read [ 106.985921][ T5999] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.985942][ T5999] Buffer I/O error on dev nbd4, logical block 1, async page read [ 106.989361][ T5999] ldm_validate_partition_table(): Disk read failed. [ 107.023398][ T5999] Dev nbd4: unable to read RDB block 0 [ 107.026004][ T5999] nbd4: unable to read partition table [ 107.199363][ T5999] ldm_validate_partition_table(): Disk read failed. [ 107.259733][ T5999] Dev nbd4: unable to read RDB block 0 [ 107.267845][ T5999] nbd4: unable to read partition table [ 107.926069][ T6037] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.074229][ T6051] 9pnet_virtio: no channels available for device syz [ 110.438458][ T6064] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.455293][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 111.269973][ T6076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 111.270040][ T6076] openvswitch: netlink: Flow key attr not present in new flow. [ 111.308871][ T6076] ======================================================= [ 111.308871][ T6076] WARNING: The mand mount option has been deprecated and [ 111.308871][ T6076] and is ignored by this kernel. Remove the mand [ 111.308871][ T6076] option from the mount to silence this warning. [ 111.308871][ T6076] ======================================================= [ 111.313503][ T6076] Invalid source name [ 111.313542][ T6076] UBIFS error (pid: 6076): cannot open "./file0", error -22 [ 111.348023][ T6076] warning: `syz.1.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.820546][ T6066] nbd5: detected capacity change from 0 to 127 [ 111.842853][ T5154] block nbd5: Receive control failed (result -32) [ 111.860277][ T5987] block nbd5: Dead connection, failed to find a fallback [ 111.860301][ T5987] block nbd5: shutting down sockets [ 111.902684][ T5987] ldm_validate_partition_table(): Disk read failed. [ 111.904808][ T5987] Dev nbd5: unable to read RDB block 0 [ 111.907116][ T5987] nbd5: unable to read partition table [ 112.010047][ T5987] blk_print_req_error: 233 callbacks suppressed [ 112.010067][ T5987] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.010091][ T5987] buffer_io_error: 233 callbacks suppressed [ 112.010101][ T5987] Buffer I/O error on dev nbd5, logical block 3, async page read [ 112.010216][ T5987] ldm_validate_partition_table(): Disk read failed. [ 112.010318][ T5987] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.010339][ T5987] Buffer I/O error on dev nbd5, logical block 0, async page read [ 112.014153][ T5987] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.014182][ T5987] Buffer I/O error on dev nbd5, logical block 1, async page read [ 112.014328][ T5987] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.014348][ T5987] Buffer I/O error on dev nbd5, logical block 2, async page read [ 112.014485][ T5987] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.014505][ T5987] Buffer I/O error on dev nbd5, logical block 3, async page read [ 112.014652][ T5987] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.014672][ T5987] Buffer I/O error on dev nbd5, logical block 0, async page read [ 112.014813][ T5987] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.014832][ T5987] Buffer I/O error on dev nbd5, logical block 1, async page read [ 112.014967][ T5987] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.014986][ T5987] Buffer I/O error on dev nbd5, logical block 2, async page read [ 112.015119][ T5987] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.015138][ T5987] Buffer I/O error on dev nbd5, logical block 3, async page read [ 112.015343][ T5987] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.015363][ T5987] Buffer I/O error on dev nbd5, logical block 0, async page read [ 112.017004][ T5987] Dev nbd5: unable to read RDB block 0 [ 112.020138][ T5987] nbd5: unable to read partition table [ 112.517821][ T5999] ldm_validate_partition_table(): Disk read failed. [ 112.520079][ T5999] Dev nbd5: unable to read RDB block 0 [ 112.555042][ T5999] nbd5: unable to read partition table [ 112.630307][ T5999] ldm_validate_partition_table(): Disk read failed. [ 112.655488][ T5999] Dev nbd5: unable to read RDB block 0 [ 112.667117][ T5999] nbd5: unable to read partition table [ 115.103159][ T5154] block nbd6: Receive control failed (result -32) [ 115.140014][ T6085] nbd6: detected capacity change from 0 to 127 [ 115.153878][ T5999] block nbd6: Dead connection, failed to find a fallback [ 115.156075][ T5999] block nbd6: shutting down sockets [ 115.192152][ T5999] ldm_validate_partition_table(): Disk read failed. [ 115.215338][ T5999] Dev nbd6: unable to read RDB block 0 [ 115.230281][ T5999] nbd6: unable to read partition table [ 115.292571][ T5999] ldm_validate_partition_table(): Disk read failed. [ 115.298483][ T5999] Dev nbd6: unable to read RDB block 0 [ 115.313906][ T5999] nbd6: unable to read partition table [ 117.636850][ T6112] tipc: Enabling of bearer rejected, failed to enable media [ 117.661887][ T6121] Zero length message leads to an empty skb [ 117.953196][ T6128] tipc: Enabling of bearer rejected, failed to enable media [ 117.959142][ T6123] syzkaller0: entered promiscuous mode [ 117.959170][ T6123] syzkaller0: entered allmulticast mode [ 118.175198][ T6130] nbd7: detected capacity change from 0 to 127 [ 118.760744][ T5154] block nbd7: Receive control failed (result -104) [ 118.970492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.980500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.990480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.000504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.010468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.020466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.030464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.040463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.050464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.680999][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.793265][ T6165] tipc: Enabling of bearer rejected, failed to enable media [ 120.795569][ T6165] syzkaller0: entered promiscuous mode [ 120.795596][ T6165] syzkaller0: entered allmulticast mode [ 120.892610][ T6167] 9pnet_virtio: no channels available for device syz [ 120.939644][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 121.000992][ T5901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.001018][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.004122][ T5901] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.004148][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.004165][ T5901] usb 1-1: Product: syz [ 121.004177][ T5901] usb 1-1: Manufacturer: syz [ 121.004190][ T5901] usb 1-1: SerialNumber: syz [ 121.362550][ T5901] usb 1-1: 0:2 : does not exist [ 121.362666][ T5901] usb 1-1: unit 6 not found! [ 122.651555][ T5901] usb 1-1: USB disconnect, device number 2 [ 123.050592][ T49] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.091249][ T6183] nbd8: detected capacity change from 0 to 127 [ 123.112704][ T5154] block nbd8: Receive control failed (result -32) [ 123.142381][ T5987] block nbd8: Dead connection, failed to find a fallback [ 123.142406][ T5987] block nbd8: shutting down sockets [ 123.142420][ T5987] blk_print_req_error: 339 callbacks suppressed [ 123.142431][ T5987] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.142457][ T5987] buffer_io_error: 339 callbacks suppressed [ 123.142466][ T5987] Buffer I/O error on dev nbd8, logical block 0, async page read [ 123.142690][ T5987] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.142712][ T5987] Buffer I/O error on dev nbd8, logical block 1, async page read [ 123.142868][ T5987] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.142889][ T5987] Buffer I/O error on dev nbd8, logical block 2, async page read [ 123.143035][ T5987] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.143056][ T5987] Buffer I/O error on dev nbd8, logical block 3, async page read [ 123.143216][ T5987] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.143236][ T5987] Buffer I/O error on dev nbd8, logical block 0, async page read [ 123.143381][ T5987] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.143496][ T5987] Buffer I/O error on dev nbd8, logical block 1, async page read [ 123.143648][ T5987] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.143669][ T5987] Buffer I/O error on dev nbd8, logical block 2, async page read [ 123.143822][ T5987] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.143843][ T5987] Buffer I/O error on dev nbd8, logical block 3, async page read [ 123.143999][ T5987] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.144019][ T5987] Buffer I/O error on dev nbd8, logical block 0, async page read [ 123.144169][ T5987] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.144189][ T5987] Buffer I/O error on dev nbd8, logical block 1, async page read [ 123.176655][ T5987] ldm_validate_partition_table(): Disk read failed. [ 123.195282][ T5987] Dev nbd8: unable to read RDB block 0 [ 123.240505][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 123.257463][ T49] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.257488][ T49] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.262299][ T49] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.262326][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.262344][ T49] usb 3-1: Product: syz [ 123.262357][ T49] usb 3-1: Manufacturer: syz [ 123.262370][ T49] usb 3-1: SerialNumber: syz [ 123.648866][ T49] usb 3-1: 0:2 : does not exist [ 123.678270][ T49] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 123.837737][ T49] usb 3-1: USB disconnect, device number 2 [ 123.892714][ T5987] nbd8: unable to read partition table [ 124.104455][ T5987] ldm_validate_partition_table(): Disk read failed. [ 124.106723][ T5987] Dev nbd8: unable to read RDB block 0 [ 124.109159][ T5987] nbd8: unable to read partition table [ 124.226087][ T6162] udevd[6162]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.266909][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 124.309216][ T6162] ldm_validate_partition_table(): Disk read failed. [ 124.320680][ T6162] Dev nbd8: unable to read RDB block 0 [ 124.323009][ T6162] nbd8: unable to read partition table [ 124.352429][ T6162] ldm_validate_partition_table(): Disk read failed. [ 124.354672][ T6162] Dev nbd8: unable to read RDB block 0 [ 124.357013][ T6162] nbd8: unable to read partition table [ 124.800638][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.802500][ T5852] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.950546][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 124.950692][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 124.977340][ T5852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.977364][ T5852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.978115][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.978162][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.029947][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.030062][ T5852] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.030130][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.030147][ T5852] usb 4-1: Product: syz [ 125.030160][ T5852] usb 4-1: Manufacturer: syz [ 125.030172][ T5852] usb 4-1: SerialNumber: syz [ 125.050650][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.050678][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.050697][ T10] usb 1-1: Product: syz [ 125.050710][ T10] usb 1-1: Manufacturer: syz [ 125.050723][ T10] usb 1-1: SerialNumber: syz [ 125.278192][ T6209] batadv_slave_0: entered promiscuous mode [ 126.158241][ T10] usb 1-1: 0:2 : does not exist [ 126.158292][ T10] usb 1-1: unit 6 not found! [ 126.339413][ T5852] usb 4-1: 0:2 : does not exist [ 126.339499][ T5852] usb 4-1: unit 6 not found! [ 126.374221][ T6209] syz.1.67 (6209) used greatest stack