last executing test programs: 12.816586662s ago: executing program 1 (id=1048): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r4 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) 11.141392046s ago: executing program 1 (id=1051): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2a) close(r3) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d20"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5b}, 0x94) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x8, 0x2) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 9.932683619s ago: executing program 2 (id=1054): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000000c0)=0x84) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r1, 0x8, 0x9, 0x2}, &(0x7f0000000180)=0x10) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r2, &(0x7f00000002c0)=@phonet, &(0x7f00000000c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 8.934651764s ago: executing program 3 (id=1056): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) userfaultfd(0x801) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x9, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x9, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x7, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x20000000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x6, 0x25], [0x8009, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0xfffffffe, 0xb9, 0xce4, 0x1ff, 0x1, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x15, 0x1, 0x2000002, 0x14c, 0x60a7, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 8.476715464s ago: executing program 0 (id=1057): socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) 8.047107903s ago: executing program 2 (id=1058): syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0012000000000000000079759717"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xe) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000400)='bfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r5, 0x0}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000890200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 7.984411696s ago: executing program 0 (id=1059): io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0x2, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400000}]) 7.976440486s ago: executing program 3 (id=1060): io_setup(0x4, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 7.369051563s ago: executing program 1 (id=1061): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040), 0x4) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES8=r0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$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") 6.191806886s ago: executing program 2 (id=1062): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x80) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000001480)='./file1\x00', 0xc00a, &(0x7f0000000040)=ANY=[], 0x11, 0x6ae, &(0x7f0000000400)="$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") r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x4f00, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x148, 0xe74, 0x8, 0x401}}) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='osx.trusted.oveblay.upper\x00'], 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500009f921054000004000600000019c85b238724e7862eae43e0f97a4c83f67f5bdbc127823f6d83855ce9bc5d3d19b295e9b9552dd91e486fe401de996447a56a124455fac6078ce1d702c7882539da3d3a982b60714bcd2e42ba38", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000327bd7000fedbdf25830000000c009900040000001800000008001001010000000a0006010000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040041}, 0x4000) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0x3, 0x8, 0x0, 0x10, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x9, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x1000000000000, 0x1]}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)={0x40000}) ioctl$SG_SCSI_RESET(r3, 0x227b, 0x1000000000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.127451967s ago: executing program 2 (id=1063): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) 4.126170857s ago: executing program 1 (id=1071): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2a) close(r3) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5b}, 0x94) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000540)='./file0\x00', 0x8, 0x2) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3.502685464s ago: executing program 0 (id=1064): memfd_create(&(0x7f0000000400)='\x00', 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x1000, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.455055337s ago: executing program 3 (id=1065): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) mkdirat(0xffffffffffffffff, 0x0, 0xa629a24beed625ae) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x4000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff00c}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000680)={'ipvlan0\x00', &(0x7f00000003c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x4, 0x10000, 0x29, 0xc, 0x6, 0xfffff001, 0x8, 0x2, 0xe70c, 0xf, 0x6ed4, 0x2, 0x1000, 0xfff, 0x34b, 0x25, 0x1, 0x6, 0x7, 0x1, 0x11, 0x0, 0x1, 0xfff, 0x6, 0x8, 0x3, 0x6, 0x5, 0xc4, 0x1e000000, 0x8, 0xfffffe32, 0x8, 0x575, 0x101, 0x2, 0x6cc, 0x0, 0x3, 0x101, 0x4, 0x6, 0x7, 0x3d, 0xd7, 0x9, 0x3, 0x8001, 0x3ff, 0x6b61, 0x7, 0x8f20, 0x7f, 0x6, 0x0, 0x3, 0xfffff5d0, 0x2, 0x800, 0x5, 0x8001, 0x5, 0xffff, 0xffff, 0x80, 0x5, 0x932, 0xfffffff7, 0x7699, 0x34f, 0x22, 0x200, 0x1, 0xfffffffd, 0x6, 0x2, 0x0, 0xbd6, 0xffffffff, 0x7, 0x4, 0x7ff, 0xfffffffc, 0x5, 0x8, 0x5, 0x9, 0xff, 0x10000, 0x3, 0x4, 0x5, 0x8, 0x401, 0xe, 0x1, 0xfe000000, 0x613, 0x9, 0x0, 0xfffffff7, 0x6, 0x7, 0x7, 0x4d, 0x9, 0xa, 0x2, 0xc7, 0xd, 0x5, 0x9, 0x4, 0x3, 0x1, 0x800, 0x4, 0x8001, 0x3, 0x9, 0x0, 0xbc4, 0x8a, 0x0, 0x2d, 0xfffffff9]}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="e1083f0904221f0001ffffffffffe6f0c78febbe67"], 0x22) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xdd) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0c000200", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000006001d00eb00000008001800e00000020500050000000000060001000400000005001200080000000500050000000000"], 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0xc001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x50}}, 0x8004) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) 2.358657385s ago: executing program 0 (id=1066): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000000c0)=0x84) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r1, 0x8, 0x9, 0x2}, &(0x7f0000000180)=0x10) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r2, &(0x7f00000002c0)=@phonet, &(0x7f00000000c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.149666375s ago: executing program 3 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r5, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 1.730357623s ago: executing program 2 (id=1068): socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000280)={r7, r7, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) 1.047962604s ago: executing program 3 (id=1069): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) userfaultfd(0x801) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x9, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x9, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x7, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x20000000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x6, 0x25], [0x8009, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0xfffffffe, 0xb9, 0xce4, 0x1ff, 0x1, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x15, 0x1, 0x2000002, 0x14c, 0x60a7, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.037473284s ago: executing program 0 (id=1070): syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0012000000000000000079759717"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xe) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000400)='bfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r5, 0x0}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000890200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 997.745765ms ago: executing program 1 (id=1072): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x80) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000001480)='./file1\x00', 0xc00a, &(0x7f0000000040)=ANY=[], 0x11, 0x6ae, &(0x7f0000000400)="$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") r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x4f00, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x148, 0xe74, 0x8, 0x401}}) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='osx.trusted.oveblay.upper\x00'], 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500009f921054000004000600000019c85b238724e7862eae43e0f97a4c83f67f5bdbc127823f6d83855ce9bc5d3d19b295e9b9552dd91e486fe401de996447a56a124455fac6078ce1d702c7882539da3d3a982b60714bcd2e42ba38", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000327bd7000fedbdf25830000000c009900040000001800000008001001010000000a0006010000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040041}, 0x4000) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0x3, 0x8, 0x0, 0x10, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x9, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x1000000000000, 0x1]}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)={0x40000}) ioctl$SG_SCSI_RESET(r3, 0x227b, 0x1000000000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 712.777538ms ago: executing program 2 (id=1073): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040), 0x4) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES8=r0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$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") 596.788514ms ago: executing program 1 (id=1074): io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0x2, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400000}]) 23.856409ms ago: executing program 0 (id=1075): io_setup(0x4, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 0s ago: executing program 3 (id=1076): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) mkdirat(0xffffffffffffffff, 0x0, 0xa629a24beed625ae) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x4000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff00c}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000680)={'ipvlan0\x00', &(0x7f00000003c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x4, 0x10000, 0x29, 0xc, 0x6, 0xfffff001, 0x8, 0x2, 0xe70c, 0xf, 0x6ed4, 0x2, 0x1000, 0xfff, 0x34b, 0x25, 0x1, 0x6, 0x7, 0x1, 0x11, 0x0, 0x1, 0xfff, 0x6, 0x8, 0x3, 0x6, 0x5, 0xc4, 0x1e000000, 0x8, 0xfffffe32, 0x8, 0x575, 0x101, 0x2, 0x6cc, 0x0, 0x3, 0x101, 0x4, 0x6, 0x7, 0x3d, 0xd7, 0x9, 0x3, 0x8001, 0x3ff, 0x6b61, 0x7, 0x8f20, 0x7f, 0x6, 0x0, 0x3, 0xfffff5d0, 0x2, 0x800, 0x5, 0x8001, 0x5, 0xffff, 0xffff, 0x80, 0x5, 0x932, 0xfffffff7, 0x7699, 0x34f, 0x22, 0x200, 0x1, 0xfffffffd, 0x6, 0x2, 0x0, 0xbd6, 0xffffffff, 0x7, 0x4, 0x7ff, 0xfffffffc, 0x5, 0x8, 0x5, 0x9, 0xff, 0x10000, 0x3, 0x4, 0x5, 0x8, 0x401, 0xe, 0x1, 0xfe000000, 0x613, 0x9, 0x0, 0xfffffff7, 0x6, 0x7, 0x7, 0x4d, 0x9, 0xa, 0x2, 0xc7, 0xd, 0x5, 0x9, 0x4, 0x3, 0x1, 0x800, 0x4, 0x8001, 0x3, 0x9, 0x0, 0xbc4, 0x8a, 0x0, 0x2d, 0xfffffff9]}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="e1083f0904221f0001ffffffffffe6f0c78febbe67"], 0x22) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xdd) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0c000200", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000006001d00eb00000008001800e00000020500050000000000060001000400000005001200080000000500050000000000"], 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0xc001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x50}}, 0x8004) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) kernel console output (not intermixed with test programs): .0: Handspring Visor / Palm OS converter detected [ 88.307412][ T969] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 88.327741][ T969] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 88.496565][ T969] usb 3-1: USB disconnect, device number 2 [ 88.533519][ T969] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 88.598391][ T969] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 88.621334][ T969] visor 3-1:1.0: device disconnected [ 88.741568][ T5982] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 89.096516][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 91.153864][ T5994] sched: RT throttling activated [ 91.507334][ T5849] vhci_hcd: vhci_device speed not set [ 92.096335][ T969] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.286587][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 92.307810][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.342698][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.439750][ T969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 92.457495][ T969] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 92.471999][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.490779][ T969] usb 1-1: config 0 descriptor?? [ 93.312760][ T6010] netlink: 'syz.0.42': attribute type 2 has an invalid length. [ 93.339017][ T6010] netlink: 244 bytes leftover after parsing attributes in process `syz.0.42'. [ 93.405459][ T6032] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.456951][ T969] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 93.463973][ T969] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 93.471160][ T969] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 93.584773][ T969] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 93.592449][ T969] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 93.634182][ T969] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 94.464701][ T969] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 94.522665][ T969] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 94.684092][ T5851] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 94.721965][ T969] usb 1-1: USB disconnect, device number 2 [ 94.730990][ T5851] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 94.771889][ T5851] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 94.816328][ T5851] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 94.991819][ T6056] syz.0.59[6056]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.165029][ T6062] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.340985][ T6096] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.524175][ T6102] tipc: Can't bind to reserved service type 0 [ 104.199476][ T6123] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 104.206655][ T6125] Bluetooth: MGMT ver 1.22 [ 104.217889][ T6123] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 104.240991][ T6127] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.545059][ T6157] macvlan2: entered allmulticast mode [ 108.551064][ T6157] veth1_vlan: entered allmulticast mode [ 108.560566][ T6157] veth1_vlan: left allmulticast mode [ 116.396579][ T6243] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.120419][ T6265] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 118.929646][ T6280] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 119.348354][ T28] audit: type=1326 audit(1765386145.231:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5618f749 code=0x7ffc0000 [ 120.225247][ T28] audit: type=1326 audit(1765386145.241:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5618f749 code=0x7ffc0000 [ 120.303182][ T28] audit: type=1326 audit(1765386145.281:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f8f5618f749 code=0x7ffc0000 [ 120.425244][ T28] audit: type=1326 audit(1765386145.281:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5618f749 code=0x7ffc0000 [ 120.517604][ T28] audit: type=1326 audit(1765386145.281:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5618f749 code=0x7ffc0000 [ 121.196348][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.206133][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.765032][ T6309] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 128.926141][ T5850] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.089867][ T5850] usb 2-1: device descriptor read/all, error -71 [ 132.724493][ T28] audit: type=1800 audit(1765386158.601:7): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.166" name="bus" dev="overlay" ino=262 res=0 errno=0 [ 132.779309][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.785736][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.021289][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 135.448775][ T6424] syzkaller0: entered promiscuous mode [ 135.454279][ T6424] syzkaller0: entered allmulticast mode [ 135.495976][ T6422] nbd0: detected capacity change from 0 to 8589934655 [ 135.516385][ T5152] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.613469][ T51] block nbd0: Receive control failed (result -104) [ 135.735029][ T5152] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 135.766112][ T5152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.774199][ T5152] usb 1-1: Product: syz [ 135.813308][ T5152] usb 1-1: Manufacturer: syz [ 135.825385][ T5152] usb 1-1: SerialNumber: syz [ 135.930735][ T6432] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 135.937317][ T6432] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 135.953210][ T6432] vhci_hcd vhci_hcd.0: Device attached [ 135.963730][ T6433] vhci_hcd: connection closed [ 135.964149][ T3451] vhci_hcd: stop threads [ 135.976057][ T3451] vhci_hcd: release socket [ 135.980567][ T3451] vhci_hcd: disconnect device [ 137.656246][ T5152] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 137.665098][ T5152] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 137.871631][ T5152] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 137.911668][ T5152] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 137.946309][ T5152] usb 1-1: USB disconnect, device number 3 [ 137.973339][ T5152] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 138.036901][ T5152] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 138.074092][ T5152] visor 1-1:1.0: device disconnected [ 141.125329][ T6465] netlink: 284 bytes leftover after parsing attributes in process `syz.3.186'. [ 142.436296][ T6484] netlink: 164 bytes leftover after parsing attributes in process `syz.2.192'. [ 142.456301][ T5152] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.660660][ T5152] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 142.674779][ T5152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.707934][ T5152] usb 4-1: Product: syz [ 142.713452][ T5152] usb 4-1: Manufacturer: syz [ 142.720185][ T5152] usb 4-1: SerialNumber: syz [ 143.080510][ T5152] usb 4-1: palm_os_4_probe - error -110 getting connection info [ 143.093833][ T5152] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 143.106570][ T5152] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 143.129496][ T5152] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 143.308130][ T5152] usb 4-1: USB disconnect, device number 2 [ 143.354894][ T5152] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 143.494220][ T5152] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 143.537806][ T5152] visor 4-1:1.0: device disconnected [ 146.007140][ T5849] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.639891][ T5849] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.655206][ T5849] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 146.705221][ T5849] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.762936][ T5849] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 146.776912][ T5849] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 146.802435][ T5849] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.838583][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.161991][ T5849] usb 2-1: Product: syz [ 148.176095][ T5849] usb 2-1: Manufacturer: syz [ 148.850036][ T5849] cdc_wdm 2-1:1.0: skipping garbage [ 148.855293][ T5849] cdc_wdm 2-1:1.0: skipping garbage [ 148.866159][ T5849] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 148.872952][ T5849] cdc_wdm 2-1:1.0: Unknown control protocol [ 148.956593][ T5850] usb 2-1: USB disconnect, device number 4 [ 151.149656][ T5849] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 151.450852][ T5849] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 151.553398][ T6553] ALSA: mixer_oss: invalid OSS volume '' [ 151.562524][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.584718][ T5849] usb 4-1: Product: syz [ 151.596279][ T5849] usb 4-1: Manufacturer: syz [ 151.600914][ T5849] usb 4-1: SerialNumber: syz [ 151.618027][ T6553] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 151.624596][ T6553] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.660983][ T6553] vhci_hcd vhci_hcd.0: Device attached [ 151.913018][ T6554] vhci_hcd: connection closed [ 151.914515][ T11] vhci_hcd: stop threads [ 151.931325][ T23] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 151.948433][ T11] vhci_hcd: release socket [ 151.952984][ T11] vhci_hcd: disconnect device [ 151.953509][ T5849] usb 4-1: palm_os_4_probe - error -110 getting connection info [ 151.973159][ T5849] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 152.027488][ T5849] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 152.039502][ T5849] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 152.096681][ T6566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 152.246186][ T27] usb 4-1: USB disconnect, device number 3 [ 152.269871][ T27] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 152.320772][ T27] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 152.338388][ T27] visor 4-1:1.0: device disconnected [ 152.853306][ T6571] netlink: 'syz.0.220': attribute type 4 has an invalid length. [ 152.915599][ T6571] netlink: 17 bytes leftover after parsing attributes in process `syz.0.220'. [ 155.487563][ T6588] nbd1: detected capacity change from 0 to 8589934655 [ 155.592740][ T51] block nbd1: Receive control failed (result -104) [ 156.038250][ T6603] ALSA: mixer_oss: invalid OSS volume '' [ 156.139261][ T6603] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 156.145837][ T6603] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 156.206159][ T5849] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.253919][ T6603] vhci_hcd vhci_hcd.0: Device attached [ 156.759545][ T5849] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 156.829136][ T6615] ALSA: mixer_oss: invalid OSS volume '' [ 156.839677][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.871706][ T5849] usb 2-1: Product: syz [ 156.875993][ T5849] usb 2-1: Manufacturer: syz [ 156.886963][ T5849] usb 2-1: SerialNumber: syz [ 156.963891][ T6605] vhci_hcd: connection reset by peer [ 156.971117][ T1137] vhci_hcd: stop threads [ 156.981177][ T6615] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 156.987751][ T6615] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 157.006391][ T1137] vhci_hcd: release socket [ 157.021066][ T1137] vhci_hcd: disconnect device [ 157.048822][ T6615] vhci_hcd vhci_hcd.0: Device attached [ 157.106162][ T23] vhci_hcd: vhci_device speed not set [ 157.264339][ T5849] usb 2-1: palm_os_4_probe - error -110 getting connection info [ 157.325218][ T5849] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 157.391883][ T5152] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 157.502685][ T5849] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 157.569905][ T5849] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 157.946751][ T5851] usb 2-1: USB disconnect, device number 5 [ 157.967328][ T5851] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 158.015717][ T5851] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 158.034726][ T5851] visor 2-1:1.0: device disconnected [ 159.628231][ T6616] vhci_hcd: connection reset by peer [ 159.690314][ T146] vhci_hcd: stop threads [ 159.701076][ T146] vhci_hcd: release socket [ 159.710268][ T146] vhci_hcd: disconnect device [ 162.176339][ T5850] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 162.268448][ T6654] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 162.385208][ T5850] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 162.385249][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.385263][ T5850] usb 3-1: Product: syz [ 162.385273][ T5850] usb 3-1: Manufacturer: syz [ 162.385284][ T5850] usb 3-1: SerialNumber: syz [ 162.581436][ T5152] vhci_hcd: vhci_device speed not set [ 162.636186][ T969] IPVS: starting estimator thread 0... [ 162.697756][ T5850] usb 3-1: palm_os_4_probe - error -110 getting connection info [ 162.697804][ T5850] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 162.702004][ T5850] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 162.704690][ T5850] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 162.744842][ T6655] (null): rxe_set_mtu: Set mtu to 1024 [ 162.746194][ T6657] IPVS: using max 31 ests per chain, 74400 per kthread [ 162.778029][ T6655] wg2 speed is unknown, defaulting to 1000 [ 162.780946][ T6655] wg2 speed is unknown, defaulting to 1000 [ 162.783296][ T6655] wg2 speed is unknown, defaulting to 1000 [ 165.091384][ T5850] usb 3-1: USB disconnect, device number 3 [ 165.097369][ T5850] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 165.101179][ T5850] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 165.101779][ T5850] visor 3-1:1.0: device disconnected [ 165.527026][ T27] wg2 speed is unknown, defaulting to 1000 [ 165.534031][ T6655] infiniband syz2: set active [ 165.548159][ T6655] infiniband syz2: added wg2 [ 165.556609][ T6655] syz2: rxe_create_cq: returned err = -12 [ 165.563670][ T6655] infiniband syz2: Couldn't create ib_mad CQ [ 165.570411][ T6655] infiniband syz2: Couldn't open port 1 [ 165.641703][ T6655] RDS/IB: syz2: added [ 165.660970][ T6655] smc: adding ib device syz2 with port count 1 [ 165.686239][ T6655] smc: ib device syz2 port 1 has pnetid [ 165.697154][ T27] wg2 speed is unknown, defaulting to 1000 [ 165.708396][ T6655] wg2 speed is unknown, defaulting to 1000 [ 165.806400][ T5850] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 165.993807][ T6655] wg2 speed is unknown, defaulting to 1000 [ 166.008242][ T5850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.020146][ T5850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.030052][ T10] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 30 seconds [ 166.044656][ T5850] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.059630][ T5850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 166.068808][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 166.081388][ T5850] usb 2-1: Product: syz [ 166.085595][ T5850] usb 2-1: Manufacturer: syz [ 166.090949][ T5850] usb 2-1: SerialNumber: syz [ 166.362901][ T5850] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 166.440600][ T6655] wg2 speed is unknown, defaulting to 1000 [ 166.472924][ T5850] usb 2-1: USB disconnect, device number 6 [ 166.542257][ T5850] usblp0: removed [ 166.783589][ T6655] wg2 speed is unknown, defaulting to 1000 [ 169.322064][ T6700] process 'syz.1.256' launched './file0' with NULL argv: empty string added [ 169.374412][ T6700] Invalid argument reading file caps for ./file0 [ 169.876587][ T6706] syzkaller0: entered promiscuous mode [ 169.919833][ T6706] syzkaller0: entered allmulticast mode [ 170.306158][ T5850] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.483420][ T5850] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 171.497132][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.516159][ T5850] usb 1-1: Product: syz [ 171.525789][ T5850] usb 1-1: Manufacturer: syz [ 171.531263][ T5850] usb 1-1: SerialNumber: syz [ 171.641695][ T6728] ALSA: mixer_oss: invalid OSS volume '' [ 171.886265][ T5850] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 171.893979][ T5850] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 171.944307][ T5850] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 172.026293][ T5850] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 172.447235][ T6734] tipc: Started in network mode [ 172.462780][ T6734] tipc: Node identity 3a9bc7c0b4d4, cluster identity 4711 [ 172.484655][ T6734] tipc: Enabled bearer , priority 0 [ 172.521734][ T6735] syzkaller0: entered promiscuous mode [ 172.621900][ T6735] syzkaller0: entered allmulticast mode [ 172.732313][ T6734] tipc: Resetting bearer [ 172.809519][ T6733] tipc: Resetting bearer [ 172.910458][ T969] usb 1-1: USB disconnect, device number 4 [ 172.939811][ T969] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 172.954796][ T6733] tipc: Disabling bearer [ 172.979090][ T969] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 173.047004][ T969] visor 1-1:1.0: device disconnected [ 173.743944][ T5152] kernel write not supported for file /vbi3 (pid: 5152 comm: kworker/1:3) [ 175.098873][ T6766] nbd2: detected capacity change from 0 to 8589934655 [ 175.198021][ T6774] ALSA: mixer_oss: invalid OSS volume '' [ 175.216682][ T51] block nbd2: Receive control failed (result -104) [ 175.276817][ T6773] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 175.329028][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 175.347856][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.355476][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.387721][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 176.397494][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.282'. [ 176.409635][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 176.419561][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.282'. [ 176.566641][ T969] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.770474][ T969] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 176.854163][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.881390][ T969] usb 1-1: Product: syz [ 176.891519][ T969] usb 1-1: Manufacturer: syz [ 176.906947][ T969] usb 1-1: SerialNumber: syz [ 177.266578][ T969] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 177.336179][ T969] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 177.383939][ T969] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 177.461056][ T969] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 177.776215][ T28] audit: type=1326 audit(1765386203.651:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08fd8f749 code=0x7ffc0000 [ 177.858038][ T28] audit: type=1326 audit(1765386203.651:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08fd8f749 code=0x7ffc0000 [ 177.912815][ T28] audit: type=1326 audit(1765386203.651:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc08fd8f749 code=0x7ffc0000 [ 177.948536][ T28] audit: type=1326 audit(1765386203.651:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc08fd8f783 code=0x7ffc0000 [ 178.004082][ T28] audit: type=1326 audit(1765386203.661:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc08fd8f783 code=0x7ffc0000 [ 178.036318][ T28] audit: type=1326 audit(1765386203.661:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08fd8f749 code=0x7ffc0000 [ 178.070547][ T28] audit: type=1326 audit(1765386203.661:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08fd8f749 code=0x7ffc0000 [ 178.178210][ T28] audit: type=1326 audit(1765386203.661:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc08fd8f749 code=0x7ffc0000 [ 178.209635][ T28] audit: type=1326 audit(1765386203.661:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08fd8f749 code=0x7ffc0000 [ 178.383661][ T27] usb 1-1: USB disconnect, device number 5 [ 178.419605][ T28] audit: type=1326 audit(1765386203.661:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08fd8f749 code=0x7ffc0000 [ 178.469260][ T27] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 178.496789][ T27] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 178.520680][ T27] visor 1-1:1.0: device disconnected [ 179.427175][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 179.841378][ T6813] Invalid argument reading file caps for ./file0 [ 180.573090][ T6823] ALSA: mixer_oss: invalid OSS volume '' [ 180.744014][ T6823] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 180.750582][ T6823] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.778579][ T6823] vhci_hcd vhci_hcd.0: Device attached [ 181.046196][ T5849] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 181.058901][ T6824] vhci_hcd: connection closed [ 181.066347][ T59] vhci_hcd: stop threads [ 181.079417][ T59] vhci_hcd: release socket [ 181.083928][ T59] vhci_hcd: disconnect device [ 182.824723][ T788] IPVS: starting estimator thread 0... [ 182.936155][ T6843] IPVS: using max 18 ests per chain, 43200 per kthread [ 183.771653][ T6853] Invalid argument reading file caps for ./file0 [ 184.420265][ T6862] loop1: detected capacity change from 0 to 1024 [ 185.118017][ T1137] hfsplus: b-tree write err: -5, ino 4 [ 185.552758][ T6867] loop1: detected capacity change from 0 to 1024 [ 185.857475][ T10] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 30 seconds [ 185.868885][ T10] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 30 seconds [ 185.882245][ T10] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 30 seconds [ 185.893432][ T10] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 30 seconds [ 186.166868][ T6860] nbd3: detected capacity change from 0 to 8589934655 [ 186.188333][ T51] block nbd3: Receive control failed (result -104) [ 186.598238][ T6874] sctp: [Deprecated]: syz.1.305 (pid 6874) Use of int in maxseg socket option. [ 186.598238][ T6874] Use struct sctp_assoc_value instead [ 186.914975][ T6874] loop1: detected capacity change from 0 to 256 [ 187.151155][ T5849] vhci_hcd: vhci_device speed not set [ 189.240700][ T6879] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 189.260954][ T971] kernel write not supported for file /221/clear_refs (pid: 971 comm: kworker/0:3) [ 193.323274][ T788] IPVS: starting estimator thread 0... [ 193.586204][ T6903] IPVS: using max 19 ests per chain, 45600 per kthread [ 194.190300][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.196938][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.774706][ T6912] nbd4: detected capacity change from 0 to 8589934655 [ 194.795300][ T51] block nbd4: Receive control failed (result -32) [ 194.908755][ T10] block nbd4: Dead connection, failed to find a fallback [ 194.926669][ T10] block nbd4: shutting down sockets [ 194.945549][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 194.969132][ T10] Buffer I/O error on dev nbd4, logical block 0, async page read [ 194.996361][ T10] Buffer I/O error on dev nbd4, logical block 1, async page read [ 195.004264][ T10] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 195.013499][ T10] Buffer I/O error on dev nbd4, logical block 2, async page read [ 195.021500][ T10] Buffer I/O error on dev nbd4, logical block 3, async page read [ 195.030445][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 195.039565][ T10] Buffer I/O error on dev nbd4, logical block 0, async page read [ 195.047341][ T10] Buffer I/O error on dev nbd4, logical block 1, async page read [ 195.055888][ T10] Buffer I/O error on dev nbd4, logical block 2, async page read [ 195.063924][ T10] Buffer I/O error on dev nbd4, logical block 3, async page read [ 195.071925][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 195.081067][ T10] Buffer I/O error on dev nbd4, logical block 0, async page read [ 195.088966][ T10] Buffer I/O error on dev nbd4, logical block 1, async page read [ 195.098364][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 195.107887][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.117687][ T10] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.140380][ T24] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 195.165667][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 195.175576][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 195.185025][ T5978] ldm_validate_partition_table(): Disk read failed. [ 195.906984][ T6930] sctp: [Deprecated]: syz.3.321 (pid 6930) Use of int in maxseg socket option. [ 195.906984][ T6930] Use struct sctp_assoc_value instead [ 200.507572][ T10] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 60 seconds [ 200.532623][ T24] blk_print_req_error: 1 callbacks suppressed [ 200.532634][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 200.547943][ T24] buffer_io_error: 22 callbacks suppressed [ 200.547952][ T24] Buffer I/O error on dev nbd4, logical block 0, async page read [ 200.561898][ T24] Buffer I/O error on dev nbd4, logical block 1, async page read [ 200.569731][ T24] Buffer I/O error on dev nbd4, logical block 2, async page read [ 200.586213][ T24] Buffer I/O error on dev nbd4, logical block 3, async page read [ 200.594247][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 200.603742][ T24] Buffer I/O error on dev nbd4, logical block 0, async page read [ 200.611953][ T24] Buffer I/O error on dev nbd4, logical block 1, async page read [ 200.619803][ T24] Buffer I/O error on dev nbd4, logical block 2, async page read [ 200.627983][ T24] Buffer I/O error on dev nbd4, logical block 3, async page read [ 200.636046][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 200.645440][ T24] Buffer I/O error on dev nbd4, logical block 0, async page read [ 200.653409][ T24] Buffer I/O error on dev nbd4, logical block 1, async page read [ 200.661754][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 200.670891][ T5978] Dev nbd4: unable to read RDB block 0 [ 200.696279][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 200.705816][ T24] I/O error, dev nbd4, sector 24 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 200.715284][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 200.724529][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.733817][ T24] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 200.743145][ T5978] nbd4: unable to read partition table [ 200.766701][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.779678][ T5978] ldm_validate_partition_table(): Disk read failed. [ 200.788547][ T5978] Dev nbd4: unable to read RDB block 0 [ 200.795956][ T5978] nbd4: unable to read partition table [ 202.995841][ T6944] ALSA: mixer_oss: invalid OSS volume '' [ 203.044822][ T6944] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 203.051385][ T6944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.061868][ T6944] vhci_hcd vhci_hcd.0: Device attached [ 203.278158][ T6945] vhci_hcd: connection closed [ 203.278460][ T1123] vhci_hcd: stop threads [ 203.330435][ T1123] vhci_hcd: release socket [ 203.336295][ T788] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 203.340750][ T1123] vhci_hcd: disconnect device [ 204.330168][ T6957] Zero length message leads to an empty skb [ 204.355810][ T6959] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 204.367297][ T971] kernel write not supported for file /253/clear_refs (pid: 971 comm: kworker/0:3) [ 206.914913][ T10] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 30 seconds [ 206.926945][ T10] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 30 seconds [ 206.941919][ T10] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 30 seconds [ 206.953110][ T10] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 30 seconds [ 209.668155][ T6980] sctp: [Deprecated]: syz.1.333 (pid 6980) Use of int in maxseg socket option. [ 209.668155][ T6980] Use struct sctp_assoc_value instead [ 210.756121][ T5136] udevd[5136]: worker [5773] /devices/virtual/block/nbd0 is taking a long time [ 210.856236][ T788] vhci_hcd: vhci_device speed not set [ 216.053528][ T10] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 60 seconds [ 216.064222][ T10] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 60 seconds [ 216.075427][ T10] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 60 seconds [ 216.086511][ T10] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 60 seconds [ 218.007536][ T24] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 30 seconds [ 221.693737][ T7012] loop0: detected capacity change from 0 to 1024 [ 221.861257][ T7016] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 221.867852][ T7016] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.876116][ T7016] vhci_hcd vhci_hcd.0: Device attached [ 222.227390][ T5849] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 223.217796][ T7017] vhci_hcd: connection reset by peer [ 223.419325][ T59] vhci_hcd: stop threads [ 223.423599][ T59] vhci_hcd: release socket [ 223.428359][ T59] vhci_hcd: disconnect device [ 227.192768][ T7035] sctp: [Deprecated]: syz.1.348 (pid 7035) Use of int in maxseg socket option. [ 227.192768][ T7035] Use struct sctp_assoc_value instead [ 228.018872][ T7035] loop1: detected capacity change from 0 to 256 [ 228.376201][ T5849] vhci_hcd: vhci_device speed not set [ 230.716088][ T10] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 90 seconds [ 232.870414][ T7060] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 232.877015][ T7060] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 232.886129][ T7060] vhci_hcd vhci_hcd.0: Device attached [ 232.903591][ T7062] vhci_hcd: connection closed [ 232.915466][ T3451] vhci_hcd: stop threads [ 232.944419][ T3451] vhci_hcd: release socket [ 232.952399][ T3451] vhci_hcd: disconnect device [ 237.632350][ T10] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 60 seconds [ 237.645879][ T10] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 60 seconds [ 237.661754][ T10] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 60 seconds [ 237.672744][ T10] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 60 seconds [ 242.405564][ T7111] nbd5: detected capacity change from 0 to 8589934655 [ 242.424372][ T51] block nbd5: Receive control failed (result -32) [ 242.471974][ T24] block nbd5: Dead connection, failed to find a fallback [ 242.479294][ T24] block nbd5: shutting down sockets [ 242.484525][ T24] blk_print_req_error: 68 callbacks suppressed [ 242.484536][ T24] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 242.500165][ T24] buffer_io_error: 90 callbacks suppressed [ 242.500177][ T24] Buffer I/O error on dev nbd5, logical block 0, async page read [ 242.536070][ T24] Buffer I/O error on dev nbd5, logical block 1, async page read [ 242.546092][ T24] Buffer I/O error on dev nbd5, logical block 2, async page read [ 242.553880][ T24] Buffer I/O error on dev nbd5, logical block 3, async page read [ 242.562013][ T24] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 242.571894][ T24] Buffer I/O error on dev nbd5, logical block 0, async page read [ 242.580141][ T24] Buffer I/O error on dev nbd5, logical block 1, async page read [ 242.588051][ T24] Buffer I/O error on dev nbd5, logical block 2, async page read [ 242.595807][ T24] Buffer I/O error on dev nbd5, logical block 3, async page read [ 242.603945][ T24] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 242.613211][ T24] Buffer I/O error on dev nbd5, logical block 0, async page read [ 242.621115][ T24] Buffer I/O error on dev nbd5, logical block 1, async page read [ 242.629260][ T24] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 242.638745][ T24] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 242.648173][ T24] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 242.657635][ T24] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 242.666938][ T24] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.676952][ T24] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.686252][ T24] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 242.695358][ T5978] ldm_validate_partition_table(): Disk read failed. [ 242.788779][ T5978] Dev nbd5: unable to read RDB block 0 [ 242.817965][ T5978] nbd5: unable to read partition table [ 242.833727][ T5978] ldm_validate_partition_table(): Disk read failed. [ 242.960362][ T7122] loop2: detected capacity change from 0 to 1024 [ 243.597198][ T5978] Dev nbd5: unable to read RDB block 0 [ 243.604812][ T5978] nbd5: unable to read partition table [ 243.947645][ T146] hfsplus: b-tree write err: -5, ino 4 [ 246.574869][ T7141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.378'. [ 246.722840][ T10] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 90 seconds [ 246.744159][ T10] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 90 seconds [ 246.782003][ T10] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 90 seconds [ 246.793995][ T10] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 90 seconds [ 246.828762][ T7144] nbd6: detected capacity change from 0 to 8589934655 [ 247.460119][ T7140] [U]  [ 248.000763][ T51] block nbd6: Receive control failed (result -104) [ 248.996628][ T24] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 60 seconds [ 249.899497][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.389'. [ 249.923698][ T7159] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 249.930230][ T7159] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 249.938668][ T7159] vhci_hcd vhci_hcd.0: Device attached [ 249.948171][ T7162] vhci_hcd: connection closed [ 249.955405][ T11] vhci_hcd: stop threads [ 249.973764][ T11] vhci_hcd: release socket [ 249.988587][ T11] vhci_hcd: disconnect device [ 250.284220][ T7167] loop1: detected capacity change from 0 to 1024 [ 250.916601][ T11] hfsplus: b-tree write err: -5, ino 4 [ 251.110496][ T7156] [U]  [ 253.849324][ T7186] loop0: detected capacity change from 0 to 256 [ 255.449064][ T7196] mkiss: ax0: crc mode is auto. [ 255.643159][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.653649][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.567904][ T7212] loop1: detected capacity change from 0 to 1024 [ 258.517973][ T3451] hfsplus: b-tree write err: -5, ino 4 [ 259.899425][ T7220] nbd7: detected capacity change from 0 to 8589934655 [ 260.459919][ T51] block nbd7: Receive control failed (result -104) [ 260.724763][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 260.857522][ T10] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 120 seconds [ 262.678713][ T7237] Falling back ldisc for ttyS3. [ 263.066199][ T971] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 263.260567][ T971] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 263.273176][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.288299][ T971] usb 4-1: Product: syz [ 263.292479][ T971] usb 4-1: Manufacturer: syz [ 263.310902][ T971] usb 4-1: SerialNumber: syz [ 263.416207][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.424011][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.945352][ T971] usb 4-1: palm_os_4_probe - error -110 getting connection info [ 263.958655][ T971] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 264.003513][ T971] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 264.047084][ T971] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 264.554813][ T7253] siw: device registration error -23 [ 264.572599][ T7253] smc: removing ib device syz2 [ 264.943855][ T788] usb 4-1: USB disconnect, device number 4 [ 265.003323][ T788] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 265.030031][ T788] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 265.067904][ T788] visor 4-1:1.0: device disconnected [ 265.360868][ T7230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.424492][ T7230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.030146][ T7267] loop0: detected capacity change from 0 to 256 [ 268.726219][ T10] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 90 seconds [ 268.738054][ T10] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 90 seconds [ 268.749879][ T10] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 90 seconds [ 268.752615][ T7247] blk_print_req_error: 76 callbacks suppressed [ 268.752630][ T7247] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.770872][ T10] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 90 seconds [ 269.326601][ T7230] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.348813][ T7230] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.366137][ T7230] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.375114][ T7230] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.669487][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 269.949223][ T7230] syz.1.397 (7230) used greatest stack depth: 20840 bytes left [ 270.557573][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.565061][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.421424][ T7280] Falling back ldisc for ttyS3. [ 272.071325][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.127455][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.603143][ T7243] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.612621][ T7243] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.621983][ T7243] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.631366][ T7243] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.630635][ T7306] tipc: Started in network mode [ 275.635570][ T7306] tipc: Node identity 061e9ce763f8, cluster identity 4711 [ 275.644162][ T7306] tipc: Enabled bearer , priority 0 [ 275.656490][ T7306] tipc: Resetting bearer [ 275.837053][ T7301] tipc: Disabling bearer [ 276.865902][ T7312] mkiss: ax0: crc mode is auto. [ 277.329270][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 277.386148][ T24] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 30 seconds [ 277.397283][ T24] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 30 seconds [ 277.408444][ T24] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 30 seconds [ 277.419649][ T24] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 30 seconds [ 277.466095][ T10] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 120 seconds [ 277.481001][ T10] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 120 seconds [ 277.493779][ T10] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 120 seconds [ 277.504819][ T10] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 120 seconds [ 279.366247][ T24] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 90 seconds [ 280.531550][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.749642][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.881115][ T7338] overlayfs: failed to resolve './file1': -2 [ 283.362115][ T7323] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.371112][ T7323] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.380753][ T7323] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.392904][ T7323] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.517645][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 285.008125][ T5851] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 285.215912][ T5851] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 285.234123][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.244270][ T5851] usb 2-1: Product: syz [ 285.250352][ T5851] usb 2-1: Manufacturer: syz [ 285.255174][ T5851] usb 2-1: SerialNumber: syz [ 285.595561][ T5851] usb 2-1: palm_os_4_probe - error -110 getting connection info [ 285.926869][ T7360] Falling back ldisc for ttyS3. [ 285.946172][ T5851] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 285.997801][ T5851] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 286.051309][ T5851] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 286.100468][ T5851] usb 2-1: USB disconnect, device number 7 [ 286.109081][ T7334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.136979][ T5851] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 286.227121][ T5851] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 286.248648][ T7334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.262715][ T5851] visor 2-1:1.0: device disconnected [ 286.900119][ T7334] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.910848][ T7334] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.924266][ T7334] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.936260][ T7334] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.196930][ T7370] macvtap1: entered promiscuous mode [ 287.216254][ T7370] macvtap1: entered allmulticast mode [ 287.226476][ T7370] veth1_vlan: entered allmulticast mode [ 287.312390][ T7371] macvtap2: entered promiscuous mode [ 287.336411][ T7371] macvtap2: entered allmulticast mode [ 287.680972][ T7377] loop2: detected capacity change from 0 to 1024 [ 290.101681][ T42] hfsplus: b-tree write err: -5, ino 4 [ 290.186541][ T24] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 30 seconds [ 290.201446][ T24] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 30 seconds [ 290.212825][ T24] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 30 seconds [ 290.224067][ T24] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 30 seconds [ 291.456269][ T10] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 150 seconds [ 291.651383][ T7392] mkiss: ax0: crc mode is auto. [ 292.138218][ T7400] overlayfs: failed to resolve './file0': -2 [ 292.319707][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 293.378249][ T7411] loop1: detected capacity change from 0 to 256 [ 297.115279][ T5136] udevd[5136]: worker [5781] /devices/virtual/block/nbd2 is taking a long time [ 297.160464][ T5136] udevd[5136]: worker [6549] /devices/virtual/block/nbd1 is taking a long time [ 297.266185][ T5136] udevd[5136]: worker [6550] /devices/virtual/block/nbd3 is taking a long time [ 297.878286][ T7422] sctp: [Deprecated]: syz.0.447 (pid 7422) Use of int in maxseg socket option. [ 297.878286][ T7422] Use struct sctp_assoc_value instead [ 297.895722][ T7422] loop0: detected capacity change from 0 to 256 [ 298.428434][ T7430] mkiss: ax0: crc mode is auto. [ 298.556145][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 299.176797][ T10] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 120 seconds [ 299.191192][ T10] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 120 seconds [ 299.204888][ T10] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 120 seconds [ 299.221365][ T10] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 120 seconds [ 299.458355][ T788] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 