depth: 18328 bytes left [ 126.377379][ T10] usb 1-1: USB disconnect, device number 3 [ 126.730753][ T5852] usb 4-1: USB disconnect, device number 2 [ 127.819057][ T6201] udevd[6201]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.682936][ T6234] 9pnet_virtio: no channels available for device syz [ 129.368225][ T6199] udevd[6199]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 129.402810][ T6228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.403473][ T6228] batadv_slave_0: entered promiscuous mode [ 129.850708][ T5852] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.283205][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.283285][ T5852] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 130.283525][ T5852] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 130.315394][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.853508][ T5852] usb 1-1: config 0 descriptor?? [ 130.929491][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.100791][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 131.106321][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.106346][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.113564][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.113592][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.113610][ T31] usb 3-1: Product: syz [ 131.113623][ T31] usb 3-1: Manufacturer: syz [ 131.113636][ T31] usb 3-1: SerialNumber: syz [ 131.370702][ T31] usb 3-1: 0:2 : does not exist [ 131.387357][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 131.467471][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.500545][ T31] usb 3-1: USB disconnect, device number 3 [ 131.507746][ T6251] batadv_slave_0: entered promiscuous mode [ 132.374180][ T6194] udevd[6194]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.444979][ T132] block nbd0: Possible stuck request ffff888024dd5080: control (read@0,1024B). Runtime 30 seconds [ 132.445423][ T132] block nbd0: Possible stuck request ffff888024dd5240: control (read@1024,1024B). Runtime 30 seconds [ 132.445456][ T132] block nbd0: Possible stuck request ffff888024dd5400: control (read@2048,1024B). Runtime 30 seconds [ 132.445486][ T132] block nbd0: Possible stuck request ffff888024dd55c0: control (read@3072,1024B). Runtime 30 seconds [ 132.457886][ T5852] usbhid 1-1:0.0: can't add hid device: -71 [ 132.471686][ T5852] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 132.493506][ T5852] usb 1-1: USB disconnect, device number 4 [ 132.976325][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.903604][ T132] block nbd1: Possible stuck request ffff888024ea7000: control (read@0,1024B). Runtime 30 seconds [ 133.903645][ T132] block nbd1: Possible stuck request ffff888024ea71c0: control (read@1024,1024B). Runtime 30 seconds [ 133.903674][ T132] block nbd1: Possible stuck request ffff888024ea7380: control (read@2048,1024B). Runtime 30 seconds [ 133.903705][ T132] block nbd1: Possible stuck request ffff888024ea7540: control (read@3072,1024B). Runtime 30 seconds [ 134.650620][ T6264] block nbd2: Possible stuck request ffff888024ede000: control (read@0,1024B). Runtime 30 seconds [ 134.650652][ T6264] block nbd2: Possible stuck request ffff888024ede1c0: control (read@1024,1024B). Runtime 30 seconds [ 134.650668][ T6264] block nbd2: Possible stuck request ffff888024ede380: control (read@2048,1024B). Runtime 30 seconds [ 134.650684][ T6264] block nbd2: Possible stuck request ffff888024ede540: control (read@3072,1024B). Runtime 30 seconds [ 139.428626][ T6264] block nbd3: Possible stuck request ffff888024f15080: control (read@0,1024B). Runtime 30 seconds [ 139.428658][ T6264] block nbd3: Possible stuck request ffff888024f15240: control (read@1024,1024B). Runtime 30 seconds [ 139.428674][ T6264] block nbd3: Possible stuck request ffff888024f15400: control (read@2048,1024B). Runtime 30 seconds [ 139.428690][ T6264] block nbd3: Possible stuck request ffff888024f155c0: control (read@3072,1024B). Runtime 30 seconds [ 141.427722][ T6279] 9pnet_virtio: no channels available for device syz [ 142.444556][ T6287] libceph: resolve '0' (ret=-3): failed [ 142.801893][ T6293] nbd9: detected capacity change from 0 to 127 [ 142.818524][ T5154] block nbd9: Receive control failed (result -32) [ 142.841882][ T6194] block nbd9: Dead connection, failed to find a fallback [ 142.841906][ T6194] block nbd9: shutting down sockets [ 142.841919][ T6194] blk_print_req_error: 286 callbacks suppressed [ 142.841929][ T6194] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.843177][ T6194] buffer_io_error: 286 callbacks suppressed [ 142.843189][ T6194] Buffer I/O error on dev nbd9, logical block 0, async page read [ 142.843366][ T6194] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.843387][ T6194] Buffer I/O error on dev nbd9, logical block 1, async page read [ 142.843548][ T6194] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.843568][ T6194] Buffer I/O error on dev nbd9, logical block 2, async page read [ 142.843711][ T6194] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.843732][ T6194] Buffer I/O error on dev nbd9, logical block 3, async page read [ 142.843891][ T6194] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.843912][ T6194] Buffer I/O error on dev nbd9, logical block 0, async page read [ 142.844060][ T6194] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.844080][ T6194] Buffer I/O error on dev nbd9, logical block 1, async page read [ 142.845476][ T6194] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.845500][ T6194] Buffer I/O error on dev nbd9, logical block 2, async page read [ 142.845648][ T6194] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.845668][ T6194] Buffer I/O error on dev nbd9, logical block 3, async page read [ 142.845819][ T6194] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.845840][ T6194] Buffer I/O error on dev nbd9, logical block 0, async page read [ 142.845987][ T6194] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.846007][ T6194] Buffer I/O error on dev nbd9, logical block 1, async page read [ 142.864948][ T6194] ldm_validate_partition_table(): Disk read failed. [ 142.869029][ T6194] Dev nbd9: unable to read RDB block 0 [ 142.876734][ T6194] nbd9: unable to read partition table [ 142.944374][ T6194] ldm_validate_partition_table(): Disk read failed. [ 142.958689][ T6194] Dev nbd9: unable to read RDB block 0 [ 142.963583][ T6194] nbd9: unable to read partition table [ 143.211101][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.337354][ T6306] netlink: 'syz.0.96': attribute type 7 has an invalid length. [ 143.337375][ T6306] netlink: 'syz.0.96': attribute type 8 has an invalid length. [ 143.369719][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 143.378434][ T10] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 143.378463][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.449848][ T10] usb 4-1: config 0 descriptor?? [ 143.465753][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 143.643026][ T6308] openvswitch: netlink: Flow key attr not present in new flow. [ 145.192426][ T10] gspca_vc032x: reg_w err -71 [ 145.192456][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192466][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192483][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192491][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192499][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192507][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192515][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192527][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192535][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192543][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192551][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192559][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192567][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192575][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192583][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192591][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192601][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192609][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 145.192621][ T10] gspca_vc032x: Unknown sensor... [ 145.192708][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 146.320672][ T5901] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.478754][ T10] usb 4-1: USB disconnect, device number 3 [ 146.630586][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 146.634776][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 146.634808][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.634848][ T5901] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 146.634869][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.641351][ T5901] usb 1-1: config 0 descriptor?? [ 147.111531][ T5901] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 147.256804][ T5901] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -71 [ 147.256832][ T5901] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -71 [ 147.256860][ T5901] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 147.256871][ T5901] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 147.259195][ T5901] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -71 [ 147.479676][ T5901] usb 1-1: USB disconnect, device number 5 [ 147.955568][ T6331] fido_id[6331]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 148.250872][ T6272] block nbd7: Possible stuck request ffff888025460000: control (read@0,1024B). Runtime 30 seconds [ 148.252259][ T6272] block nbd7: Possible stuck request ffff8880254601c0: control (read@1024,1024B). Runtime 30 seconds [ 148.252294][ T6272] block nbd7: Possible stuck request ffff888025460380: control (read@2048,1024B). Runtime 30 seconds [ 148.252903][ T6272] block nbd7: Possible stuck request ffff888025460540: control (read@3072,1024B). Runtime 30 seconds [ 154.650715][ T5901] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.049530][ T6351] libceph: resolve '0' (ret=-3): failed [ 155.134682][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.137441][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.138195][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.139139][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.139646][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.172032][ T5844] Bluetooth: hci5: command tx timeout [ 157.295503][ T6364] netlink: 'syz.2.111': attribute type 7 has an invalid length. [ 157.295517][ T6364] netlink: 'syz.2.111': attribute type 8 has an invalid length. [ 157.498874][ T6366] openvswitch: netlink: Flow key attr not present in new flow. [ 157.520635][ T5931] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 157.677071][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 157.679484][ T5931] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 157.679501][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.714519][ T5931] usb 5-1: config 0 descriptor?? [ 157.737766][ T5931] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 159.032468][ T5931] gspca_vc032x: reg_w err -110 [ 159.032482][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032488][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032492][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032496][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032500][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032504][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032508][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032512][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032516][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032521][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032525][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032529][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032533][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032537][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032541][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032545][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032550][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032554][ T5931] gspca_vc032x: I2c Bus Busy Wait 00 [ 159.032558][ T5931] gspca_vc032x: Unknown sensor... [ 159.032609][ T5931] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 159.250797][ T5844] Bluetooth: hci5: command tx timeout [ 161.330589][ T5844] Bluetooth: hci5: command tx timeout [ 163.410707][ T5844] Bluetooth: hci5: command tx timeout [ 163.700660][ T6272] block nbd0: Possible stuck request ffff888024dd5080: control (read@0,1024B). Runtime 60 seconds [ 163.700706][ T6272] block nbd0: Possible stuck request ffff888024dd5240: control (read@1024,1024B). Runtime 60 seconds [ 163.700737][ T6272] block nbd0: Possible stuck request ffff888024dd5400: control (read@2048,1024B). Runtime 60 seconds [ 163.700766][ T6272] block nbd0: Possible stuck request ffff888024dd55c0: control (read@3072,1024B). Runtime 60 seconds [ 163.826175][ T5931] usb 5-1: USB disconnect, device number 2 [ 164.049584][ T6348] chnl_net:caif_netlink_parms(): no params data found [ 164.340649][ T5931] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.452692][ T6272] block nbd1: Possible stuck request ffff888024ea7000: control (read@0,1024B). Runtime 60 seconds [ 164.452738][ T6272] block nbd1: Possible stuck request ffff888024ea71c0: control (read@1024,1024B). Runtime 60 seconds [ 164.452767][ T6272] block nbd1: Possible stuck request ffff888024ea7380: control (read@2048,1024B). Runtime 60 seconds [ 164.452795][ T6272] block nbd1: Possible stuck request ffff888024ea7540: control (read@3072,1024B). Runtime 60 seconds [ 165.503659][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 165.505947][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.505970][ T5931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.543325][ T5931] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.543354][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.543373][ T5931] usb 5-1: Product: syz [ 165.543386][ T5931] usb 5-1: Manufacturer: syz [ 165.543399][ T5931] usb 5-1: SerialNumber: syz [ 165.581595][ T63] block nbd2: Possible stuck request ffff888024ede000: control (read@0,1024B). Runtime 60 seconds [ 165.581640][ T63] block nbd2: Possible stuck request ffff888024ede1c0: control (read@1024,1024B). Runtime 60 seconds [ 165.581669][ T63] block nbd2: Possible stuck request ffff888024ede380: control (read@2048,1024B). Runtime 60 seconds [ 165.581698][ T63] block nbd2: Possible stuck request ffff888024ede540: control (read@3072,1024B). Runtime 60 seconds [ 165.690670][ T6026] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 165.822747][ T5931] usb 5-1: 0:2 : does not exist [ 165.851632][ T5931] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 165.862755][ T6026] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 165.862782][ T6026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.862800][ T6026] usb 1-1: Product: syz [ 165.862813][ T6026] usb 1-1: Manufacturer: syz [ 165.862827][ T6026] usb 1-1: SerialNumber: syz [ 165.970286][ T5154] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 165.982888][ T5154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 165.984155][ T5154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 165.986246][ T5154] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 165.987577][ T5154] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 166.128472][ T5931] usb 5-1: USB disconnect, device number 3 [ 166.310201][ T6194] udevd[6194]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.826439][ T6400] nbd10: detected capacity change from 0 to 127 [ 166.843818][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.844031][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.844263][ T6348] bridge_slave_0: entered allmulticast mode [ 166.847098][ T6348] bridge_slave_0: entered promiscuous mode [ 166.878298][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.878432][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.878683][ T6348] bridge_slave_1: entered allmulticast mode [ 166.880084][ T5154] block nbd10: Receive control failed (result -104) [ 166.911739][ T6348] bridge_slave_1: entered promiscuous mode [ 167.353828][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.385370][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.603200][ T6026] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 167.604360][ T6026] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 167.710416][ T6348] team0: Port device team_slave_0 added [ 167.732393][ T6348] team0: Port device team_slave_1 added [ 168.010802][ T6026] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 168.010873][ T6026] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 168.012425][ T6026] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 168.036428][ T6410] netlink: 'syz.4.125': attribute type 7 has an invalid length. [ 168.036447][ T6410] netlink: 'syz.4.125': attribute type 8 has an invalid length. [ 168.155973][ T6026] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 168.204763][ T6026] usb 1-1: USB disconnect, device number 6 [ 168.286127][ T5154] Bluetooth: hci6: command tx timeout [ 168.435108][ T6413] openvswitch: netlink: Flow key attr not present in new flow. [ 168.490056][ T5847] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 169.083521][ T5847] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 169.083547][ T5847] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 169.083563][ T5847] usb 3-1: config 150 has no interface number 0 [ 169.083608][ T5847] usb 3-1: config 150 interface 204 has no altsetting 0 [ 169.088807][ T5847] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 169.088834][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.088852][ T5847] usb 3-1: Product: syz [ 169.088866][ T5847] usb 3-1: Manufacturer: syz [ 169.088879][ T5847] usb 3-1: SerialNumber: syz [ 169.440289][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.440304][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.440376][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.484604][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.484619][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.484643][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.535377][ T6415] syzkaller0: entered promiscuous mode [ 169.535405][ T6415] syzkaller0: entered allmulticast mode [ 169.557695][ T5847] xr_serial 3-1:150.204: skipping garbage [ 169.557753][ T5847] xr_serial 3-1:150.204: xr_serial converter detected [ 169.584525][ T5847] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 169.584588][ T5847] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 169.606851][ T5847] usb 3-1: USB disconnect, device number 5 [ 169.633208][ T5847] xr_serial 3-1:150.204: device disconnected [ 170.010723][ T63] block nbd3: Possible stuck request ffff888024f15080: control (read@0,1024B). Runtime 60 seconds [ 170.010771][ T63] block nbd3: Possible stuck request ffff888024f15240: control (read@1024,1024B). Runtime 60 seconds [ 170.010801][ T63] block nbd3: Possible stuck request ffff888024f15400: control (read@2048,1024B). Runtime 60 seconds [ 170.010831][ T63] block nbd3: Possible stuck request ffff888024f155c0: control (read@3072,1024B). Runtime 60 seconds [ 170.121125][ T6348] hsr_slave_0: entered promiscuous mode [ 170.129209][ T6348] hsr_slave_1: entered promiscuous mode [ 170.148923][ T6348] debugfs: 'hsr0' already exists in 'hsr' [ 170.148948][ T6348] Cannot create hsr debugfs directory [ 170.300685][ T5154] Bluetooth: hci6: command tx timeout [ 171.167924][ T31] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 172.370606][ T5154] Bluetooth: hci6: command tx timeout [ 172.496809][ T31] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 172.496837][ T31] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 172.496858][ T31] usb 5-1: config 150 has no interface number 0 [ 172.496903][ T31] usb 5-1: config 150 interface 204 has no altsetting 0 [ 172.511389][ T31] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 172.511417][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.511433][ T31] usb 5-1: Product: syz [ 172.511445][ T31] usb 5-1: Manufacturer: syz [ 172.511458][ T31] usb 5-1: SerialNumber: syz [ 172.826880][ T31] xr_serial 5-1:150.204: skipping garbage [ 172.826938][ T31] xr_serial 5-1:150.204: xr_serial converter detected [ 172.871357][ T31] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 172.871418][ T31] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 172.919853][ T31] usb 5-1: USB disconnect, device number 4 [ 172.953821][ T31] xr_serial 5-1:150.204: device disconnected [ 173.061942][ T6394] chnl_net:caif_netlink_parms(): no params data found [ 173.866414][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.866621][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.866749][ T6394] bridge_slave_0: entered allmulticast mode [ 173.868284][ T6394] bridge_slave_0: entered promiscuous mode [ 173.878159][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.882743][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.882988][ T6394] bridge_slave_1: entered allmulticast mode [ 173.891576][ T6394] bridge_slave_1: entered promiscuous mode [ 174.153892][ T6394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.154013][ T6348] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.202133][ T6394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.202422][ T6348] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.441766][ T6348] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.453175][ T5154] Bluetooth: hci6: command tx timeout [ 174.457303][ T6446] netlink: 'syz.4.134': attribute type 7 has an invalid length. [ 174.457322][ T6446] netlink: 'syz.4.134': attribute type 8 has an invalid length. [ 175.208867][ T6446] openvswitch: netlink: Flow key attr not present in new flow. [ 176.824761][ T6348] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.063570][ T6394] team0: Port device team_slave_0 added [ 177.097154][ T6394] team0: Port device team_slave_1 added [ 177.380712][ T5931] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 177.629481][ T5931] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 177.629687][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.629708][ T5931] usb 1-1: Product: syz [ 177.629722][ T5931] usb 1-1: Manufacturer: syz [ 177.629897][ T5931] usb 1-1: SerialNumber: syz [ 178.179241][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.179260][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.179284][ T6394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.601135][ T32] block nbd7: Possible stuck request ffff888025460000: control (read@0,1024B). Runtime 60 seconds [ 178.601182][ T32] block nbd7: Possible stuck request ffff8880254601c0: control (read@1024,1024B). Runtime 60 seconds [ 178.601211][ T32] block nbd7: Possible stuck request ffff888025460380: control (read@2048,1024B). Runtime 60 seconds [ 178.601460][ T32] block nbd7: Possible stuck request ffff888025460540: control (read@3072,1024B). Runtime 60 seconds [ 179.689012][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.689030][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.689230][ T6394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.404960][ T5931] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 181.128157][ T5931] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 181.128553][ T5931] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 181.128602][ T5931] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 181.176941][ T5931] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 181.221858][ T5931] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 181.269205][ T5931] usb 1-1: USB disconnect, device number 7 [ 181.438979][ T6394] hsr_slave_0: entered promiscuous mode [ 181.439812][ T6394] hsr_slave_1: entered promiscuous mode [ 181.440330][ T6394] debugfs: 'hsr0' already exists in 'hsr' [ 181.440346][ T6394] Cannot create hsr debugfs directory [ 181.530916][ T6475] nbd11: detected capacity change from 0 to 127 [ 181.562426][ T5154] block nbd11: Receive control failed (result -104) [ 181.788601][ T6479] tipc: Started in network mode [ 181.788630][ T6479] tipc: Node identity d23ab7e58983, cluster identity 4711 [ 181.789034][ T6479] tipc: Enabled bearer , priority 0 [ 181.797280][ T6479] tipc: Resetting bearer [ 181.939588][ T6478] tipc: Disabling bearer [ 183.515377][ T6494] syzkaller0: entered promiscuous mode [ 183.515406][ T6494] syzkaller0: entered allmulticast mode [ 183.920925][ T6501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.923865][ T6501] batadv_slave_0: entered promiscuous mode [ 184.331881][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 184.639423][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 184.639483][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.639534][ T10] usb 5-1: Product: syz [ 184.639548][ T10] usb 5-1: Manufacturer: syz [ 184.639604][ T10] usb 5-1: SerialNumber: syz [ 184.798934][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.252008][ T6394] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.340702][ T6394] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.372202][ T6394] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.409360][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.409894][ T6394] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 186.559405][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.559564][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.954023][ T6524] Invalid source name [ 186.954049][ T6524] UBIFS error (pid: 6524): cannot open "./file0", error -22 [ 187.830191][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 187.830775][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 187.831268][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 187.831317][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 187.832207][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 187.899274][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.899424][ T6222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.086335][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 188.135870][ T10] usb 5-1: USB disconnect, device number 5 [ 188.271631][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.278893][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.279922][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.300762][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.310704][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.552291][ T6535] nbd12: detected capacity change from 0 to 127 [ 189.584127][ T5844] block nbd12: Receive control failed (result -104) [ 189.680942][ T5920] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 189.841175][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 189.843187][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.843210][ T5920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.847854][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.847881][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.847898][ T5920] usb 1-1: Product: syz [ 189.847911][ T5920] usb 1-1: Manufacturer: syz [ 189.847923][ T5920] usb 1-1: SerialNumber: syz [ 190.072815][ T6546] nbd13: detected capacity change from 0 to 127 [ 190.153945][ T5920] usb 1-1: 0:2 : does not exist [ 190.176180][ T5920] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 190.186125][ T5844] block nbd13: Receive control failed (result -104) [ 190.283656][ T5920] usb 1-1: USB disconnect, device number 8 [ 190.387315][ T6162] udevd[6162]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.420657][ T5844] Bluetooth: hci1: command tx timeout [ 190.670141][ T6394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.679621][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 192.139163][ T5922] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 193.092079][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 193.099431][ T5922] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.099464][ T5922] usb 5-1: config 0 interface 0 has no altsetting 0 [ 193.099498][ T5922] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 193.099520][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.125192][ T5844] Bluetooth: hci1: command tx timeout [ 193.212704][ T5922] usb 5-1: config 0 descriptor?? [ 193.434962][ T6394] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.849051][ T5922] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 193.849094][ T5922] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 193.849122][ T5922] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 193.849149][ T5922] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 193.849173][ T5922] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 193.856614][ T5922] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 193.970854][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.228581][ T5922] usb 5-1: USB disconnect, device number 6 [ 194.304507][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.349342][ T6272] block nbd0: Possible stuck request ffff888024dd5080: control (read@0,1024B). Runtime 90 seconds [ 194.349388][ T6272] block nbd0: Possible stuck request ffff888024dd5240: control (read@1024,1024B). Runtime 90 seconds [ 194.349417][ T6272] block nbd0: Possible stuck request ffff888024dd5400: control (read@2048,1024B). Runtime 90 seconds [ 194.349446][ T6272] block nbd0: Possible stuck request ffff888024dd55c0: control (read@3072,1024B). Runtime 90 seconds [ 194.349679][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.349816][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.350089][ T6527] bridge_slave_0: entered allmulticast mode [ 194.435093][ T6527] bridge_slave_0: entered promiscuous mode [ 194.448578][ T6569] fido_id[6569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 194.472606][ T191] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.477505][ T191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.485706][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.485853][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.486112][ T6527] bridge_slave_1: entered allmulticast mode [ 194.536349][ T6527] bridge_slave_1: entered promiscuous mode [ 195.000133][ T6272] block nbd1: Possible stuck request ffff888024ea7000: control (read@0,1024B). Runtime 90 seconds [ 195.000186][ T6272] block nbd1: Possible stuck request ffff888024ea71c0: control (read@1024,1024B). Runtime 90 seconds [ 195.000216][ T6272] block nbd1: Possible stuck request ffff888024ea7380: control (read@2048,1024B). Runtime 90 seconds [ 195.000246][ T6272] block nbd1: Possible stuck request ffff888024ea7540: control (read@3072,1024B). Runtime 90 seconds [ 195.189859][ T5844] Bluetooth: hci1: command tx timeout [ 196.008955][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.009171][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.013809][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.054579][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.250750][ T63] block nbd2: Possible stuck request ffff888024ede000: control (read@0,1024B). Runtime 90 seconds [ 196.250796][ T63] block nbd2: Possible stuck request ffff888024ede1c0: control (read@1024,1024B). Runtime 90 seconds [ 196.250826][ T63] block nbd2: Possible stuck request ffff888024ede380: control (read@2048,1024B). Runtime 90 seconds [ 196.250855][ T63] block nbd2: Possible stuck request ffff888024ede540: control (read@3072,1024B). Runtime 90 seconds [ 196.258334][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.259159][ T6585] batadv_slave_0: entered promiscuous mode [ 196.483278][ T6527] team0: Port device team_slave_0 added [ 196.891295][ T6471] block nbd10: Possible stuck request ffff8880255b5080: control (read@0,1024B). Runtime 30 seconds [ 196.891342][ T6471] block nbd10: Possible stuck request ffff8880255b5240: control (read@1024,1024B). Runtime 30 seconds [ 196.891372][ T6471] block nbd10: Possible stuck request ffff8880255b5400: control (read@2048,1024B). Runtime 30 seconds [ 196.891402][ T6471] block nbd10: Possible stuck request ffff8880255b55c0: control (read@3072,1024B). Runtime 30 seconds [ 196.999881][ T6527] team0: Port device team_slave_1 added [ 197.262793][ T5844] Bluetooth: hci1: command tx timeout [ 197.796651][ T6590] nbd14: detected capacity change from 0 to 127 [ 197.822528][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.822543][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.822566][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.834104][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.834119][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.834142][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.847298][ T5844] block nbd14: Receive control failed (result -104) [ 198.272608][ T6527] hsr_slave_0: entered promiscuous mode [ 198.273979][ T6527] hsr_slave_1: entered promiscuous mode [ 198.274943][ T6527] debugfs: 'hsr0' already exists in 'hsr' [ 198.274966][ T6527] Cannot create hsr debugfs directory [ 198.451441][ T5931] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 198.516120][ T6348] veth0_vlan: entered promiscuous mode [ 198.601671][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 198.603524][ T5931] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.603554][ T5931] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.603585][ T5931] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 198.603606][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.686051][ T5931] usb 5-1: config 0 descriptor?? [ 198.809293][ T6348] veth1_vlan: entered promiscuous mode [ 198.841992][ T6602] nbd15: detected capacity change from 0 to 127 [ 199.007036][ T5844] block nbd15: Receive control failed (result -104) [ 199.142454][ T5931] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 199.142493][ T5931] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 199.142521][ T5931] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 199.142549][ T5931] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 199.164326][ T5931] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 199.350118][ T5931] usb 5-1: USB disconnect, device number 7 [ 199.655688][ T6607] fido_id[6607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 200.374110][ T6394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.499027][ T6348] veth0_macvtap: entered promiscuous mode [ 200.562049][ T63] block nbd3: Possible stuck request ffff888024f15080: control (read@0,1024B). Runtime 90 seconds [ 200.562094][ T63] block nbd3: Possible stuck request ffff888024f15240: control (read@1024,1024B). Runtime 90 seconds [ 200.562123][ T63] block nbd3: Possible stuck request ffff888024f15400: control (read@2048,1024B). Runtime 90 seconds [ 200.562152][ T63] block nbd3: Possible stuck request ffff888024f155c0: control (read@3072,1024B). Runtime 90 seconds [ 200.623778][ T6348] veth1_macvtap: entered promiscuous mode [ 201.344668][ T6527] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 201.411401][ T6527] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 201.472768][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.513674][ T6527] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 201.599093][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.612207][ T6527] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 201.750648][ T191] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.852883][ T191] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.319536][ T6256] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.330012][ T6256] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.848721][ T1510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.848742][ T1510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.262041][ T6394] veth0_vlan: entered promiscuous mode [ 204.737574][ T6394] veth1_vlan: entered promiscuous mode [ 204.839914][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.839933][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.486646][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.524306][ T6394] veth0_macvtap: entered promiscuous mode [ 205.569248][ T6394] veth1_macvtap: entered promiscuous mode [ 205.658417][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.729102][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.735772][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.736795][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.750685][ T5847] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 205.812430][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.840192][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.840353][ T6376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.888297][ T159] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.893238][ T1221] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.898260][ T1221] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.900673][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 205.903260][ T5847] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 205.903279][ T5847] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 205.903297][ T5847] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.908850][ T5847] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.908875][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.908892][ T5847] usb 5-1: Product: syz [ 205.908905][ T5847] usb 5-1: Manufacturer: syz [ 205.908918][ T5847] usb 5-1: SerialNumber: syz [ 205.949243][ T1221] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.173407][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 206.178301][ T5847] usb 5-1: 0:2 : does not exist [ 206.299588][ T5847] usb 5-1: USB disconnect, device number 8 [ 206.333075][ T5154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 206.337024][ T5154] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 206.338039][ T5154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 206.343562][ T5154] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 206.344409][ T5154] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 206.413663][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.605935][ T6652] netlink: 'syz.0.181': attribute type 7 has an invalid length. [ 206.605955][ T6652] netlink: 'syz.0.181': attribute type 8 has an invalid length. [ 206.870923][ T6652] openvswitch: netlink: Flow key attr not present in new flow. [ 207.842996][ T159] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.956238][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.956260][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.371016][ T5844] Bluetooth: hci7: command tx timeout [ 208.645046][ T159] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.772150][ T5931] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 208.920642][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 209.094312][ T6272] block nbd7: Possible stuck request ffff888025460000: control (read@0,1024B). Runtime 90 seconds [ 209.097027][ T6272] block nbd7: Possible stuck request ffff8880254601c0: control (read@1024,1024B). Runtime 90 seconds [ 209.097203][ T6272] block nbd7: Possible stuck request ffff888025460380: control (read@2048,1024B). Runtime 90 seconds [ 209.097429][ T6272] block nbd7: Possible stuck request ffff888025460540: control (read@3072,1024B). Runtime 90 seconds [ 209.496444][ T159] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.496869][ T5931] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.496898][ T5931] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.496930][ T5931] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 209.496952][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.598834][ T5931] usb 5-1: config 0 descriptor?? [ 209.840967][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.840988][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.918426][ T6685] netlink: 'syz.0.190': attribute type 7 has an invalid length. [ 209.918447][ T6685] netlink: 'syz.0.190': attribute type 8 has an invalid length. [ 210.072610][ T5931] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 210.072652][ T5931] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 210.072681][ T5931] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 210.072708][ T5931] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 210.072736][ T5931] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 210.159356][ T6685] openvswitch: netlink: Flow key attr not present in new flow. [ 210.164740][ T5931] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 210.287212][ T5931] usb 5-1: USB disconnect, device number 9 [ 210.389816][ T6689] nbd: must specify a size in bytes for the device [ 210.454633][ T5849] Bluetooth: hci7: command tx timeout [ 210.483187][ T6687] fido_id[6687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 210.509476][ T159] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.628289][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.604925][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 212.605101][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 212.605231][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 212.605307][ T5849] Bluetooth: hci7: command tx timeout [ 214.612518][ T5848] Bluetooth: hci7: command tx timeout [ 214.991007][ T6272] block nbd11: Possible stuck request ffff888025625080: control (read@0,1024B). Runtime 30 seconds [ 214.991059][ T6272] block nbd11: Possible stuck request ffff888025625240: control (read@1024,1024B). Runtime 30 seconds [ 214.991089][ T6272] block nbd11: Possible stuck request ffff888025625400: control (read@2048,1024B). Runtime 30 seconds [ 214.991116][ T6272] block nbd11: Possible stuck request ffff8880256255c0: control (read@3072,1024B). Runtime 30 seconds [ 215.653140][ T6649] chnl_net:caif_netlink_parms(): no params data found [ 215.712383][ T5980] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 215.861104][ T5980] usb 5-1: Using ep0 maxpacket: 16 [ 215.876576][ T5980] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 215.876656][ T5980] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 215.878157][ T5980] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.968705][ T5980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.968789][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.968833][ T5980] usb 5-1: Product: syz [ 215.969142][ T5980] usb 5-1: Manufacturer: syz [ 215.969156][ T5980] usb 5-1: SerialNumber: syz [ 216.082349][ T159] bridge_slave_1: left allmulticast mode [ 216.082528][ T159] bridge_slave_1: left promiscuous mode [ 216.086260][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.308226][ T159] bridge_slave_0: left allmulticast mode [ 216.308254][ T159] bridge_slave_0: left promiscuous mode [ 216.308470][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.550096][ T5980] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 216.577665][ T6727] nbd: must specify a size in bytes for the device [ 216.668121][ T5980] usb 5-1: USB disconnect, device number 10 [ 217.411051][ T5154] Bluetooth: hci5: command 0x1003 tx timeout [ 217.418754][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 217.726665][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.997120][ T6378] Bluetooth: hci5: Frame reassembly failed (-84) [ 219.671914][ T5154] block nbd16: Receive control failed (result -32) [ 219.700721][ T6736] nbd16: detected capacity change from 0 to 127 [ 219.712569][ T5989] block nbd16: Dead connection, failed to find a fallback [ 219.712593][ T5989] block nbd16: shutting down sockets [ 219.712605][ T5989] blk_print_req_error: 138 callbacks suppressed [ 219.712616][ T5989] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.712638][ T5989] buffer_io_error: 138 callbacks suppressed [ 219.712647][ T5989] Buffer I/O error on dev nbd16, logical block 0, async page read [ 219.712801][ T5989] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.712821][ T5989] Buffer I/O error on dev nbd16, logical block 1, async page read [ 219.712978][ T5989] I/O error, dev nbd16, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.712997][ T5989] Buffer I/O error on dev nbd16, logical block 2, async page read [ 219.713134][ T5989] I/O error, dev nbd16, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.713153][ T5989] Buffer I/O error on dev nbd16, logical block 3, async page read [ 219.713353][ T5989] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.713373][ T5989] Buffer I/O error on dev nbd16, logical block 0, async page read [ 219.713513][ T5989] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.713532][ T5989] Buffer I/O error on dev nbd16, logical block 1, async page read [ 219.713673][ T5989] I/O error, dev nbd16, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.713693][ T5989] Buffer I/O error on dev nbd16, logical block 2, async page read [ 219.713828][ T5989] I/O error, dev nbd16, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.713847][ T5989] Buffer I/O error on dev nbd16, logical block 3, async page read [ 219.713993][ T5989] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.714012][ T5989] Buffer I/O error on dev nbd16, logical block 0, async page read [ 219.714147][ T5989] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.714166][ T5989] Buffer I/O error on dev nbd16, logical block 1, async page read [ 219.717213][ T5989] ldm_validate_partition_table(): Disk read failed. [ 219.719290][ T5989] Dev nbd16: unable to read RDB block 0 [ 219.734822][ T5989] nbd16: unable to read partition table [ 219.746029][ T5989] ldm_validate_partition_table(): Disk read failed. [ 219.748246][ T5989] Dev nbd16: unable to read RDB block 0 [ 219.764212][ T5989] nbd16: unable to read partition table [ 219.930720][ T63] block nbd12: Possible stuck request ffff888025687000: control (read@0,1024B). Runtime 30 seconds [ 219.930764][ T63] block nbd12: Possible stuck request ffff8880256871c0: control (read@1024,1024B). Runtime 30 seconds [ 219.930793][ T63] block nbd12: Possible stuck request ffff888025687380: control (read@2048,1024B). Runtime 30 seconds [ 219.930821][ T63] block nbd12: Possible stuck request ffff888025687540: control (read@3072,1024B). Runtime 30 seconds [ 220.450683][ T5154] Bluetooth: hci5: command 0x1003 tx timeout [ 220.456428][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 220.580679][ T6272] block nbd13: Possible stuck request ffff8880256e7000: control (read@0,1024B). Runtime 30 seconds [ 220.580724][ T6272] block nbd13: Possible stuck request ffff8880256e71c0: control (read@1024,1024B). Runtime 30 seconds [ 220.580754][ T6272] block nbd13: Possible stuck request ffff8880256e7380: control (read@2048,1024B). Runtime 30 seconds [ 220.580782][ T6272] block nbd13: Possible stuck request ffff8880256e7540: control (read@3072,1024B). Runtime 30 seconds [ 222.410752][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.465247][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.517506][ T159] bond0 (unregistering): Released all slaves [ 224.437772][ T6272] block nbd0: Possible stuck request ffff888024dd5080: control (read@0,1024B). Runtime 120 seconds [ 224.438062][ T6272] block nbd0: Possible stuck request ffff888024dd5240: control (read@1024,1024B). Runtime 120 seconds [ 224.438204][ T6272] block nbd0: Possible stuck request ffff888024dd5400: control (read@2048,1024B). Runtime 120 seconds [ 224.438346][ T6272] block nbd0: Possible stuck request ffff888024dd55c0: control (read@3072,1024B). Runtime 120 seconds [ 224.879325][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.208'. [ 225.050779][ T6272] block nbd1: Possible stuck request ffff888024ea7000: control (read@0,1024B). Runtime 120 seconds [ 225.050826][ T6272] block nbd1: Possible stuck request ffff888024ea71c0: control (read@1024,1024B). Runtime 120 seconds [ 225.050856][ T6272] block nbd1: Possible stuck request ffff888024ea7380: control (read@2048,1024B). Runtime 120 seconds [ 225.050886][ T6272] block nbd1: Possible stuck request ffff888024ea7540: control (read@3072,1024B). Runtime 120 seconds [ 225.074249][ T6768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.074963][ T6768] batadv_slave_0: entered promiscuous mode [ 226.180039][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.180183][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.181099][ T6649] bridge_slave_0: entered allmulticast mode [ 226.188528][ T6649] bridge_slave_0: entered promiscuous mode [ 226.317868][ T6779] tipc: Started in network mode [ 226.317976][ T6779] tipc: Node identity 9e2b41ddaf12, cluster identity 4711 [ 226.318220][ T6779] tipc: Enabled bearer , priority 0 [ 226.330866][ T63] block nbd2: Possible stuck request ffff888024ede000: control (read@0,1024B). Runtime 120 seconds [ 226.330919][ T63] block nbd2: Possible stuck request ffff888024ede1c0: control (read@1024,1024B). Runtime 120 seconds [ 226.330949][ T63] block nbd2: Possible stuck request ffff888024ede380: control (read@2048,1024B). Runtime 120 seconds [ 226.330979][ T63] block nbd2: Possible stuck request ffff888024ede540: control (read@3072,1024B). Runtime 120 seconds [ 226.340941][ T6780] syzkaller0: entered promiscuous mode [ 226.340969][ T6780] syzkaller0: entered allmulticast mode [ 226.371629][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.371781][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.372041][ T6649] bridge_slave_1: entered allmulticast mode [ 226.387554][ T6649] bridge_slave_1: entered promiscuous mode [ 226.670159][ T6777] tipc: Resetting bearer [ 226.716815][ T6776] tipc: Resetting bearer [ 226.991586][ T6272] block nbd10: Possible stuck request ffff8880255b5080: control (read@0,1024B). Runtime 60 seconds [ 226.992486][ T6272] block nbd10: Possible stuck request ffff8880255b5240: control (read@1024,1024B). Runtime 60 seconds [ 226.992660][ T6272] block nbd10: Possible stuck request ffff8880255b5400: control (read@2048,1024B). Runtime 60 seconds [ 226.992806][ T6272] block nbd10: Possible stuck request ffff8880255b55c0: control (read@3072,1024B). Runtime 60 seconds [ 227.413193][ T31] tipc: Node number set to 825835997 [ 227.760785][ T6776] tipc: Disabling bearer [ 228.250819][ T6272] block nbd14: Possible stuck request ffff888025790000: control (read@0,1024B). Runtime 30 seconds [ 228.250852][ T6272] block nbd14: Possible stuck request ffff8880257901c0: control (read@1024,1024B). Runtime 30 seconds [ 228.250868][ T6272] block nbd14: Possible stuck request ffff888025790380: control (read@2048,1024B). Runtime 30 seconds [ 228.250884][ T6272] block nbd14: Possible stuck request ffff888025790540: control (read@3072,1024B). Runtime 30 seconds [ 228.460633][ T159] hsr_slave_0: left promiscuous mode [ 228.526091][ T159] hsr_slave_1: left promiscuous mode [ 228.527993][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.528056][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.594929][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.594958][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.755606][ T159] veth1_macvtap: left promiscuous mode [ 228.755864][ T159] veth0_macvtap: left promiscuous mode [ 228.756196][ T159] veth1_vlan: left promiscuous mode [ 228.756515][ T159] veth0_vlan: left promiscuous mode [ 229.560762][ T6272] block nbd15: Possible stuck request ffff8880257c0000: control (read@0,1024B). Runtime 30 seconds [ 229.560805][ T6272] block nbd15: Possible stuck request ffff8880257c01c0: control (read@1024,1024B). Runtime 30 seconds [ 229.560835][ T6272] block nbd15: Possible stuck request ffff8880257c0380: control (read@2048,1024B). Runtime 30 seconds [ 229.560864][ T6272] block nbd15: Possible stuck request ffff8880257c0540: control (read@3072,1024B). Runtime 30 seconds [ 231.055338][ T5921] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 231.217010][ T63] block nbd3: Possible stuck request ffff888024f15080: control (read@0,1024B). Runtime 120 seconds [ 231.217058][ T63] block nbd3: Possible stuck request ffff888024f15240: control (read@1024,1024B). Runtime 120 seconds [ 231.217088][ T63] block nbd3: Possible stuck request ffff888024f15400: control (read@2048,1024B). Runtime 120 seconds [ 231.217186][ T63] block nbd3: Possible stuck request ffff888024f155c0: control (read@3072,1024B). Runtime 120 seconds [ 231.391617][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 231.403076][ T5921] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 231.403105][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.414166][ T5921] usb 5-1: config 0 descriptor?? [ 231.505633][ T5921] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 231.846303][ T5921] gspca_vc032x: reg_r err -32 [ 231.846322][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846331][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846340][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846348][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846357][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846365][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846374][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846382][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846391][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846398][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846407][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846415][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846423][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846431][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846439][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846447][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846455][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846464][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.846472][ T5921] gspca_vc032x: Unknown sensor... [ 231.846559][ T5921] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 233.060756][ T6739] usb 5-1: USB disconnect, device number 11 [ 235.064683][ T6837] nbd17: detected capacity change from 0 to 127 [ 235.684832][ T5848] block nbd17: Receive control failed (result -104) [ 238.208992][ T159] team0 (unregistering): Port device team_slave_1 removed [ 238.471231][ T159] team0 (unregistering): Port device team_slave_0 removed [ 239.790884][ T6272] block nbd7: Possible stuck request ffff888025460000: control (read@0,1024B). Runtime 120 seconds [ 239.790931][ T6272] block nbd7: Possible stuck request ffff8880254601c0: control (read@1024,1024B). Runtime 120 seconds [ 239.790962][ T6272] block nbd7: Possible stuck request ffff888025460380: control (read@2048,1024B). Runtime 120 seconds [ 239.790992][ T6272] block nbd7: Possible stuck request ffff888025460540: control (read@3072,1024B). Runtime 120 seconds [ 242.141497][ T6649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.168337][ T6649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.746513][ T6649] team0: Port device team_slave_0 added [ 242.790642][ T6739] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 242.894682][ T6649] team0: Port device team_slave_1 added [ 242.964925][ T6739] usb 1-1: Using ep0 maxpacket: 32 [ 242.973110][ T6739] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 242.973137][ T6739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.205077][ T6739] usb 1-1: config 0 descriptor?? [ 243.271401][ T6739] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 243.422775][ T6739] gspca_vc032x: reg_r err -32 [ 243.422788][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422793][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422798][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422802][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422806][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422810][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422814][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422819][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422823][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422827][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422831][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422836][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422840][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422844][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422848][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422852][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422856][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422860][ T6739] gspca_vc032x: I2c Bus Busy Wait 00 [ 243.422864][ T6739] gspca_vc032x: Unknown sensor... [ 243.422915][ T6739] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 244.575209][ T6527] veth0_vlan: entered promiscuous mode [ 244.610111][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.610126][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.610150][ T6649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.639161][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.639177][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.639200][ T6649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.761467][ T6527] veth1_vlan: entered promiscuous mode [ 246.000577][ T6272] block nbd11: Possible stuck request ffff888025625080: control (read@0,1024B). Runtime 60 seconds [ 246.000621][ T6272] block nbd11: Possible stuck request ffff888025625240: control (read@1024,1024B). Runtime 60 seconds [ 246.000651][ T6272] block nbd11: Possible stuck request ffff888025625400: control (read@2048,1024B). Runtime 60 seconds [ 246.000681][ T6272] block nbd11: Possible stuck request ffff8880256255c0: control (read@3072,1024B). Runtime 60 seconds [ 246.033930][ T5922] usb 1-1: USB disconnect, device number 9 [ 246.777688][ T6649] hsr_slave_0: entered promiscuous mode [ 246.778454][ T6649] hsr_slave_1: entered promiscuous mode [ 246.779039][ T6649] debugfs: 'hsr0' already exists in 'hsr' [ 246.779055][ T6649] Cannot create hsr debugfs directory [ 248.588135][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.656194][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.657900][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.659738][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.692242][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.088521][ T63] block nbd12: Possible stuck request ffff888025687000: control (read@0,1024B). Runtime 60 seconds [ 250.088552][ T63] block nbd12: Possible stuck request ffff8880256871c0: control (read@1024,1024B). Runtime 60 seconds [ 250.088568][ T63] block nbd12: Possible stuck request ffff888025687380: control (read@2048,1024B). Runtime 60 seconds [ 250.088584][ T63] block nbd12: Possible stuck request ffff888025687540: control (read@3072,1024B). Runtime 60 seconds [ 250.730977][ T6272] block nbd13: Possible stuck request ffff8880256e7000: control (read@0,1024B). Runtime 60 seconds [ 250.731022][ T6272] block nbd13: Possible stuck request ffff8880256e71c0: control (read@1024,1024B). Runtime 60 seconds [ 250.731053][ T6272] block nbd13: Possible stuck request ffff8880256e7380: control (read@2048,1024B). Runtime 60 seconds [ 250.731083][ T6272] block nbd13: Possible stuck request ffff8880256e7540: control (read@3072,1024B). Runtime 60 seconds [ 250.851861][ T5848] Bluetooth: hci5: command tx timeout [ 252.656715][ T6951] openvswitch: netlink: Flow key attr not present in new flow. [ 252.930687][ T5848] Bluetooth: hci5: command tx timeout [ 254.510908][ T6272] block nbd0: Possible stuck request ffff888024dd5080: control (read@0,1024B). Runtime 150 seconds [ 254.510952][ T6272] block nbd0: Possible stuck request ffff888024dd5240: control (read@1024,1024B). Runtime 150 seconds [ 254.510982][ T6272] block nbd0: Possible stuck request ffff888024dd5400: control (read@2048,1024B). Runtime 150 seconds [ 254.511012][ T6272] block nbd0: Possible stuck request ffff888024dd55c0: control (read@3072,1024B). Runtime 150 seconds [ 255.023675][ T5154] Bluetooth: hci5: command tx timeout [ 255.678950][ T5154] Bluetooth: hci1: command 0x1003 tx timeout [ 255.727236][ T5848] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 255.790789][ T6272] block nbd1: Possible stuck request ffff888024ea7000: control (read@0,1024B). Runtime 150 seconds [ 255.790912][ T6272] block nbd1: Possible stuck request ffff888024ea71c0: control (read@1024,1024B). Runtime 150 seconds [ 255.790942][ T6272] block nbd1: Possible stuck request ffff888024ea7380: control (read@2048,1024B). Runtime 150 seconds [ 255.790972][ T6272] block nbd1: Possible stuck request ffff888024ea7540: control (read@3072,1024B). Runtime 150 seconds [ 255.807177][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.422247][ T63] block nbd2: Possible stuck request ffff888024ede000: control (read@0,1024B). Runtime 150 seconds [ 256.422280][ T63] block nbd2: Possible stuck request ffff888024ede1c0: control (read@1024,1024B). Runtime 150 seconds [ 256.422296][ T63] block nbd2: Possible stuck request ffff888024ede380: control (read@2048,1024B). Runtime 150 seconds [ 256.422312][ T63] block nbd2: Possible stuck request ffff888024ede540: control (read@3072,1024B). Runtime 150 seconds [ 257.052583][ T6272] block nbd10: Possible stuck request ffff8880255b5080: control (read@0,1024B). Runtime 90 seconds [ 257.052631][ T6272] block nbd10: Possible stuck request ffff8880255b5240: control (read@1024,1024B). Runtime 90 seconds [ 257.052661][ T6272] block nbd10: Possible stuck request ffff8880255b5400: control (read@2048,1024B). Runtime 90 seconds [ 257.052691][ T6272] block nbd10: Possible stuck request ffff8880255b55c0: control (read@3072,1024B). Runtime 90 seconds [ 257.090549][ T5848] Bluetooth: hci5: command tx timeout [ 258.939873][ T6272] block nbd14: Possible stuck request ffff888025790000: control (read@0,1024B). Runtime 60 seconds [ 258.939921][ T6272] block nbd14: Possible stuck request ffff8880257901c0: control (read@1024,1024B). Runtime 60 seconds [ 258.939951][ T6272] block nbd14: Possible stuck request ffff888025790380: control (read@2048,1024B). Runtime 60 seconds [ 258.939979][ T6272] block nbd14: Possible stuck request ffff888025790540: control (read@3072,1024B). Runtime 60 seconds [ 259.640775][ T6272] block nbd15: Possible stuck request ffff8880257c0000: control (read@0,1024B). Runtime 60 seconds [ 259.640821][ T6272] block nbd15: Possible stuck request ffff8880257c01c0: control (read@1024,1024B). Runtime 60 seconds [ 259.640851][ T6272] block nbd15: Possible stuck request ffff8880257c0380: control (read@2048,1024B). Runtime 60 seconds [ 259.640880][ T6272] block nbd15: Possible stuck request ffff8880257c0540: control (read@3072,1024B). Runtime 60 seconds [ 260.903844][ T5154] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 261.544863][ T63] block nbd3: Possible stuck request ffff888024f15080: control (read@0,1024B). Runtime 150 seconds [ 261.544910][ T63] block nbd3: Possible stuck request ffff888024f15240: control (read@1024,1024B). Runtime 150 seconds [ 261.544941][ T63] block nbd3: Possible stuck request ffff888024f15400: control (read@2048,1024B). Runtime 150 seconds [ 261.544969][ T63] block nbd3: Possible stuck request ffff888024f155c0: control (read@3072,1024B). Runtime 150 seconds [ 262.961043][ T6999] lo speed is unknown, defaulting to 1000 [ 262.965318][ T6999] lo speed is unknown, defaulting to 1000 [ 262.969014][ T6999] lo speed is unknown, defaulting to 1000 [ 263.253868][ T6999] infiniband sz1: set active [ 263.253895][ T6999] infiniband sz1: added lo [ 263.265426][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.314269][ T6999] RDS/IB: sz1: added [ 263.314704][ T6999] smc: adding ib device sz1 with port count 1 [ 263.314936][ T6999] smc: ib device sz1 port 1 has pnetid [ 263.318844][ T6999] lo speed is unknown, defaulting to 1000 [ 263.502819][ T6999] lo speed is unknown, defaulting to 1000 [ 263.665182][ T6999] lo speed is unknown, defaulting to 1000 [ 263.826705][ T6999] lo speed is unknown, defaulting to 1000 [ 264.047924][ T6223] lo speed is unknown, defaulting to 1000 [ 264.048769][ T6999] lo speed is unknown, defaulting to 1000 [ 264.051139][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.212018][ T6999] lo speed is unknown, defaulting to 1000 [ 264.373088][ T6999] lo speed is unknown, defaulting to 1000 [ 264.534816][ T6999] lo speed is unknown, defaulting to 1000 [ 264.695414][ T6999] lo speed is unknown, defaulting to 1000 [ 264.977890][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.985694][ T6915] chnl_net:caif_netlink_parms(): no params data found [ 264.999008][ T5852] lo speed is unknown, defaulting to 1000 [ 265.000010][ T6712] bridge_slave_1: left allmulticast mode [ 265.000039][ T6712] bridge_slave_1: left promiscuous mode [ 265.000300][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.252409][ T6712] bridge_slave_0: left allmulticast mode [ 265.252441][ T6712] bridge_slave_0: left promiscuous mode [ 265.252701][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.396644][ T6272] block nbd17: Possible stuck request ffff888053410000: control (read@0,1024B). Runtime 30 seconds [ 265.396690][ T6272] block nbd17: Possible stuck request ffff8880534101c0: control (read@1024,1024B). Runtime 30 seconds [ 265.396719][ T6272] block nbd17: Possible stuck request ffff888053410380: control (read@2048,1024B). Runtime 30 seconds [ 265.396746][ T6272] block nbd17: Possible stuck request ffff888053410540: control (read@3072,1024B). Runtime 30 seconds [ 265.730915][ T5922] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 265.938729][ T5922] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 265.938827][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.938951][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.938973][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 265.944725][ T5922] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 265.944743][ T5922] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 265.944753][ T5922] usb 5-1: Manufacturer: syz [ 265.948095][ T5922] usb 5-1: config 0 descriptor?? [ 266.435711][ T5922] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 266.735636][ T5922] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 268.023298][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.061335][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 268.063555][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.067267][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.088724][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.092131][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.260996][ T5921] usb 5-1: USB disconnect, device number 12 [ 269.858458][ T6272] block nbd7: Possible stuck request ffff888025460000: control (read@0,1024B). Runtime 150 seconds [ 269.858504][ T6272] block nbd7: Possible stuck request ffff8880254601c0: control (read@1024,1024B). Runtime 150 seconds [ 269.858535][ T6272] block nbd7: Possible stuck request ffff888025460380: control (read@2048,1024B). Runtime 150 seconds [ 269.858564][ T6272] block nbd7: Possible stuck request ffff888025460540: control (read@3072,1024B). Runtime 150 seconds [ 270.213721][ T5848] Bluetooth: hci1: command tx timeout [ 270.402289][ T6712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.452481][ T6712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.496662][ T6712] bond0 (unregistering): Released all slaves [ 270.642970][ T6649] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.293025][ T5848] Bluetooth: hci1: command tx timeout [ 275.037547][ T5848] Bluetooth: hci1: command tx timeout [ 275.526190][ T7020] lo speed is unknown, defaulting to 1000 [ 275.526992][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.527173][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.527429][ T6915] bridge_slave_0: entered allmulticast mode [ 275.598416][ T6915] bridge_slave_0: entered promiscuous mode [ 275.648668][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.649799][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.650067][ T6915] bridge_slave_1: entered allmulticast mode [ 275.672781][ T6915] bridge_slave_1: entered promiscuous mode [ 275.894750][ T6712] hsr_slave_0: left promiscuous mode [ 275.971374][ T6712] hsr_slave_1: left promiscuous mode [ 275.981905][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.251540][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.271293][ T6272] block nbd11: Possible stuck request ffff888025625080: control (read@0,1024B). Runtime 90 seconds [ 276.271361][ T6272] block nbd11: Possible stuck request ffff888025625240: control (read@1024,1024B). Runtime 90 seconds [ 276.271386][ T6272] block nbd11: Possible stuck request ffff888025625400: control (read@2048,1024B). Runtime 90 seconds [ 276.271402][ T6272] block nbd11: Possible stuck request ffff8880256255c0: control (read@3072,1024B). Runtime 90 seconds [ 276.475883][ T6712] veth1_vlan: left promiscuous mode [ 276.476000][ T6712] veth0_vlan: left promiscuous mode [ 277.100889][ T5848] Bluetooth: hci1: command tx timeout [ 280.730688][ T63] block nbd12: Possible stuck request ffff888025687000: control (read@0,1024B). Runtime 90 seconds [ 280.730719][ T63] block nbd12: Possible stuck request ffff8880256871c0: control (read@1024,1024B). Runtime 90 seconds [ 280.730736][ T63] block nbd12: Possible stuck request ffff888025687380: control (read@2048,1024B). Runtime 90 seconds [ 280.730752][ T63] block nbd12: Possible stuck request ffff888025687540: control (read@3072,1024B). Runtime 90 seconds [ 281.380673][ T6272] block nbd13: Possible stuck request ffff8880256e7000: control (read@0,1024B). Runtime 90 seconds [ 281.380718][ T6272] block nbd13: Possible stuck request ffff8880256e71c0: control (read@1024,1024B). Runtime 90 seconds [ 281.380734][ T6272] block nbd13: Possible stuck request ffff8880256e7380: control (read@2048,1024B). Runtime 90 seconds [ 281.380750][ T6272] block nbd13: Possible stuck request ffff8880256e7540: control (read@3072,1024B). Runtime 90 seconds [ 282.792218][ T6712] team0 (unregistering): Port device team_slave_1 removed [ 283.435863][ T6712] team0 (unregistering): Port device team_slave_0 removed [ 284.570660][ T6272] block nbd0: Possible stuck request ffff888024dd5080: control (read@0,1024B). Runtime 180 seconds [ 284.570705][ T6272] block nbd0: Possible stuck request ffff888024dd5240: control (read@1024,1024B). Runtime 180 seconds [ 284.570736][ T6272] block nbd0: Possible stuck request ffff888024dd5400: control (read@2048,1024B). Runtime 180 seconds [ 284.570766][ T6272] block nbd0: Possible stuck request ffff888024dd55c0: control (read@3072,1024B). Runtime 180 seconds [ 285.852046][ T6272] block nbd1: Possible stuck request ffff888024ea7000: control (read@0,1024B). Runtime 180 seconds [ 285.852093][ T6272] block nbd1: Possible stuck request ffff888024ea71c0: control (read@1024,1024B). Runtime 180 seconds [ 285.852123][ T6272] block nbd1: Possible stuck request ffff888024ea7380: control (read@2048,1024B). Runtime 180 seconds [ 285.852153][ T6272] block nbd1: Possible stuck request ffff888024ea7540: control (read@3072,1024B). Runtime 180 seconds [ 286.484881][ T38] INFO: task syz.1.77:6237 blocked for more than 143 seconds. [ 286.484909][ T38] Not tainted syzkaller #0 [ 286.484914][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.484927][ T38] task:syz.1.77 state:D stack:28056 pid:6237 tgid:6236 ppid:5842 task_flags:0x400140 flags:0x00004004 [ 286.484969][ T38] Call Trace: [ 286.484973][ T38] [ 286.484982][ T38] __schedule+0x16f3/0x4c20 [ 286.485019][ T38] ? __pfx___schedule+0x10/0x10 [ 286.485043][ T38] rt_mutex_schedule+0x77/0xf0 [ 286.485055][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 286.485072][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 286.485083][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 286.485095][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 286.485105][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 286.485123][ T38] ? __pfx_wait_on_inode+0x10/0x10 [ 286.485141][ T38] ? bdev_open+0xe0/0xcc0 [ 286.485149][ T38] mutex_lock_nested+0x16a/0x1d0 [ 286.485162][ T38] bdev_open+0xe0/0xcc0 [ 286.485177][ T38] blkdev_open+0x3bd/0x520 [ 286.485189][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 286.485199][ T38] do_dentry_open+0x9ae/0x1350 [ 286.485223][ T38] vfs_open+0x3b/0x350 [ 286.485231][ T38] ? path_openat+0x2ed9/0x3840 [ 286.485243][ T38] path_openat+0x2ef1/0x3840 [ 286.485258][ T38] ? try_to_take_rt_mutex+0x840/0xb00 [ 286.485283][ T38] ? __pfx_path_openat+0x10/0x10 [ 286.485294][ T38] ? do_raw_spin_lock+0x121/0x290 [ 286.485311][ T38] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 286.485323][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.485335][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 286.485351][ T38] do_filp_open+0x1fa/0x410 [ 286.485367][ T38] ? __pfx_do_filp_open+0x10/0x10 [ 286.485381][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 286.485404][ T38] ? alloc_fd+0x64f/0x6c0 [ 286.485423][ T38] do_sys_openat2+0x121/0x1c0 [ 286.485435][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 286.485445][ T38] ? exc_page_fault+0x76/0xf0 [ 286.485465][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 286.485478][ T38] __x64_sys_openat+0x138/0x170 [ 286.485492][ T38] do_syscall_64+0xfa/0x3b0 [ 286.485504][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.485515][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.485525][ T38] ? clear_bhb_loop+0x60/0xb0 [ 286.485537][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.485547][ T38] RIP: 0033:0x7fa188ded550 [ 286.485559][ T38] RSP: 002b:00007fa187055b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 286.485569][ T38] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa188ded550 [ 286.485576][ T38] RDX: 0000000000000000 RSI: 00007fa187055c10 RDI: 00000000ffffff9c [ 286.485583][ T38] RBP: 00007fa187055c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 286.485589][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 286.485596][ T38] R13: 00007fa189016038 R14: 00007fa189015fa0 R15: 00007fffa706da18 [ 286.485612][ T38] [ 286.485634][ T38] [ 286.485634][ T38] Showing all locks held in the system: [ 286.485641][ T38] 1 lock held by khungtaskd/38: [ 286.485647][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 286.485678][ T38] 3 locks held by kworker/u8:8/1221: [ 286.485684][ T38] #0: ffff88814d08f138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 286.485708][ T38] #1: ffffc900052bfbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 286.485732][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 286.485766][ T38] 2 locks held by kworker/u8:11/1417: [ 286.485787][ T38] 2 locks held by dhcpcd/5500: [ 286.485795][ T38] #0: ffff888039424908 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 286.485837][ T38] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 286.485866][ T38] 2 locks held by getty/5594: [ 286.485871][ T38] #0: ffff88823bf3c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.485896][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 286.485922][ T38] 1 lock held by udevd/5887: [ 286.485927][ T38] #0: ffff888024e664c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.485948][ T38] 1 lock held by udevd/5894: [ 286.485953][ T38] #0: ffff888024c5e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.485976][ T38] 3 locks held by kworker/1:5/5922: [ 286.485981][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 286.486004][ T38] #1: ffffc9000551fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 286.486027][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 286.486053][ T38] 1 lock held by udevd/5969: [ 286.486058][ T38] #0: ffff888024d8a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.486078][ T38] 1 lock held by udevd/5987: [ 286.486083][ T38] #0: ffff88802564e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.486103][ T38] 1 lock held by udevd/5988: [ 286.486108][ T38] #0: ffff888024e7e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.486127][ T38] 1 lock held by udevd/5989: [ 286.486132][ T38] #0: ffff88803ae964c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.486152][ T38] 1 lock held by udevd/5999: [ 286.486157][ T38] #0: ffff888024fae4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.486177][ T38] 1 lock held by udevd/6038: [ 286.486182][ T38] #0: ffff8880256564c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.486204][ T38] 1 lock held by udevd/6162: [ 286.486210][ T38] #0: ffff8880256524c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.486230][ T38] 1 lock held by udevd/6194: [ 286.486235][ T38] #0: ffff8880254fe4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.486256][ T38] 1 lock held by udevd/6199: [ 286.486261][ T38] #0: ffff8880255524c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.486281][ T38] 1 lock held by udevd/6201: [ 286.486287][ T38] #0: ffff88802550e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.486307][ T38] 3 locks held by kworker/0:8/6223: [ 286.486313][ T38] 1 lock held by syz.1.77/6237: [ 286.486319][ T38] #0: ffff888024d8a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.486339][ T38] 3 locks held by kworker/u8:15/6376: [ 286.486344][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 286.486368][ T38] #1: ffffc9000b9a7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 286.486391][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 286.486416][ T38] 1 lock held by syz.2.128/6422: [ 286.486422][ T38] #0: ffff888024e664c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 286.486443][ T38] 4 locks held by kworker/u8:19/6712: [ 286.486453][ T38] 2 locks held by syz-executor/6915: [ 286.486459][ T38] #0: ffffffff8e43a940 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 286.486485][ T38] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 286.486512][ T38] 2 locks held by syz-executor/7020: [ 286.486518][ T38] #0: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 286.486540][ T38] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 286.486563][ T38] 3 locks held by syz.4.283/7113: [ 286.486569][ T38] #0: ffffffff8ed37e80 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 286.486593][ T38] #1: ffff88803852e908 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 286.486615][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_dump_wiphy+0x49/0x6f0 [ 286.486636][ T38] 1 lock held by syz.0.284/7118: [ 286.486641][ T38] #0: ffff888036b84098 (&u->peer_wait){+.+.}-{3:3}, at: finish_wait+0xbf/0x1f0 [ 286.486665][ T38] 2 locks held by syz.0.284/7119: [ 286.486670][ T38] 3 locks held by syz.0.284/7120: [ 286.486675][ T38] #0: ffff888036b83fe8 (&u->lock){+.+.}-{3:3}, at: unix_dgram_sendmsg+0x90e/0x1850 [ 286.486698][ T38] #1: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 286.486719][ T38] #2: ffff888036b84098 (&u->peer_wait){+.+.}-{3:3}, at: prepare_to_wait_exclusive+0x44/0x230 [ 286.486743][ T38] [ 286.486746][ T38] ============================================= [ 286.486746][ T38] [ 286.486756][ T38] NMI backtrace for cpu 0 [ 286.486772][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 286.486783][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.486788][ T38] Call Trace: [ 286.486793][ T38] [ 286.486797][ T38] dump_stack_lvl+0x189/0x250 [ 286.486813][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.486827][ T38] ? __pfx__printk+0x10/0x10 [ 286.486843][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 286.486855][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 286.486866][ T38] ? __pfx__printk+0x10/0x10 [ 286.486877][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.486890][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 286.486901][ T38] watchdog+0xf93/0xfe0 [ 286.486920][ T38] ? watchdog+0x1de/0xfe0 [ 286.486934][ T38] kthread+0x70e/0x8a0 [ 286.486949][ T38] ? __pfx_watchdog+0x10/0x10 [ 286.486960][ T38] ? __pfx_kthread+0x10/0x10 [ 286.486975][ T38] ? __pfx_kthread+0x10/0x10 [ 286.486989][ T38] ret_from_fork+0x3fc/0x770 [ 286.487002][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 286.487017][ T38] ? __switch_to_asm+0x39/0x70 [ 286.487025][ T38] ? __switch_to_asm+0x33/0x70 [ 286.487033][ T38] ? __pfx_kthread+0x10/0x10 [ 286.487047][ T38] ret_from_fork_asm+0x1a/0x30 [ 286.487063][ T38] [ 286.487066][ T38] Sending NMI from CPU 0 to CPUs 1: [ 286.487099][ C1] NMI backtrace for cpu 1 [ 286.487112][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 286.487130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.487149][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 286.487168][ C1] Code: 53 b2 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 f3 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 286.487181][ C1] RSP: 0018:ffffc900001d7de0 EFLAGS: 000002c6 [ 286.487194][ C1] RAX: 42d66cde9d5a2600 RBX: ffffffff81954f08 RCX: 42d66cde9d5a2600 [ 286.487212][ C1] RDX: 0000000000000001 RSI: ffffffff8d0384e3 RDI: ffffffff8b620c80 [ 286.487223][ C1] RBP: ffffc900001d7f20 R08: ffff8880b893341b R09: 1ffff11017126683 [ 286.487235][ C1] R10: dffffc0000000000 R11: ffffed1017126684 R12: ffffffff8f1d4430 [ 286.487246][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038dfb28 [ 286.487257][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 286.487270][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.487281][ C1] CR2: 000020000005e030 CR3: 000000003dda6000 CR4: 00000000003526f0 [ 286.487295][ C1] Call Trace: [ 286.487300][ C1] [ 286.487306][ C1] default_idle+0x13/0x20 [ 286.487324][ C1] default_idle_call+0x74/0xb0 [ 286.487342][ C1] do_idle+0x1e8/0x510 [ 286.487359][ C1] ? __pfx_do_idle+0x10/0x10 [ 286.487382][ C1] cpu_startup_entry+0x44/0x60 [ 286.487396][ C1] start_secondary+0x101/0x110 [ 286.487412][ C1] common_startup_64+0x13e/0x147 [ 286.487440][ C1] [ 286.488085][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 286.488094][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 286.488105][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.488111][ T38] Call Trace: [ 286.488115][ T38] [ 286.488119][ T38] dump_stack_lvl+0x99/0x250 [ 286.488134][ T38] ? __asan_memcpy+0x40/0x70 [ 286.488144][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.488158][ T38] ? __pfx__printk+0x10/0x10 [ 286.488173][ T38] vpanic+0x281/0x750 [ 286.488194][ T38] ? __pfx_vpanic+0x10/0x10 [ 286.488208][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 286.488218][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.488235][ T38] panic+0xb9/0xc0 [ 286.488251][ T38] ? __pfx_panic+0x10/0x10 [ 286.488266][ T38] ? irq_work_queue+0xc3/0x140 [ 286.488280][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 286.488291][ T38] watchdog+0xfd2/0xfe0 [ 286.488305][ T38] ? watchdog+0x1de/0xfe0 [ 286.488319][ T38] kthread+0x70e/0x8a0 [ 286.488333][ T38] ? __pfx_watchdog+0x10/0x10 [ 286.488345][ T38] ? __pfx_kthread+0x10/0x10 [ 286.488360][ T38] ? __pfx_kthread+0x10/0x10 [ 286.488382][ T38] ret_from_fork+0x3fc/0x770 [ 286.488401][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 286.488416][ T38] ? __switch_to_asm+0x39/0x70 [ 286.488424][ T38] ? __switch_to_asm+0x33/0x70 [ 286.488432][ T38] ? __pfx_kthread+0x10/0x10 [ 286.488446][ T38] ret_from_fork_asm+0x1a/0x30 [ 286.488467][ T38] [ 286.488623][ T38] Kernel Offset: disabled