299.482169][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.502450][ T788] usb 3-1: Product: syz [ 299.954088][ T788] usb 3-1: Manufacturer: syz [ 299.969359][ T788] usb 3-1: SerialNumber: syz [ 300.283810][ T788] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 300.304368][ T788] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 300.358400][ T788] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 300.386208][ T788] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 300.414819][ T788] usb 3-1: USB disconnect, device number 4 [ 300.430830][ T788] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 300.490892][ T788] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 300.522505][ T788] visor 3-1:1.0: device disconnected [ 301.177317][ T7442] nbd8: detected capacity change from 0 to 8589934655 [ 301.249799][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'. [ 301.323204][ T51] block nbd8: Receive control failed (result -104) [ 301.476352][ T7455] loop1: detected capacity change from 0 to 1024 [ 302.086951][ T146] hfsplus: b-tree write err: -5, ino 4 [ 302.615708][ T7459] sctp: [Deprecated]: syz.1.458 (pid 7459) Use of int in maxseg socket option. [ 302.615708][ T7459] Use struct sctp_assoc_value instead [ 302.633191][ T7459] loop1: detected capacity change from 0 to 256 [ 302.653797][ T7456] [U]  [ 302.945385][ T7464] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 302.951969][ T7464] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 302.995615][ T7464] vhci_hcd vhci_hcd.0: Device attached [ 303.190294][ T7471] mkiss: ax0: crc mode is auto. [ 303.266117][ T23] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 304.740974][ T7465] vhci_hcd: connection reset by peer [ 304.879307][ T146] vhci_hcd: stop threads [ 304.883614][ T146] vhci_hcd: release socket [ 304.905174][ T146] vhci_hcd: disconnect device [ 305.687246][ T7483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.488161][ T7482] [U]  [ 306.604419][ T7493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.467'. [ 307.046145][ T788] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 307.539287][ T7492] [U]  [ 307.565214][ T24] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 60 seconds [ 307.576187][ T24] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 60 seconds [ 307.591022][ T24] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 60 seconds [ 307.602544][ T24] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 60 seconds [ 307.615154][ T788] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 307.637596][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.646357][ T788] usb 3-1: Product: syz [ 307.650642][ T788] usb 3-1: Manufacturer: syz [ 307.655266][ T788] usb 3-1: SerialNumber: syz [ 307.947928][ T788] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 307.974942][ T788] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 307.999614][ T788] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 308.043736][ T788] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 308.116117][ T7506] mkiss: ax0: crc mode is auto. [ 308.146219][ T5870] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 150 seconds [ 308.165796][ T5870] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 150 seconds [ 308.213176][ T5870] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 150 seconds [ 308.266940][ T5870] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 150 seconds [ 308.385894][ T788] usb 3-1: USB disconnect, device number 5 [ 310.346599][ T788] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 310.397569][ T24] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 120 seconds [ 310.426783][ T788] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 310.443848][ T788] visor 3-1:1.0: device disconnected [ 310.449381][ T23] vhci_hcd: vhci_device speed not set [ 314.213581][ T7519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.476'. [ 316.987580][ T7524] [U]  [ 317.060148][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.066610][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.326992][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 319.542331][ T27] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 319.607866][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.712795][ T27] usb 4-1: Product: syz [ 319.779484][ T27] usb 4-1: Manufacturer: syz [ 319.844521][ T27] usb 4-1: SerialNumber: syz [ 320.304382][ T24] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 60 seconds [ 320.324279][ T24] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 60 seconds [ 320.335509][ T24] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 60 seconds [ 320.347017][ T24] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 60 seconds [ 320.389298][ T27] usb 4-1: palm_os_4_probe - error -110 getting connection info [ 320.409092][ T27] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 320.911515][ T27] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 320.943880][ T27] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 321.104306][ T5851] usb 4-1: USB disconnect, device number 5 [ 321.131508][ T7556] mkiss: ax0: crc mode is auto. [ 321.141580][ T5851] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 321.161870][ T5851] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 321.172755][ T5851] visor 4-1:1.0: device disconnected [ 321.538765][ T10] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 180 seconds [ 326.313736][ T7592] loop1: detected capacity change from 0 to 256 [ 326.795053][ T7594] ALSA: mixer_oss: invalid OSS volume '' [ 326.882830][ T7594] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 326.889407][ T7594] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 326.908405][ T7594] vhci_hcd vhci_hcd.0: Device attached [ 327.176094][ T27] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 327.482096][ T7595] vhci_hcd: connection reset by peer [ 327.496227][ T3451] vhci_hcd: stop threads [ 327.506071][ T3451] vhci_hcd: release socket [ 327.510617][ T3451] vhci_hcd: disconnect device [ 327.542392][ T7597] mkiss: ax0: crc mode is auto. [ 327.912603][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.500'. [ 327.936277][ T788] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 328.134990][ T788] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 328.146029][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.154530][ T788] usb 4-1: Product: syz [ 328.162594][ T7608] [U]  [ 328.176749][ T788] usb 4-1: Manufacturer: syz [ 328.191905][ T788] usb 4-1: SerialNumber: syz [ 328.567224][ T788] usb 4-1: palm_os_4_probe - error -110 getting connection info [ 328.575476][ T788] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 328.986824][ T788] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 329.009235][ T788] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 330.606334][ T10] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 150 seconds [ 330.618310][ T10] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 150 seconds [ 330.632115][ T10] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 150 seconds [ 330.639146][ T23] usb 4-1: USB disconnect, device number 6 [ 330.646006][ T10] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 150 seconds [ 330.775125][ T23] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 330.904584][ T23] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 330.927992][ T23] visor 4-1:1.0: device disconnected [ 331.839208][ T10] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 30 seconds [ 331.850450][ T10] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 30 seconds [ 331.861842][ T10] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 30 seconds [ 331.872911][ T10] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 30 seconds [ 332.336301][ T27] vhci_hcd: vhci_device speed not set [ 334.070684][ T7633] loop1: detected capacity change from 0 to 256 [ 334.895139][ T7635] mkiss: ax0: crc mode is auto. [ 338.572277][ T10] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 180 seconds [ 338.586032][ T10] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 180 seconds [ 338.597101][ T10] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 180 seconds [ 338.608080][ T10] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 180 seconds [ 338.652057][ T24] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 90 seconds [ 338.665067][ T24] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 90 seconds [ 338.676212][ T24] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 90 seconds [ 338.687230][ T24] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 90 seconds [ 339.136301][ T5851] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 340.131878][ T5851] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 340.142007][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.150851][ T5851] usb 2-1: Product: syz [ 340.155129][ T5851] usb 2-1: Manufacturer: syz [ 340.160558][ T5851] usb 2-1: SerialNumber: syz [ 340.454383][ T5851] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 340.486150][ T5851] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 340.538357][ T5851] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 340.566254][ T5851] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 340.615180][ T5851] usb 2-1: USB disconnect, device number 8 [ 340.667956][ T5851] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 340.716955][ T5851] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 340.736626][ T24] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 150 seconds [ 340.796935][ T5851] visor 2-1:1.0: device disconnected [ 341.586645][ T7674] sctp: [Deprecated]: syz.1.518 (pid 7674) Use of int in maxseg socket option. [ 341.586645][ T7674] Use struct sctp_assoc_value instead [ 341.705135][ T7674] loop1: detected capacity change from 0 to 256 [ 344.100443][ T7684] mkiss: ax0: crc mode is auto. [ 347.706052][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 347.899171][ T27] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 347.924312][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.946339][ T27] usb 2-1: Product: syz [ 347.960688][ T27] usb 2-1: Manufacturer: syz [ 347.978541][ T27] usb 2-1: SerialNumber: syz [ 348.297130][ T27] usb 2-1: palm_os_4_probe - error -110 getting connection info [ 348.382202][ T27] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 348.568812][ T27] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 348.708208][ T27] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 348.753327][ T27] usb 2-1: USB disconnect, device number 9 [ 348.798750][ T27] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 348.830992][ T27] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 348.842442][ T27] visor 2-1:1.0: device disconnected [ 349.296756][ T7705] sctp: [Deprecated]: syz.2.529 (pid 7705) Use of int in maxseg socket option. [ 349.296756][ T7705] Use struct sctp_assoc_value instead [ 349.418906][ T7705] loop2: detected capacity change from 0 to 256 [ 350.356104][ T24] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 90 seconds [ 350.368632][ T24] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 90 seconds [ 350.380423][ T24] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 90 seconds [ 350.400720][ T24] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 90 seconds [ 350.749200][ T7707] tipc: Enabled bearer , priority 0 [ 350.780753][ T7707] syzkaller0: entered promiscuous mode [ 350.796224][ T7707] syzkaller0: entered allmulticast mode [ 351.113046][ T7714] loop2: detected capacity change from 0 to 1024 [ 351.326553][ T7706] tipc: Resetting bearer [ 351.735155][ T10] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 210 seconds [ 351.792915][ T1123] hfsplus: b-tree write err: -5, ino 4 [ 351.817514][ T7706] tipc: Disabling bearer [ 351.903274][ T788] tipc: Node number set to 1709612263 [ 353.967403][ T7721] mkiss: ax0: crc mode is auto. [ 355.446565][ T7739] sctp: [Deprecated]: syz.2.539 (pid 7739) Use of int in maxseg socket option. [ 355.446565][ T7739] Use struct sctp_assoc_value instead [ 355.565499][ T7739] loop2: detected capacity change from 0 to 256 [ 356.936107][ T5851] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 357.190979][ T5851] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 357.238537][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.261695][ T5851] usb 1-1: Product: syz [ 357.272110][ T5851] usb 1-1: Manufacturer: syz [ 357.287478][ T5851] usb 1-1: SerialNumber: syz [ 357.687923][ T5851] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 357.695786][ T5851] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 357.730917][ T5851] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 357.780552][ T5851] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 358.036241][ T5851] usb 1-1: USB disconnect, device number 6 [ 358.104003][ T7746] loop3: detected capacity change from 0 to 1024 [ 358.153087][ T5851] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 358.213637][ T5851] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 358.227589][ T5851] visor 1-1:1.0: device disconnected [ 358.994235][ T7751] loop1: detected capacity change from 0 to 256 [ 359.006565][ T11] hfsplus: b-tree write err: -5, ino 4 [ 359.803257][ T7760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.547'. [ 360.260996][ T7762] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 360.267560][ T7762] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 360.283951][ T7762] vhci_hcd vhci_hcd.0: Device attached [ 360.312803][ T7759] [U]  [ 360.437444][ T7763] vhci_hcd: connection closed [ 360.446196][ T11] vhci_hcd: stop threads [ 360.475019][ T11] vhci_hcd: release socket [ 360.490068][ T11] vhci_hcd: disconnect device [ 360.671119][ T788] vhci_hcd: vhci_device speed not set [ 361.763876][ T10] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 180 seconds [ 361.956102][ T10] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 180 seconds [ 361.967320][ T10] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 180 seconds [ 361.986201][ T5870] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 60 seconds [ 361.996927][ T10] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 180 seconds [ 362.007955][ T5870] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 60 seconds [ 362.019108][ T5870] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 60 seconds [ 362.030018][ T5870] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 60 seconds [ 362.404371][ T7780] mkiss: ax0: crc mode is auto. [ 365.717572][ T7797] tipc: Enabled bearer , priority 0 [ 365.793864][ T7796] tipc: Resetting bearer [ 365.891966][ T7795] tipc: Disabling bearer [ 365.899183][ T7801] loop3: detected capacity change from 0 to 1024 [ 366.445184][ T7805] loop1: detected capacity change from 0 to 256 [ 368.257107][ T7367] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 368.896333][ T5892] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 120 seconds [ 368.896359][ T5870] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 210 seconds [ 368.907271][ T5892] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 120 seconds [ 368.918286][ T5870] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 210 seconds [ 368.941886][ T5870] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 210 seconds [ 368.957113][ T5870] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 210 seconds [ 368.998422][ T5892] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 120 seconds [ 369.044864][ T5892] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 120 seconds [ 369.516242][ T7821] mkiss: ax0: crc mode is auto. [ 371.045652][ T24] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 180 seconds [ 373.504324][ T7850] loop0: detected capacity change from 0 to 256 [ 374.613248][ T7367] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 375.526104][ T7860] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 375.532682][ T7860] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 375.572540][ T7860] vhci_hcd vhci_hcd.0: Device attached [ 375.835673][ T7861] vhci_hcd: connection closed [ 375.836078][ T1123] vhci_hcd: stop threads [ 375.836135][ T23] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 375.840813][ T1123] vhci_hcd: release socket [ 375.924550][ T1123] vhci_hcd: disconnect device [ 376.224742][ T7867] mkiss: ax0: crc mode is auto. [ 376.384378][ T7870] netlink: 'syz.1.573': attribute type 4 has an invalid length. [ 376.447338][ T7870] netlink: 17 bytes leftover after parsing attributes in process `syz.1.573'. [ 378.501145][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.579957][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.715105][ T7875] loop3: detected capacity change from 0 to 1024 [ 380.775098][ T24] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 120 seconds [ 380.786194][ T24] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 120 seconds [ 380.797581][ T24] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 120 seconds [ 380.935843][ T24] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 120 seconds [ 381.046220][ T23] vhci_hcd: vhci_device speed not set [ 381.256710][ T7906] sctp: [Deprecated]: syz.1.578 (pid 7906) Use of int in maxseg socket option. [ 381.256710][ T7906] Use struct sctp_assoc_value instead [ 381.275830][ T7906] loop1: detected capacity change from 0 to 256 [ 381.860350][ T7912] netlink: 'syz.0.582': attribute type 4 has an invalid length. [ 381.927927][ T7912] netlink: 17 bytes leftover after parsing attributes in process `syz.0.582'. [ 382.336276][ T5870] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 240 seconds [ 382.994128][ T7919] mkiss: ax0: crc mode is auto. [ 385.173808][ T7923] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 385.180478][ T7923] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 385.193503][ T7923] vhci_hcd vhci_hcd.0: Device attached [ 385.293492][ T7924] vhci_hcd: connection closed [ 385.320187][ T11] vhci_hcd: stop threads [ 385.329467][ T11] vhci_hcd: release socket [ 385.347546][ T11] vhci_hcd: disconnect device [ 385.553685][ T27] vhci_hcd: vhci_device speed not set [ 386.810225][ T7936] loop3: detected capacity change from 0 to 1024 [ 388.096343][ T59] hfsplus: b-tree write err: -5, ino 4 [ 388.345792][ T7947] netlink: 'syz.3.591': attribute type 4 has an invalid length. [ 388.358594][ T7947] netlink: 17 bytes leftover after parsing attributes in process `syz.3.591'. [ 390.261274][ T7959] mkiss: ax0: crc mode is auto. [ 392.578897][ T7974] ALSA: mixer_oss: invalid OSS volume '' [ 392.606234][ T7898] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 210 seconds [ 392.617049][ T5870] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 90 seconds [ 392.627804][ T7898] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 210 seconds [ 392.638937][ T5870] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 90 seconds [ 392.649943][ T7898] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 210 seconds [ 392.661216][ T5870] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 90 seconds [ 392.672340][ T7898] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 210 seconds [ 392.683457][ T5870] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 90 seconds [ 392.696193][ T7974] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 392.702719][ T7974] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 392.836130][ T7974] vhci_hcd vhci_hcd.0: Device attached [ 393.007206][ T7979] sctp: [Deprecated]: syz.0.596 (pid 7979) Use of int in maxseg socket option. [ 393.007206][ T7979] Use struct sctp_assoc_value instead [ 393.042580][ T7979] loop0: detected capacity change from 0 to 256 [ 393.626079][ T5851] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 393.654605][ T7975] vhci_hcd: connection reset by peer [ 393.661279][ T6006] vhci_hcd: stop threads [ 393.678149][ T6006] vhci_hcd: release socket [ 393.720553][ T6006] vhci_hcd: disconnect device [ 394.912031][ T7989] loop2: detected capacity change from 0 to 1024 [ 395.428751][ T7998] mkiss: ax0: crc mode is auto. [ 398.746770][ T5851] vhci_hcd: vhci_device speed not set [ 400.243999][ T5870] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 240 seconds [ 400.254873][ T5870] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 240 seconds [ 400.265882][ T5870] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 240 seconds [ 400.276944][ T5870] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 240 seconds [ 400.326206][ T24] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 150 seconds [ 400.337114][ T24] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 150 seconds [ 400.348246][ T24] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 150 seconds [ 400.359382][ T24] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 150 seconds [ 402.107321][ T24] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 210 seconds [ 402.327809][ T8031] syzkaller0: entered promiscuous mode [ 402.336194][ T8031] syzkaller0: entered allmulticast mode [ 402.447006][ T8028] mkiss: ax0: crc mode is auto. [ 412.173161][ T8080] sctp: [Deprecated]: syz.0.625 (pid 8080) Use of int in maxseg socket option. [ 412.173161][ T8080] Use struct sctp_assoc_value instead [ 413.007919][ T5870] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 270 seconds [ 413.010056][ T8080] loop0: detected capacity change from 0 to 256 [ 413.359853][ T24] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 150 seconds [ 413.370869][ T24] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 150 seconds [ 413.382059][ T24] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 150 seconds [ 413.393121][ T24] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 150 seconds [ 418.133712][ T8105] loop1: detected capacity change from 0 to 1024 [ 418.929326][ T59] hfsplus: b-tree write err: -5, ino 4 [ 419.486930][ T8111] sctp: [Deprecated]: syz.3.634 (pid 8111) Use of int in maxseg socket option. [ 419.486930][ T8111] Use struct sctp_assoc_value instead [ 419.644535][ T8111] loop3: detected capacity change from 0 to 256 [ 422.659322][ T5870] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 240 seconds [ 422.670271][ T5870] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 240 seconds [ 422.681918][ T7898] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 120 seconds [ 422.692951][ T7898] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 120 seconds [ 422.704496][ T5870] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 240 seconds [ 422.715622][ T5870] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 240 seconds [ 422.727020][ T7898] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 120 seconds [ 422.738061][ T7898] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 120 seconds [ 426.034412][ T8131] loop0: detected capacity change from 0 to 256 [ 427.904363][ T8139] loop0: detected capacity change from 0 to 1024 [ 429.547152][ T8163] sctp: [Deprecated]: syz.3.644 (pid 8163) Use of int in maxseg socket option. [ 429.547152][ T8163] Use struct sctp_assoc_value instead [ 429.565428][ T8163] loop3: detected capacity change from 0 to 256 [ 431.047348][ T7898] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 270 seconds [ 431.054160][ T24] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 180 seconds [ 431.058936][ T7898] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 270 seconds [ 431.069536][ T24] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 180 seconds [ 431.080796][ T7898] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 270 seconds [ 431.091535][ T24] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 180 seconds [ 431.102578][ T7898] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 270 seconds [ 431.113701][ T24] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 180 seconds [ 431.842187][ T8171] loop0: detected capacity change from 0 to 1024 [ 432.617358][ T24] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 240 seconds [ 432.630589][ T1123] hfsplus: b-tree write err: -5, ino 4 [ 432.873402][ T8178] loop1: detected capacity change from 0 to 256 [ 432.999298][ T7367] udevd: attempt to access beyond end of device [ 432.999298][ T7367] loop1: rw=524288, sector=0, nr_sectors = 8 limit=0 [ 433.331861][ T8183] loop3: detected capacity change from 0 to 1024 [ 433.724128][ T8190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.653'. [ 434.283402][ T8191] [U]  [ 438.313305][ T8217] loop0: detected capacity change from 0 to 1024 [ 438.956473][ T1123] hfsplus: b-tree write err: -5, ino 4 [ 440.040846][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.053660][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.709133][ T8233] loop0: detected capacity change from 0 to 256 [ 443.623546][ T7898] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 300 seconds [ 443.912546][ T24] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 180 seconds [ 443.923765][ T24] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 180 seconds [ 443.934921][ T24] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 180 seconds [ 443.949920][ T24] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 180 seconds [ 444.101092][ T8254] loop0: detected capacity change from 0 to 1024 [ 444.836381][ T1123] hfsplus: b-tree write err: -5, ino 4 [ 449.762224][ T8279] loop0: detected capacity change from 0 to 256 [ 451.745093][ T8293] loop3: detected capacity change from 0 to 1024 [ 452.212361][ T1123] hfsplus: b-tree write err: -5, ino 4 [ 452.771036][ T7898] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 150 seconds [ 452.781908][ T7898] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 150 seconds [ 452.792999][ T7898] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 150 seconds [ 452.804087][ T5870] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 270 seconds [ 452.814845][ T5870] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 270 seconds [ 452.826087][ T5870] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 270 seconds [ 452.837094][ T5870] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 270 seconds [ 452.866115][ T7898] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 150 seconds [ 455.445659][ T8320] loop3: detected capacity change from 0 to 1024 [ 455.574530][ T8323] overlayfs: failed to resolve './bus': -2 [ 456.525389][ T8329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.693'. [ 459.696764][ T8327] [U]  [ 461.700865][ T7898] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 300 seconds [ 461.711845][ T24] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 210 seconds [ 461.712077][ T7898] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 300 seconds [ 461.722872][ T24] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 210 seconds [ 461.733816][ T7898] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 300 seconds [ 461.745140][ T24] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 210 seconds [ 461.756257][ T7898] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 300 seconds [ 461.776072][ T24] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 210 seconds [ 461.906386][ T8358] tipc: Enabled bearer , priority 0 [ 461.959141][ T8361] overlayfs: failed to resolve './bus': -2 [ 462.029937][ T8358] tipc: Resetting bearer [ 462.219866][ T8357] tipc: Disabling bearer [ 463.046112][ T24] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 270 seconds [ 463.517207][ T8370] sctp: [Deprecated]: syz.0.697 (pid 8370) Use of int in maxseg socket option. [ 463.517207][ T8370] Use struct sctp_assoc_value instead [ 463.792650][ T8370] loop0: detected capacity change from 0 to 256 [ 466.154569][ T8385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 468.221245][ T8387] [U]  [ 468.852931][ T8397] overlayfs: failed to resolve './bus': -2 [ 469.712287][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 469.751329][ T8402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.759699][ T8402] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.775046][ T8402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.918098][ T8406] loop3: detected capacity change from 0 to 1024 [ 472.132958][ T8413] sctp: [Deprecated]: syz.0.716 (pid 8413) Use of int in maxseg socket option. [ 472.132958][ T8413] Use struct sctp_assoc_value instead [ 473.007938][ T8413] loop0: detected capacity change from 0 to 256 [ 473.856350][ T7898] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 330 seconds [ 474.016402][ T8421] loop3: detected capacity change from 0 to 1024 [ 474.636742][ T24] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 210 seconds [ 474.647567][ T24] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 210 seconds [ 474.658620][ T24] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 210 seconds [ 474.669634][ T24] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 210 seconds [ 474.701208][ T49] hfsplus: b-tree write err: -5, ino 4 [ 478.217062][ T8440] loop2: detected capacity change from 0 to 1024 [ 479.968203][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.722'. [ 480.023851][ T8459] tipc: Enabled bearer , priority 0 [ 480.053242][ T8459] tipc: Resetting bearer [ 480.129530][ T8458] tipc: Disabling bearer [ 480.822087][ T8456] [U]  [ 482.849264][ T5870] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 180 seconds [ 482.860798][ T5870] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 180 seconds [ 482.872285][ T7898] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 300 seconds [ 482.883747][ T5870] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 180 seconds [ 482.895137][ T7898] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 300 seconds [ 482.906541][ T7898] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 300 seconds [ 482.917817][ T5870] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 180 seconds [ 482.929159][ T7898] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 300 seconds [ 483.341409][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 483.406633][ T8474] macvtap1: left promiscuous mode [ 483.466831][ T8474] macvtap1: left allmulticast mode [ 483.566380][ T8474] veth1_vlan: left allmulticast mode [ 483.591017][ T8474] macvtap2: left promiscuous mode [ 483.596212][ T8474] macvtap2: left allmulticast mode [ 484.478725][ T8481] netlink: 'syz.3.735': attribute type 4 has an invalid length. [ 484.486936][ T8481] netlink: 17 bytes leftover after parsing attributes in process `syz.3.735'. [ 485.267143][ T8491] loop0: detected capacity change from 0 to 1024 [ 485.766140][ T8499] tipc: Enabled bearer , priority 0 [ 485.809202][ T8497] tipc: Resetting bearer [ 485.871925][ T8495] tipc: Disabling bearer [ 487.222917][ T8511] netlink: 'syz.0.745': attribute type 4 has an invalid length. [ 487.260276][ T8511] netlink: 17 bytes leftover after parsing attributes in process `syz.0.745'. [ 487.440504][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.747'. [ 487.807814][ T8517] [U]  [ 487.834907][ T8522] macvtap1: entered promiscuous mode [ 487.850268][ T8522] macvtap1: entered allmulticast mode [ 488.007959][ T8522] veth1_vlan: entered allmulticast mode [ 488.513381][ T8528] loop1: detected capacity change from 0 to 256 [ 491.776135][ T7898] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 330 seconds [ 491.786994][ T7898] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 330 seconds [ 491.799382][ T7898] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 330 seconds [ 491.819399][ T24] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 240 seconds [ 491.826140][ T7898] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 330 seconds [ 491.830150][ T24] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 240 seconds [ 491.856122][ T24] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 240 seconds [ 491.867766][ T24] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 240 seconds [ 493.700560][ T24] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 300 seconds [ 493.952352][ T8551] loop1: detected capacity change from 0 to 1024 [ 494.654830][ T8558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.759'. [ 495.100906][ T8561] [U]  [ 495.134006][ T8564] netlink: 'syz.0.755': attribute type 4 has an invalid length. [ 495.165596][ T8564] netlink: 17 bytes leftover after parsing attributes in process `syz.0.755'. [ 495.228233][ T8566] macvtap3: entered promiscuous mode [ 495.233793][ T8566] macvtap3: entered allmulticast mode [ 495.286037][ T8566] veth1_vlan: entered allmulticast mode [ 497.206755][ T8580] tipc: Started in network mode [ 497.228073][ T8580] tipc: Node identity 72e8e2bc53eb, cluster identity 4711 [ 497.235356][ T8580] tipc: Enabled bearer , priority 0 [ 497.457412][ T8580] tipc: Resetting bearer [ 497.611023][ T8583] loop1: detected capacity change from 0 to 1024 [ 498.227883][ T8577] tipc: Disabling bearer [ 498.289035][ T7255] tipc: Node number set to 553902780 [ 500.219019][ T8599] netlink: 'syz.2.770': attribute type 4 has an invalid length. [ 500.276040][ T8599] netlink: 17 bytes leftover after parsing attributes in process `syz.2.770'. [ 500.491263][ T8603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.771'. [ 500.679411][ T8607] macvtap4: entered promiscuous mode [ 500.684892][ T8607] macvtap4: entered allmulticast mode [ 500.854811][ T8605] [U]  [ 502.566518][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.572856][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.156002][ T8618] netlink: 'syz.1.779': attribute type 4 has an invalid length. [ 503.189920][ T8618] netlink: 17 bytes leftover after parsing attributes in process `syz.1.779'. [ 505.007733][ T7898] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 360 seconds [ 506.006951][ T8624] loop3: detected capacity change from 0 to 256 [ 506.617923][ T24] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 240 seconds [ 506.628697][ T24] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 240 seconds [ 506.639728][ T24] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 240 seconds [ 506.650693][ T24] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 240 seconds [ 507.112343][ T8626] loop1: detected capacity change from 0 to 1024 [ 508.097430][ T49] hfsplus: b-tree write err: -5, ino 4 [ 510.600449][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.783'. [ 511.433649][ T8636] [U]  [ 513.236028][ T7898] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 330 seconds [ 513.246851][ T7898] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 330 seconds [ 513.258271][ T7898] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 330 seconds [ 513.269511][ T7898] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 330 seconds [ 513.280859][ T5870] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 210 seconds [ 513.291662][ T5870] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 210 seconds [ 513.302706][ T5870] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 210 seconds [ 513.314333][ T5870] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 210 seconds [ 514.054475][ T8662] mkiss: ax0: crc mode is auto. [ 515.805221][ T8663] mkiss: ax0: crc mode is auto. [ 518.029078][ T8668] loop0: detected capacity change from 0 to 1024 [ 518.692570][ T59] hfsplus: b-tree write err: -5, ino 4 [ 523.058489][ T5870] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 360 seconds [ 523.069295][ T5870] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 360 seconds [ 523.080354][ T5870] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 360 seconds [ 523.091424][ T5870] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 360 seconds [ 523.157090][ T5892] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 270 seconds [ 523.168404][ T5892] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 270 seconds [ 523.179740][ T5892] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 270 seconds [ 523.191034][ T5892] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 270 seconds [ 524.288068][ T5892] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 330 seconds [ 524.870957][ T8706] loop3: detected capacity change from 0 to 1024 [ 525.512838][ T59] hfsplus: b-tree write err: -5, ino 4 [ 526.364753][ T8711] loop0: detected capacity change from 0 to 256 [ 529.493128][ T8729] sctp: [Deprecated]: syz.0.807 (pid 8729) Use of int in maxseg socket option. [ 529.493128][ T8729] Use struct sctp_assoc_value instead [ 529.511698][ T8729] loop0: detected capacity change from 0 to 256 [ 530.026765][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.805'. [ 530.851438][ T8731] [U]  [ 531.560130][ T8749] loop2: detected capacity change from 0 to 1024 [ 532.516965][ T1123] hfsplus: b-tree write err: -5, ino 4 [ 534.892574][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 534.987651][ T8750] veth1_vlan: left allmulticast mode [ 535.868229][ T8764] Falling back ldisc for ttyS3. [ 535.873632][ T7898] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 390 seconds [ 535.935572][ T8750] macvtap1: left promiscuous mode [ 535.964039][ T8750] macvtap1: left allmulticast mode [ 536.087363][ T8768] overlayfs: missing 'lowerdir' [ 537.157939][ T8775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.819'. [ 537.244710][ T8776] sctp: [Deprecated]: syz.2.818 (pid 8776) Use of int in maxseg socket option. [ 537.244710][ T8776] Use struct sctp_assoc_value instead [ 537.263330][ T8776] loop2: detected capacity change from 0 to 256 [ 537.356594][ T5892] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 270 seconds [ 537.367636][ T5892] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 270 seconds [ 537.381006][ T5892] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 270 seconds [ 537.393102][ T5892] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 270 seconds [ 538.032115][ T8774] [U]  [ 542.067286][ T8804] loop2: detected capacity change from 0 to 1024 [ 542.658383][ T42] hfsplus: b-tree write err: -5, ino 4 [ 544.132573][ T7898] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 360 seconds [ 544.143380][ T7898] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 360 seconds [ 544.154829][ T7898] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 360 seconds [ 544.166085][ T7898] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 360 seconds [ 544.185964][ T5870] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 240 seconds [ 544.197031][ T5870] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 240 seconds [ 544.208336][ T5870] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 240 seconds [ 544.219599][ T5870] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 240 seconds [ 548.007048][ T5136] udevd[5136]: worker [7247] /devices/virtual/block/nbd8 timeout; kill it [ 548.073291][ T8815] loop3: detected capacity change from 0 to 256 [ 548.092063][ T5136] udevd[5136]: seq 11656 '/devices/virtual/block/nbd8' killed [ 548.099669][ T5136] udevd[5136]: worker [5781] /devices/virtual/block/nbd2 timeout; kill it [ 548.108476][ T5136] udevd[5136]: seq 11273 '/devices/virtual/block/nbd2' killed [ 548.128278][ T5136] udevd[5136]: worker [5773] /devices/virtual/block/nbd0 timeout; kill it [ 548.206008][ T5136] udevd[5136]: seq 10936 '/devices/virtual/block/nbd0' killed [ 548.213632][ T5136] udevd[5136]: worker [6549] /devices/virtual/block/nbd1 timeout; kill it [ 548.306264][ T5136] udevd[5136]: seq 11091 '/devices/virtual/block/nbd1' killed [ 548.313820][ T5136] udevd[5136]: worker [6550] /devices/virtual/block/nbd3 timeout; kill it [ 548.366019][ T5136] udevd[5136]: seq 11342 '/devices/virtual/block/nbd3' killed [ 548.734746][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.829'. [ 549.578859][ T8818] [U]  [ 552.156055][ T8839] loop1: detected capacity change from 0 to 1024 [ 552.836304][ T1123] hfsplus: b-tree write err: -5, ino 4 [ 553.005073][ T8841] loop3: detected capacity change from 0 to 1024 [ 553.121484][ T8847] overlayfs: missing 'lowerdir' [ 553.217384][ T7898] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 390 seconds [ 553.217531][ T5892] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 300 seconds [ 553.240163][ T5892] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 300 seconds [ 553.251333][ T7898] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 390 seconds [ 553.251975][ T5892] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 300 seconds [ 553.273691][ T5892] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 300 seconds [ 553.298334][ T7898] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 390 seconds [ 553.349436][ T7898] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 390 seconds [ 557.007387][ T8859] loop2: detected capacity change from 0 to 256 [ 557.045232][ T5892] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 360 seconds [ 559.394577][ T8875] loop0: detected capacity change from 0 to 1024 [ 560.036501][ T6006] hfsplus: b-tree write err: -5, ino 4 [ 561.499629][ T8895] overlayfs: missing 'lowerdir' [ 564.107210][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.113562][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.134722][ T8905] loop3: detected capacity change from 0 to 256 [ 564.528618][ T8907] sctp: [Deprecated]: syz.1.849 (pid 8907) Use of int in maxseg socket option. [ 564.528618][ T8907] Use struct sctp_assoc_value instead [ 564.561954][ T8907] loop1: detected capacity change from 0 to 256 [ 564.759528][ T8909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.853'. [ 565.543182][ T8908] [U]  [ 566.214741][ T8920] mkiss: ax0: crc mode is auto. [ 566.220142][ T7898] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 420 seconds [ 566.657445][ T969] kworker/dying (969) used greatest stack depth: 20648 bytes left [ 567.438541][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 567.977544][ T5892] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 300 seconds [ 567.988466][ T5892] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 300 seconds [ 567.999587][ T5892] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 300 seconds [ 568.010838][ T5892] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 300 seconds [ 570.109281][ T8940] overlayfs: missing 'lowerdir' [ 570.850207][ T8943] loop3: detected capacity change from 0 to 1024 [ 572.093304][ T8954] mkiss: ax0: crc mode is auto. [ 574.375960][ T5870] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 390 seconds [ 574.386811][ T5870] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 390 seconds [ 574.398399][ T5870] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 390 seconds [ 574.409813][ T5870] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 390 seconds [ 574.421451][ T7898] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 270 seconds [ 574.432643][ T7898] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 270 seconds [ 574.443942][ T7898] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 270 seconds [ 574.455401][ T7898] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 270 seconds [ 574.719394][ T8965] loop3: detected capacity change from 0 to 256 [ 576.277920][ T8978] ALSA: mixer_oss: invalid OSS volume '' [ 576.339049][ T8978] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 576.345611][ T8978] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 576.356017][ T8978] vhci_hcd vhci_hcd.0: Device attached [ 576.654106][ T8984] sctp: [Deprecated]: syz.2.868 (pid 8984) Use of int in maxseg socket option. [ 576.654106][ T8984] Use struct sctp_assoc_value instead [ 576.676133][ T5851] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 576.766985][ T8979] vhci_hcd: connection reset by peer [ 576.782478][ T11] vhci_hcd: stop threads [ 576.857143][ T11] vhci_hcd: release socket [ 576.870773][ T11] vhci_hcd: disconnect device [ 576.874430][ T8985] loop2: detected capacity change from 0 to 256 [ 577.659899][ T8987] loop3: detected capacity change from 0 to 1024 [ 580.649937][ T9012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.718064][ T9023] ALSA: mixer_oss: invalid OSS volume '' [ 581.882870][ T5851] vhci_hcd: vhci_device speed not set [ 582.654409][ T9023] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 582.661055][ T9023] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 582.846137][ T9023] vhci_hcd vhci_hcd.0: Device attached [ 582.847603][ T9025] vhci_hcd: connection closed [ 582.853053][ T42] vhci_hcd: stop threads [ 582.890587][ T42] vhci_hcd: release socket [ 582.898069][ T42] vhci_hcd: disconnect device [ 583.364786][ T7986] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 330 seconds [ 583.398600][ T7986] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 330 seconds [ 583.446838][ T7986] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 330 seconds [ 583.495167][ T7986] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 330 seconds [ 584.092127][ T7898] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 420 seconds [ 584.103368][ T7898] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 420 seconds [ 584.111711][ T9040] loop1: detected capacity change from 0 to 1024 [ 584.114934][ T7898] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 420 seconds [ 584.135960][ T7898] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 420 seconds [ 585.271146][ T9044] [U]  [ 585.353197][ T9049] loop0: detected capacity change from 0 to 256 [ 587.291354][ T5892] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 390 seconds [ 589.594343][ T9075] ALSA: mixer_oss: invalid OSS volume '' [ 589.632837][ T9077] loop2: detected capacity change from 0 to 1024 [ 589.643432][ T9075] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 589.649974][ T9075] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 589.676199][ T9075] vhci_hcd vhci_hcd.0: Device attached [ 589.955942][ T5851] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 590.103605][ T9076] vhci_hcd: connection reset by peer [ 590.109566][ T59] vhci_hcd: stop threads [ 590.113847][ T59] vhci_hcd: release socket [ 590.124483][ T59] vhci_hcd: disconnect device [ 594.696049][ T9104] loop3: detected capacity change from 0 to 1024 [ 595.887565][ T5851] vhci_hcd: vhci_device speed not set [ 596.057692][ T9113] loop1: detected capacity change from 0 to 256 [ 598.542711][ T7898] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 450 seconds [ 598.592213][ T5892] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 330 seconds [ 598.605052][ T5892] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 330 seconds [ 598.616344][ T5892] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 330 seconds [ 598.627462][ T5892] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 330 seconds [ 599.693190][ T9123] [U]  [ 600.719746][ T9136] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 600.729009][ T9136] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 601.918985][ T9145] ALSA: mixer_oss: invalid OSS volume '' [ 603.104933][ T9153] loop0: detected capacity change from 0 to 1024 [ 603.143265][ T9145] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 603.149830][ T9145] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 603.163503][ T9145] vhci_hcd vhci_hcd.0: Device attached [ 603.471141][ T9156] vhci_hcd: connection closed [ 603.471844][ T42] vhci_hcd: stop threads [ 603.511348][ T42] vhci_hcd: release socket [ 603.511374][ T42] vhci_hcd: disconnect device [ 603.639718][ T9159] loop1: detected capacity change from 0 to 1024 [ 604.125931][ T7255] usb 37-1: new high-speed USB device number 7 using vhci_hcd [ 604.125974][ T7255] usb 37-1: enqueue for inactive port 0 [ 604.157374][ T59] hfsplus: b-tree write err: -5, ino 4 [ 604.223169][ T7255] vhci_hcd: vhci_device speed not set [ 605.203650][ T5870] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 300 seconds [ 605.215604][ T7898] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 420 seconds [ 605.227509][ T5870] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 300 seconds [ 605.238562][ T7898] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 420 seconds [ 605.249588][ T5870] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 300 seconds [ 605.260612][ T7898] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 420 seconds [ 605.271685][ T5870] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 300 seconds [ 605.282866][ T7898] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 420 seconds [ 606.970703][ T9174] [U]  [ 607.077929][ T9184] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 607.096008][ T9184] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 607.979955][ T9191] loop2: detected capacity change from 0 to 256 [ 608.118000][ T7503] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 609.336318][ T9197] loop1: detected capacity change from 0 to 1024 [ 609.501611][ T9203] loop0: detected capacity change from 0 to 1024 [ 610.713162][ T42] hfsplus: b-tree write err: -5, ino 4 [ 612.846448][ T9228] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 612.855595][ T9228] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 613.769837][ T9231] ALSA: mixer_oss: invalid OSS volume '' [ 613.833215][ T9231] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 613.839769][ T9231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 614.195162][ T9231] vhci_hcd vhci_hcd.0: Device attached [ 614.207427][ T5892] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 360 seconds [ 614.218197][ T5892] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 360 seconds [ 614.229202][ T5892] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 360 seconds [ 614.240418][ T5892] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 360 seconds [ 614.265895][ T9232] vhci_hcd: connection closed [ 614.270854][ T42] vhci_hcd: stop threads [ 614.325968][ T42] vhci_hcd: release socket [ 614.338337][ T42] vhci_hcd: disconnect device [ 614.405992][ T23] vhci_hcd: vhci_device speed not set [ 614.656503][ T7898] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 450 seconds [ 614.667301][ T7898] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 450 seconds [ 614.678385][ T7898] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 450 seconds [ 614.689428][ T7898] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 450 seconds [ 616.981005][ T9254] loop1: detected capacity change from 0 to 1024 [ 618.152704][ T5892] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 420 seconds [ 618.354765][ T9263] loop3: detected capacity change from 0 to 1024 [ 618.598923][ T9266] loop2: detected capacity change from 0 to 256 [ 618.699274][ T1123] hfsplus: b-tree write err: -5, ino 4 [ 619.856426][ T9280] sctp: [Deprecated]: syz.3.948 (pid 9280) Use of int in maxseg socket option. [ 619.856426][ T9280] Use struct sctp_assoc_value instead [ 619.986815][ T9280] loop3: detected capacity change from 0 to 256 [ 620.602694][ T9281] ALSA: mixer_oss: invalid OSS volume '' [ 620.665135][ T9281] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 620.671692][ T9281] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 620.780109][ T9281] vhci_hcd vhci_hcd.0: Device attached [ 620.960845][ T9282] vhci_hcd: connection closed [ 620.961391][ T12] vhci_hcd: stop threads [ 620.995241][ T12] vhci_hcd: release socket [ 621.005308][ T12] vhci_hcd: disconnect device [ 621.189046][ T23] usb 35-1: new high-speed USB device number 6 using vhci_hcd [ 621.205981][ T23] usb 35-1: enqueue for inactive port 0 [ 621.296045][ T23] vhci_hcd: vhci_device speed not set [ 624.506494][ T9317] loop0: detected capacity change from 0 to 1024 [ 624.550673][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.558397][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.637672][ T9321] tipc: Started in network mode [ 624.647041][ T9321] tipc: Node identity d22dbaffc84e, cluster identity 4711 [ 624.654794][ T9321] tipc: Enabled bearer , priority 0 [ 624.764583][ T9321] tipc: Resetting bearer [ 624.771785][ T1123] hfsplus: b-tree write err: -5, ino 4 [ 624.876899][ T9320] tipc: Disabling bearer [ 628.736194][ T7986] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 360 seconds [ 628.736201][ T7898] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 480 seconds [ 628.736239][ T7986] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 360 seconds [ 628.833515][ T7986] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 360 seconds [ 628.881062][ T7986] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 360 seconds [ 631.530309][ T9361] loop2: detected capacity change from 0 to 1024 [ 632.176841][ T59] hfsplus: b-tree write err: -5, ino 4 [ 636.033764][ T9377] ALSA: mixer_oss: invalid OSS volume '' [ 636.150342][ T5870] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 450 seconds [ 636.157577][ T9377] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 636.165859][ T5870] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 450 seconds [ 636.167540][ T9377] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 636.179094][ T7898] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 330 seconds [ 636.197254][ T5870] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 450 seconds [ 636.208312][ T7898] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 330 seconds [ 636.219402][ T5870] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 450 seconds [ 636.230434][ T7898] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 330 seconds [ 636.241572][ T7898] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 330 seconds [ 636.345241][ T9377] vhci_hcd vhci_hcd.0: Device attached [ 636.351096][ T9378] vhci_hcd: connection closed [ 636.615980][ T7255] usb 35-1: new high-speed USB device number 7 using vhci_hcd [ 637.090494][ T9382] [U]  [ 637.136042][ T9380] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 637.142586][ T42] vhci_hcd: stop threads [ 637.156205][ T42] vhci_hcd: release socket [ 637.187406][ T42] vhci_hcd: disconnect device [ 637.716870][ T9393] loop2: detected capacity change from 0 to 1024 [ 644.988001][ T7898] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 480 seconds [ 644.996959][ T7255] vhci_hcd: vhci_device speed not set [ 644.998842][ T7898] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 480 seconds [ 645.015148][ T7898] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 480 seconds [ 645.026182][ T7898] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 480 seconds [ 645.073597][ T5892] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 390 seconds [ 645.085324][ T5892] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 390 seconds [ 645.096467][ T5892] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 390 seconds [ 645.107490][ T5892] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 390 seconds [ 648.581602][ T5892] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 450 seconds [ 648.798460][ T9436] ALSA: mixer_oss: invalid OSS volume '' [ 648.844890][ T9436] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 648.851462][ T9436] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 649.075916][ T9436] vhci_hcd vhci_hcd.0: Device attached [ 649.373171][ T9438] vhci_hcd: connection closed [ 649.383756][ T1123] vhci_hcd: stop threads [ 649.392796][ T1123] vhci_hcd: release socket [ 649.417296][ T1123] vhci_hcd: disconnect device [ 649.445941][ T7255] vhci_hcd: vhci_device speed not set [ 649.985312][ T9451] loop2: detected capacity change from 0 to 1024 [ 650.067256][ T9453] loop1: detected capacity change from 0 to 256 [ 652.980867][ T9458] [U]  [ 653.886064][ T9460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.057911][ T9475] macvtap1: entered promiscuous mode [ 654.063432][ T9475] macvtap1: entered allmulticast mode [ 654.069815][ T9475] veth1_vlan: entered allmulticast mode [ 654.978376][ T9478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.514591][ T9489] loop3: detected capacity change from 0 to 256 [ 658.816094][ T5892] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 390 seconds [ 658.816117][ T7898] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 510 seconds [ 658.865992][ T5892] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 390 seconds [ 658.896901][ T9496] loop2: detected capacity change from 0 to 1024 [ 658.903474][ T5892] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 390 seconds [ 658.954973][ T5892] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 390 seconds [ 659.663185][ T9495] [U]  [ 659.720267][ T9501] macvtap2: entered promiscuous mode [ 659.726206][ T9501] macvtap2: entered allmulticast mode [ 659.731642][ T9501] veth1_vlan: entered allmulticast mode [ 659.807966][ T9504] syzkaller0: entered promiscuous mode [ 659.813660][ T9504] syzkaller0: entered allmulticast mode [ 660.867126][ T9511] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 660.873684][ T9511] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 661.693730][ T9511] vhci_hcd vhci_hcd.0: Device attached [ 661.793655][ T9516] vhci_hcd: connection closed [ 661.794051][ T59] vhci_hcd: stop threads [ 661.826539][ T59] vhci_hcd: release socket [ 663.235879][ T59] vhci_hcd: disconnect device [ 663.607439][ T7255] usb 35-1: new high-speed USB device number 8 using vhci_hcd [ 663.615109][ T7255] usb 35-1: enqueue for inactive port 0 [ 663.746022][ T7255] vhci_hcd: vhci_device speed not set [ 663.786649][ T9528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.359197][ T9540] loop3: detected capacity change from 0 to 256 [ 666.140135][ T9543] sctp: [Deprecated]: syz.1.1011 (pid 9543) Use of int in maxseg socket option. [ 666.140135][ T9543] Use struct sctp_assoc_value instead [ 667.005008][ T7898] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 480 seconds [ 667.015874][ T5870] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 360 seconds [ 667.026652][ T7898] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 480 seconds [ 667.037663][ T5870] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 360 seconds [ 667.429815][ T9543] loop1: detected capacity change from 0 to 256 [ 667.499081][ T7898] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 480 seconds [ 667.510142][ T5870] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 360 seconds [ 667.525824][ T7898] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 480 seconds [ 667.536936][ T5870] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 360 seconds [ 668.451338][ T9548] loop2: detected capacity change from 0 to 1024 [ 668.492887][ T9544] [U]  [ 671.752644][ T9579] ALSA: mixer_oss: invalid OSS volume '' [ 671.835953][ T9579] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 671.842502][ T9579] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 671.963449][ T9579] vhci_hcd vhci_hcd.0: Device attached [ 672.369005][ T7255] usb 33-1: new high-speed USB device number 8 using vhci_hcd [ 672.406453][ T9580] vhci_hcd: connection closed [ 672.406739][ T11] vhci_hcd: stop threads [ 673.006925][ T9591] sctp: [Deprecated]: syz.3.1023 (pid 9591) Use of int in maxseg socket option. [ 673.006925][ T9591] Use struct sctp_assoc_value instead [ 673.295880][ T9591] loop3: detected capacity change from 0 to 256 [ 674.575683][ T11] vhci_hcd: release socket [ 674.606037][ T11] vhci_hcd: disconnect device [ 675.456004][ T7898] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 510 seconds [ 675.469507][ T7898] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 510 seconds [ 675.517684][ T7898] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 510 seconds [ 675.565760][ T7898] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 510 seconds [ 675.796098][ T5892] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 420 seconds [ 675.813057][ T5892] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 420 seconds [ 675.824345][ T5892] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 420 seconds [ 675.835392][ T5892] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 420 seconds [ 677.386154][ T9609] loop1: detected capacity change from 0 to 1024 [ 677.537392][ T7255] vhci_hcd: vhci_device speed not set [ 678.293456][ T9617] loop3: detected capacity change from 0 to 256 [ 679.758653][ T5892] block nbd3: Possible stuck request ffff888021958000: control (read@0,4096B). Runtime 480 seconds [ 679.827471][ T7367] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 680.303317][ T9626] mkiss: ax0: crc mode is auto. [ 682.671129][ T9630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.689489][ T9639] ALSA: mixer_oss: invalid OSS volume '' [ 684.772936][ T9639] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 684.779467][ T9639] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 684.942415][ T9651] loop1: detected capacity change from 0 to 1024 [ 685.721638][ T9639] vhci_hcd vhci_hcd.0: Device attached [ 685.765617][ T9647] vhci_hcd: connection closed [ 685.766404][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.786076][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.800289][ T11] vhci_hcd: stop threads [ 685.804592][ T11] vhci_hcd: release socket [ 685.868406][ T11] vhci_hcd: disconnect device [ 685.925972][ T23] vhci_hcd: vhci_device speed not set [ 686.764311][ T9662] [U]  [ 687.105917][ T9677] mkiss: ax0: crc mode is auto. [ 688.977803][ T7986] block nbd7: Possible stuck request ffff888021aa8000: control (read@0,1024B). Runtime 420 seconds [ 688.988793][ T7986] block nbd7: Possible stuck request ffff888021aa8200: control (read@1024,1024B). Runtime 420 seconds [ 689.016120][ T7986] block nbd7: Possible stuck request ffff888021aa8400: control (read@2048,1024B). Runtime 420 seconds [ 689.023675][ T5870] block nbd0: Possible stuck request ffff888021850000: control (read@0,4096B). Runtime 540 seconds [ 689.027340][ T7986] block nbd7: Possible stuck request ffff888021aa8600: control (read@3072,1024B). Runtime 420 seconds [ 689.248813][ T9679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.020351][ T9700] loop2: detected capacity change from 0 to 1024 [ 692.993507][ T9706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.112246][ T9714] ALSA: mixer_oss: invalid OSS volume '' [ 694.251410][ T9714] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 694.258037][ T9714] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 694.279540][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1054'. [ 694.318834][ T9714] vhci_hcd vhci_hcd.0: Device attached [ 694.423137][ T9718] vhci_hcd: connection closed [ 694.426556][ T59] vhci_hcd: stop threads [ 694.515362][ T59] vhci_hcd: release socket [ 694.520704][ T59] vhci_hcd: disconnect device [ 694.585914][ T7255] usb 35-1: new high-speed USB device number 9 using vhci_hcd [ 694.595224][ T9727] mkiss: ax0: crc mode is auto. [ 694.602861][ T7255] usb 35-1: enqueue for inactive port 0 [ 694.695938][ T7255] vhci_hcd: vhci_device speed not set [ 696.666486][ T9746] sctp: [Deprecated]: syz.1.1061 (pid 9746) Use of int in maxseg socket option. [ 696.666486][ T9746] Use struct sctp_assoc_value instead [ 696.847621][ T9746] loop1: detected capacity change from 0 to 256 [ 698.035456][ T5870] block nbd2: Possible stuck request ffff8880218b8000: control (read@0,1024B). Runtime 510 seconds [ 698.046363][ T9664] block nbd8: Possible stuck request ffff888021ac8000: control (read@0,1024B). Runtime 390 seconds [ 698.057087][ T5870] block nbd2: Possible stuck request ffff8880218b8200: control (read@1024,1024B). Runtime 510 seconds [ 698.068117][ T9664] block nbd8: Possible stuck request ffff888021ac8200: control (read@1024,1024B). Runtime 390 seconds [ 698.079118][ T5870] block nbd2: Possible stuck request ffff8880218b8400: control (read@2048,1024B). Runtime 510 seconds [ 698.090128][ T9664] block nbd8: Possible stuck request ffff888021ac8400: control (read@2048,1024B). Runtime 390 seconds [ 698.101105][ T5870] block nbd2: Possible stuck request ffff8880218b8600: control (read@3072,1024B). Runtime 510 seconds [ 698.112087][ T9664] block nbd8: Possible stuck request ffff888021ac8600: control (read@3072,1024B). Runtime 390 seconds [ 698.466133][ T9748] loop2: detected capacity change from 0 to 1024 [ 699.855607][ T9764] ALSA: mixer_oss: invalid OSS volume '' [ 700.810410][ T9764] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 700.816969][ T9764] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 700.847163][ T9759] mkiss: ax0: crc mode is auto. [ 700.880545][ T9767] vhci_hcd: connection closed [ 700.883296][ T9764] vhci_hcd vhci_hcd.0: Device attached [ 700.913181][ T42] vhci_hcd: stop threads [ 700.922090][ T42] vhci_hcd: release socket [ 700.972725][ T42] vhci_hcd: disconnect device [ 701.020025][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1066'. [ 701.141625][ T9773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.309307][ T9784] loop1: detected capacity change from 0 to 1024 [ 703.486460][ T9802] sctp: [Deprecated]: syz.2.1073 (pid 9802) Use of int in maxseg socket option. [ 703.486460][ T9802] Use struct sctp_assoc_value instead [ 703.703849][ T9803] mkiss: ax0: crc mode is auto. [ 703.846632][ T9805] loop2: detected capacity change from 0 to 256 [ 704.256077][ T29] INFO: task udevd:5773 blocked for more than 145 seconds. [ 704.263606][ T29] Not tainted syzkaller #0 [ 704.290676][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 704.325833][ T29] task:udevd state:D stack:25712 pid:5773 ppid:5136 flags:0x00004006 [ 704.335277][ T29] Call Trace: [ 704.377144][ T29] [ 704.380129][ T29] __schedule+0x14d2/0x44d0 [ 704.384695][ T29] ? asan.module_dtor+0x20/0x20 [ 704.423021][ T29] ? mark_lock+0x94/0x320 [ 704.439721][ T29] ? lock_chain_count+0x20/0x20 [ 704.444622][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 704.470735][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 704.489597][ T29] schedule+0xbd/0x170 [ 704.493711][ T29] io_schedule+0x80/0xd0 [ 704.507453][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 704.512806][ T29] ? folio_wait_bit+0x30/0x30 [ 704.517645][ T29] ? _compound_head+0x120/0x120 [ 704.522549][ T29] ? filemap_add_folio+0x192/0x3c0 [ 704.527786][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 704.533099][ T29] ? blkdev_writepage+0x30/0x30 [ 704.538114][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 704.543260][ T29] ? blkdev_writepage+0x30/0x30 [ 704.548237][ T29] read_part_sector+0xd2/0x350 [ 704.553040][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 704.558554][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 704.563877][ T29] ? put_partition+0x350/0x350 [ 704.568717][ T29] ? alloc_pages+0x4dc/0x740 [ 704.573340][ T29] bdev_disk_changed+0x73a/0x1410 [ 704.578652][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 704.583998][ T29] ? iput+0x347/0x920 [ 704.588112][ T29] blkdev_get_whole+0x30d/0x390 [ 704.592998][ T29] blkdev_get_by_dev+0x279/0x600 [ 704.598056][ T29] blkdev_open+0x152/0x360 [ 704.602505][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 704.607181][ T29] do_dentry_open+0x8c6/0x1500 [ 704.611992][ T29] path_openat+0x274b/0x3190 [ 704.616760][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 704.621820][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.628017][ T29] ? verify_lock_unused+0x140/0x140 [ 704.633249][ T29] ? do_filp_open+0x3d0/0x3d0 [ 704.638082][ T29] ? __virt_addr_valid+0x18c/0x540 [ 704.643250][ T29] do_filp_open+0x1c5/0x3d0 [ 704.648046][ T29] ? vfs_tmpfile+0x490/0x490 [ 704.652822][ T29] ? _raw_spin_unlock+0x28/0x40 [ 704.661311][ T29] ? alloc_fd+0x58f/0x630 [ 704.666917][ T29] do_sys_openat2+0x12c/0x1c0 [ 704.671791][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 704.681402][ T29] ? do_sys_open+0xe0/0xe0 [ 704.687692][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 704.693786][ T29] ? lock_chain_count+0x20/0x20 [ 704.702111][ T29] __x64_sys_openat+0x139/0x160 [ 704.708480][ T29] do_syscall_64+0x55/0xb0 [ 704.713078][ T29] ? clear_bhb_loop+0x40/0x90 [ 704.721665][ T29] ? clear_bhb_loop+0x40/0x90 [ 704.728005][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.734090][ T29] RIP: 0033:0x7f86d84a7407 [ 704.742645][ T29] RSP: 002b:00007fff53d55690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 704.752587][ T29] RAX: ffffffffffffffda RBX: 00007f86d8b83880 RCX: 00007f86d84a7407 [ 704.764768][ T29] RDX: 00000000000a0800 RSI: 000055a441f90480 RDI: ffffffffffffff9c [ 704.773176][ T29] RBP: 000055a441f8f910 R08: 0000000000000000 R09: 0000000000000000 [ 704.781555][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a441fa4830 [ 704.789699][ T29] R13: 000055a441fa7410 R14: 0000000000000000 R15: 000055a441fa4830 [ 704.798009][ T29] [ 704.801178][ T29] INFO: task udevd:5774 blocked for more than 145 seconds. [ 704.809157][ T29] Not tainted syzkaller #0 [ 704.814234][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 704.835207][ T29] task:udevd state:D stack:23400 pid:5774 ppid:5136 flags:0x00004006 [ 704.844954][ T29] Call Trace: [ 704.852524][ T29] [ 704.855686][ T29] __schedule+0x14d2/0x44d0 [ 704.860737][ T29] ? asan.module_dtor+0x20/0x20 [ 704.866144][ T29] ? mark_lock+0x94/0x320 [ 704.870591][ T29] ? lock_chain_count+0x20/0x20 [ 704.879817][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 704.884983][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 704.890958][ T29] schedule+0xbd/0x170 [ 704.895149][ T29] io_schedule+0x80/0xd0 [ 704.900083][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 704.905569][ T29] ? folio_wait_bit+0x30/0x30 [ 704.910761][ T29] ? _compound_head+0x120/0x120 [ 704.915754][ T29] ? filemap_add_folio+0x192/0x3c0 [ 704.921382][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 704.927426][ T29] ? blkdev_writepage+0x30/0x30 [ 704.932414][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 704.938169][ T29] ? blkdev_writepage+0x30/0x30 [ 704.943137][ T29] read_part_sector+0xd2/0x350 [ 704.952310][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 704.958086][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 704.973698][ T29] ? put_partition+0x350/0x350 [ 704.978804][ T29] ? alloc_pages+0x4dc/0x740 [ 704.983449][ T29] bdev_disk_changed+0x73a/0x1410 [ 704.988774][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 704.994129][ T29] ? iput+0x347/0x920 [ 704.998196][ T29] blkdev_get_whole+0x30d/0x390 [ 705.003073][ T29] blkdev_get_by_dev+0x279/0x600 [ 705.008157][ T29] blkdev_open+0x152/0x360 [ 705.012603][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 705.017349][ T29] do_dentry_open+0x8c6/0x1500 [ 705.022157][ T29] path_openat+0x274b/0x3190 [ 705.026867][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 705.031920][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.038155][ T29] ? verify_lock_unused+0x140/0x140 [ 705.043383][ T29] ? do_filp_open+0x3d0/0x3d0 [ 705.048208][ T29] ? __virt_addr_valid+0x18c/0x540 [ 705.053356][ T29] do_filp_open+0x1c5/0x3d0 [ 705.058014][ T29] ? vfs_tmpfile+0x490/0x490 [ 705.062681][ T29] ? _raw_spin_unlock+0x28/0x40 [ 705.067648][ T29] ? alloc_fd+0x58f/0x630 [ 705.072025][ T29] do_sys_openat2+0x12c/0x1c0 [ 705.076823][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 705.082660][ T29] ? do_sys_open+0xe0/0xe0 [ 705.087158][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 705.093173][ T29] ? lock_chain_count+0x20/0x20 [ 705.098110][ T29] __x64_sys_openat+0x139/0x160 [ 705.103020][ T29] do_syscall_64+0x55/0xb0 [ 705.107539][ T29] ? clear_bhb_loop+0x40/0x90 [ 705.112244][ T29] ? clear_bhb_loop+0x40/0x90 [ 705.117019][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.122939][ T29] RIP: 0033:0x7f86d84a7407 [ 705.127491][ T29] RSP: 002b:00007fff53d55690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 705.136081][ T29] RAX: ffffffffffffffda RBX: 00007f86d8b83880 RCX: 00007f86d84a7407 [ 705.144072][ T29] RDX: 00000000000a0800 RSI: 000055a441f90430 RDI: ffffffffffffff9c [ 705.152250][ T29] RBP: 000055a441f8f910 R08: 0000000000000000 R09: 0000000000000000 [ 705.160419][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a441fa2ad0 [ 705.168785][ T29] R13: 000055a441fa7410 R14: 0000000000000000 R15: 000055a441fa2ad0 [ 705.176844][ T29] [ 705.179913][ T29] INFO: task udevd:5781 blocked for more than 146 seconds. [ 705.187227][ T29] Not tainted syzkaller #0 [ 705.192203][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 705.201000][ T29] task:udevd state:D stack:24872 pid:5781 ppid:5136 flags:0x00004006 [ 705.210347][ T29] Call Trace: [ 705.213649][ T29] [ 705.217118][ T29] __schedule+0x14d2/0x44d0 [ 705.221714][ T29] ? asan.module_dtor+0x20/0x20 [ 705.226668][ T29] ? mark_lock+0x94/0x320 [ 705.231026][ T29] ? lock_chain_count+0x20/0x20 [ 705.236160][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 705.241227][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 705.246929][ T29] schedule+0xbd/0x170 [ 705.251034][ T29] io_schedule+0x80/0xd0 [ 705.255287][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 705.260910][ T29] ? folio_wait_bit+0x30/0x30 [ 705.265633][ T29] ? _compound_head+0x120/0x120 [ 705.270565][ T29] ? filemap_add_folio+0x192/0x3c0 [ 705.275707][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 705.281140][ T29] ? blkdev_writepage+0x30/0x30 [ 705.286104][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 705.291244][ T29] ? blkdev_writepage+0x30/0x30 [ 705.296198][ T29] read_part_sector+0xd2/0x350 [ 705.300993][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 705.306430][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 705.311744][ T29] ? put_partition+0x350/0x350 [ 705.316647][ T29] ? alloc_pages+0x4dc/0x740 [ 705.321276][ T29] bdev_disk_changed+0x73a/0x1410 [ 705.326389][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 705.331724][ T29] ? iput+0x347/0x920 [ 705.335736][ T29] blkdev_get_whole+0x30d/0x390 [ 705.340698][ T29] blkdev_get_by_dev+0x279/0x600 [ 705.345669][ T29] blkdev_open+0x152/0x360 [ 705.350140][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 705.354753][ T29] do_dentry_open+0x8c6/0x1500 [ 705.359687][ T29] path_openat+0x274b/0x3190 [ 705.364329][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 705.369591][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.375689][ T29] ? verify_lock_unused+0x140/0x140 [ 705.380936][ T29] ? do_filp_open+0x3d0/0x3d0 [ 705.385646][ T29] ? __virt_addr_valid+0x18c/0x540 [ 705.390887][ T29] do_filp_open+0x1c5/0x3d0 [ 705.395429][ T29] ? vfs_tmpfile+0x490/0x490 [ 705.400187][ T29] ? _raw_spin_unlock+0x28/0x40 [ 705.405073][ T29] ? alloc_fd+0x58f/0x630 [ 705.409462][ T29] do_sys_openat2+0x12c/0x1c0 [ 705.414166][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 705.420044][ T29] ? do_sys_open+0xe0/0xe0 [ 705.424493][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 705.430542][ T29] ? lock_chain_count+0x20/0x20 [ 705.435419][ T29] __x64_sys_openat+0x139/0x160 [ 705.440407][ T29] do_syscall_64+0x55/0xb0 [ 705.444872][ T29] ? clear_bhb_loop+0x40/0x90 [ 705.449641][ T29] ? clear_bhb_loop+0x40/0x90 [ 705.454347][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.460329][ T29] RIP: 0033:0x7f86d84a7407 [ 705.464788][ T29] RSP: 002b:00007fff53d55690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 705.473309][ T29] RAX: ffffffffffffffda RBX: 00007f86d8b83880 RCX: 00007f86d84a7407 [ 705.481520][ T29] RDX: 00000000000a0800 RSI: 000055a441f9e2e0 RDI: ffffffffffffff9c [ 705.489810][ T29] RBP: 000055a441f8f910 R08: 0000000000000000 R09: 0000000000000000 [ 705.497935][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a441fa3ba0 [ 705.506051][ T29] R13: 000055a441fa7410 R14: 0000000000000000 R15: 000055a441fa3ba0 [ 705.514048][ T29] [ 705.517155][ T29] INFO: task udevd:5978 blocked for more than 146 seconds. [ 705.524366][ T29] Not tainted syzkaller #0 [ 705.529486][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 705.538423][ T9664] block nbd1: Possible stuck request ffff888021898000: control (read@0,1024B). Runtime 540 seconds [ 705.549190][ T9664] block nbd1: Possible stuck request ffff888021898200: control (read@1024,1024B). Runtime 540 seconds [ 705.550976][ T29] task:udevd state:D stack:24968 pid:5978 ppid:5136 flags:0x00004006 [ 705.570035][ T29] Call Trace: [ 705.573435][ T29] [ 705.575878][ T9664] block nbd1: Possible stuck request ffff888021898400: control (read@2048,1024B). Runtime 540 seconds [ 705.576568][ T29] __schedule+0x14d2/0x44d0 [ 705.592152][ T29] ? asan.module_dtor+0x20/0x20 [ 705.597167][ T29] ? mark_lock+0x94/0x320 [ 705.601726][ T29] ? lock_chain_count+0x20/0x20 [ 705.606835][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 705.611895][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 705.617509][ T9664] block nbd1: Possible stuck request ffff888021898600: control (read@3072,1024B). Runtime 540 seconds [ 705.617834][ T29] schedule+0xbd/0x170 [ 705.632823][ T29] io_schedule+0x80/0xd0 [ 705.637267][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 705.642612][ T29] ? folio_wait_bit+0x30/0x30 [ 705.647395][ T29] ? _compound_head+0x120/0x120 [ 705.652282][ T29] ? filemap_add_folio+0x192/0x3c0 [ 705.657534][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 705.662834][ T29] ? blkdev_writepage+0x30/0x30 [ 705.667808][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 705.672957][ T29] ? blkdev_writepage+0x30/0x30 [ 705.678021][ T29] read_part_sector+0xd2/0x350 [ 705.682819][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 705.688308][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 705.693621][ T29] ? put_partition+0x350/0x350 [ 705.698615][ T29] ? alloc_pages+0x4dc/0x740 [ 705.703241][ T29] bdev_disk_changed+0x73a/0x1410 [ 705.708391][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 705.713716][ T29] ? iput+0x347/0x920 [ 705.717917][ T29] blkdev_get_whole+0x30d/0x390 [ 705.722835][ T29] blkdev_get_by_dev+0x279/0x600 [ 705.727912][ T29] blkdev_open+0x152/0x360 [ 705.732377][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 705.737086][ T29] do_dentry_open+0x8c6/0x1500 [ 705.741891][ T29] path_openat+0x274b/0x3190 [ 705.746605][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 705.751669][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.758006][ T29] ? verify_lock_unused+0x140/0x140 [ 705.763257][ T29] ? do_filp_open+0x3d0/0x3d0 [ 705.768028][ T29] ? __virt_addr_valid+0x18c/0x540 [ 705.773168][ T29] do_filp_open+0x1c5/0x3d0 [ 705.777866][ T29] ? vfs_tmpfile+0x490/0x490 [ 705.782513][ T29] ? _raw_spin_unlock+0x28/0x40 [ 705.787531][ T29] ? alloc_fd+0x58f/0x630 [ 705.791907][ T29] do_sys_openat2+0x12c/0x1c0 [ 705.796786][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 705.802637][ T29] ? do_sys_open+0xe0/0xe0 [ 705.807185][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 705.813188][ T29] ? lock_chain_count+0x20/0x20 [ 705.818183][ T29] __x64_sys_openat+0x139/0x160 [ 705.823065][ T29] do_syscall_64+0x55/0xb0 [ 705.827606][ T29] ? clear_bhb_loop+0x40/0x90 [ 705.832328][ T29] ? clear_bhb_loop+0x40/0x90 [ 705.837183][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.843186][ T29] RIP: 0033:0x7f86d84a7407 [ 705.847691][ T29] RSP: 002b:00007fff53d55690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 705.856236][ T29] RAX: ffffffffffffffda RBX: 00007f86d8b83880 RCX: 00007f86d84a7407 [ 705.864230][ T29] RDX: 00000000000a0800 RSI: 000055a441fa3910 RDI: ffffffffffffff9c [ 705.872377][ T29] RBP: 000055a441f8f910 R08: 0000000000000000 R09: 0000000000000000 [ 705.880581][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a441fa4830 [ 705.888624][ T29] R13: 000055a441fa7410 R14: 0000000000000000 R15: 000055a441fa4830 [ 705.896799][ T29] [ 705.899852][ T29] INFO: task udevd:6549 blocked for more than 146 seconds. [ 705.915884][ T29] Not tainted syzkaller #0 [ 705.922989][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 705.931777][ T29] task:udevd state:D stack:25864 pid:6549 ppid:5136 flags:0x00004006 [ 705.941139][ T29] Call Trace: [ 705.946113][ T29] [ 705.949098][ T29] __schedule+0x14d2/0x44d0 [ 705.954721][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 705.961090][ T29] ? asan.module_dtor+0x20/0x20 [ 705.968175][ T29] ? mark_lock+0x94/0x320 [ 705.976040][ T29] ? lock_chain_count+0x20/0x20 [ 705.980923][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 705.986071][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 705.991503][ T29] schedule+0xbd/0x170 [ 706.006462][ T29] io_schedule+0x80/0xd0 [ 706.010840][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 706.016486][ T29] ? folio_wait_bit+0x30/0x30 [ 706.021198][ T29] ? _compound_head+0x120/0x120 [ 706.027247][ T29] ? filemap_add_folio+0x192/0x3c0 [ 706.035058][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 706.045898][ T29] ? blkdev_writepage+0x30/0x30 [ 706.050806][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 706.059098][ T29] ? blkdev_writepage+0x30/0x30 [ 706.064040][ T29] read_part_sector+0xd2/0x350 [ 706.069428][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 706.074846][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 706.080356][ T29] ? put_partition+0x350/0x350 [ 706.085156][ T29] ? alloc_pages+0x4dc/0x740 [ 706.089851][ T29] bdev_disk_changed+0x73a/0x1410 [ 706.094927][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 706.100412][ T29] ? iput+0x347/0x920 [ 706.104439][ T29] blkdev_get_whole+0x30d/0x390 [ 706.109375][ T29] blkdev_get_by_dev+0x279/0x600 [ 706.114338][ T29] blkdev_open+0x152/0x360 [ 706.118932][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 706.123546][ T29] do_dentry_open+0x8c6/0x1500 [ 706.128391][ T29] path_openat+0x274b/0x3190 [ 706.133024][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 706.138105][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.144193][ T29] ? verify_lock_unused+0x140/0x140 [ 706.149893][ T29] ? do_filp_open+0x3d0/0x3d0 [ 706.154637][ T29] ? __virt_addr_valid+0x18c/0x540 [ 706.160098][ T29] do_filp_open+0x1c5/0x3d0 [ 706.164638][ T29] ? vfs_tmpfile+0x490/0x490 [ 706.169338][ T29] ? _raw_spin_unlock+0x28/0x40 [ 706.174223][ T29] ? alloc_fd+0x58f/0x630 [ 706.178907][ T7986] block nbd6: Possible stuck request ffff888021a60000: control (read@0,1024B). Runtime 450 seconds [ 706.178933][ T29] do_sys_openat2+0x12c/0x1c0 [ 706.190038][ T7986] block nbd6: Possible stuck request ffff888021a60200: control (read@1024,1024B). Runtime 450 seconds [ 706.194310][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 706.194345][ T29] ? do_sys_open+0xe0/0xe0 [ 706.206592][ T7986] block nbd6: Possible stuck request ffff888021a60400: control (read@2048,1024B). Runtime 450 seconds [ 706.211178][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 706.215596][ T7986] block nbd6: Possible stuck request ffff888021a60600: control (read@3072,1024B). Runtime 450 seconds [ 706.235201][ T29] ? lock_chain_count+0x20/0x20 [ 706.248708][ T29] __x64_sys_openat+0x139/0x160 [ 706.253599][ T29] do_syscall_64+0x55/0xb0 [ 706.258402][ T29] ? clear_bhb_loop+0x40/0x90 [ 706.263129][ T29] ? clear_bhb_loop+0x40/0x90 [ 706.268322][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.274267][ T29] RIP: 0033:0x7f86d84a7407 [ 706.279141][ T29] RSP: 002b:00007fff53d55690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 706.287909][ T29] RAX: ffffffffffffffda RBX: 00007f86d8b83880 RCX: 00007f86d84a7407 [ 706.296017][ T29] RDX: 00000000000a0800 RSI: 000055a441f90480 RDI: ffffffffffffff9c [ 706.304015][ T29] RBP: 000055a441f8f910 R08: 0000000000000000 R09: 0000000000000000 [ 706.312105][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a441fa3ba0 [ 706.320207][ T29] R13: 000055a441fa7410 R14: 0000000000000000 R15: 000055a441fa3ba0 [ 706.328421][ T29] [ 706.331556][ T29] INFO: task udevd:6550 blocked for more than 147 seconds. [ 706.338871][ T29] Not tainted syzkaller #0 [ 706.343821][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 706.352849][ T29] task:udevd state:D stack:24968 pid:6550 ppid:5136 flags:0x00004006 [ 706.362732][ T29] Call Trace: [ 706.366463][ T29] [ 706.369452][ T29] __schedule+0x14d2/0x44d0 [ 706.373998][ T29] ? asan.module_dtor+0x20/0x20 [ 706.378991][ T29] ? mark_lock+0x94/0x320 [ 706.383356][ T29] ? lock_chain_count+0x20/0x20 [ 706.388671][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 706.393772][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 706.399277][ T29] schedule+0xbd/0x170 [ 706.403377][ T29] io_schedule+0x80/0xd0 [ 706.407742][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 706.413074][ T29] ? folio_wait_bit+0x30/0x30 [ 706.417814][ T29] ? _compound_head+0x120/0x120 [ 706.422710][ T29] ? filemap_add_folio+0x192/0x3c0 [ 706.427985][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 706.433290][ T29] ? blkdev_writepage+0x30/0x30 [ 706.438227][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 706.443358][ T29] ? blkdev_writepage+0x30/0x30 [ 706.448323][ T29] read_part_sector+0xd2/0x350 [ 706.453122][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 706.458585][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 706.463907][ T29] ? put_partition+0x350/0x350 [ 706.468859][ T29] ? alloc_pages+0x4dc/0x740 [ 706.473482][ T29] bdev_disk_changed+0x73a/0x1410 [ 706.478728][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 706.484041][ T29] ? iput+0x347/0x920 [ 706.488138][ T29] blkdev_get_whole+0x30d/0x390 [ 706.493009][ T29] blkdev_get_by_dev+0x279/0x600 [ 706.498024][ T29] blkdev_open+0x152/0x360 [ 706.502478][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 706.507250][ T29] do_dentry_open+0x8c6/0x1500 [ 706.512097][ T29] path_openat+0x274b/0x3190 [ 706.516853][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 706.521907][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.528098][ T29] ? verify_lock_unused+0x140/0x140 [ 706.533320][ T29] ? do_filp_open+0x3d0/0x3d0 [ 706.538062][ T29] ? __virt_addr_valid+0x18c/0x540 [ 706.543200][ T29] do_filp_open+0x1c5/0x3d0 [ 706.547855][ T29] ? vfs_tmpfile+0x490/0x490 [ 706.552493][ T29] ? _raw_spin_unlock+0x28/0x40 [ 706.557448][ T29] ? alloc_fd+0x58f/0x630 [ 706.561811][ T29] do_sys_openat2+0x12c/0x1c0 [ 706.566604][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 706.572444][ T29] ? do_sys_open+0xe0/0xe0 [ 706.579141][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 706.585201][ T29] ? lock_chain_count+0x20/0x20 [ 706.590445][ T29] __x64_sys_openat+0x139/0x160 [ 706.595354][ T29] do_syscall_64+0x55/0xb0 [ 706.599883][ T29] ? clear_bhb_loop+0x40/0x90 [ 706.604591][ T29] ? clear_bhb_loop+0x40/0x90 [ 706.609363][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.615276][ T29] RIP: 0033:0x7f86d84a7407 [ 706.619746][ T29] RSP: 002b:00007fff53d55690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 706.628279][ T29] RAX: ffffffffffffffda RBX: 00007f86d8b83880 RCX: 00007f86d84a7407 [ 706.636375][ T29] RDX: 00000000000a0800 RSI: 000055a441fafcd0 RDI: ffffffffffffff9c [ 706.644373][ T29] RBP: 000055a441f8f910 R08: 0000000000000000 R09: 0000000000000000 [ 706.652422][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a441fb8ed0 [ 706.660470][ T29] R13: 000055a441fa7410 R14: 0000000000000000 R15: 000055a441fb8ed0 [ 706.668576][ T29] [ 706.671648][ T29] INFO: task udevd:7247 blocked for more than 147 seconds. [ 706.679054][ T29] Not tainted syzkaller #0 [ 706.684005][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 706.692813][ T29] task:udevd state:D stack:24968 pid:7247 ppid:5136 flags:0x00004006 [ 706.702113][ T29] Call Trace: [ 706.705414][ T29] [ 706.708496][ T29] __schedule+0x14d2/0x44d0 [ 706.713046][ T29] ? asan.module_dtor+0x20/0x20 [ 706.718014][ T29] ? mark_lock+0x94/0x320 [ 706.722378][ T29] ? lock_chain_count+0x20/0x20 [ 706.727331][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 706.732396][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 706.737950][ T29] schedule+0xbd/0x170 [ 706.742065][ T29] io_schedule+0x80/0xd0 [ 706.746439][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 706.751787][ T29] ? folio_wait_bit+0x30/0x30 [ 706.756587][ T29] ? _compound_head+0x120/0x120 [ 706.761478][ T29] ? __filemap_get_folio+0x71/0xbc0 [ 706.766777][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 706.772088][ T29] ? blkdev_writepage+0x30/0x30 [ 706.777005][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 706.782142][ T29] ? blkdev_writepage+0x30/0x30 [ 706.787134][ T29] read_part_sector+0xd2/0x350 [ 706.791953][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 706.797515][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 706.802836][ T29] ? put_partition+0x350/0x350 [ 706.807744][ T29] ? alloc_pages+0x4dc/0x740 [ 706.812380][ T29] bdev_disk_changed+0x73a/0x1410 [ 706.817655][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 706.823012][ T29] ? iput+0x347/0x920 [ 706.827360][ T29] blkdev_get_whole+0x30d/0x390 [ 706.832280][ T29] blkdev_get_by_dev+0x279/0x600 [ 706.837384][ T29] blkdev_open+0x152/0x360 [ 706.841836][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 706.846499][ T29] do_dentry_open+0x8c6/0x1500 [ 706.851301][ T29] path_openat+0x274b/0x3190 [ 706.856016][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 706.861061][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.867193][ T29] ? verify_lock_unused+0x140/0x140 [ 706.872417][ T29] ? do_filp_open+0x3d0/0x3d0 [ 706.877218][ T29] ? __virt_addr_valid+0x18c/0x540 [ 706.882370][ T29] do_filp_open+0x1c5/0x3d0 [ 706.886977][ T29] ? vfs_tmpfile+0x490/0x490 [ 706.891650][ T29] ? _raw_spin_unlock+0x28/0x40 [ 706.896585][ T29] ? alloc_fd+0x58f/0x630 [ 706.900944][ T29] do_sys_openat2+0x12c/0x1c0 [ 706.905637][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 706.911577][ T29] ? do_sys_open+0xe0/0xe0 [ 706.916198][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 706.922210][ T29] ? lock_chain_count+0x20/0x20 [ 706.927132][ T29] __x64_sys_openat+0x139/0x160 [ 706.932028][ T29] do_syscall_64+0x55/0xb0 [ 706.936527][ T29] ? clear_bhb_loop+0x40/0x90 [ 706.941234][ T29] ? clear_bhb_loop+0x40/0x90 [ 706.946009][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.951932][ T29] RIP: 0033:0x7f86d84a7407 [ 706.956439][ T29] RSP: 002b:00007fff53d55690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 706.964881][ T29] RAX: ffffffffffffffda RBX: 00007f86d8b83880 RCX: 00007f86d84a7407 [ 706.972961][ T29] RDX: 00000000000a0800 RSI: 000055a441fa8f60 RDI: ffffffffffffff9c [ 706.981014][ T29] RBP: 000055a441f8f910 R08: 0000000000000000 R09: 0000000000000000 [ 706.989062][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a441fa2e20 [ 706.997141][ T29] R13: 000055a441fa7410 R14: 0000000000000000 R15: 000055a441fa2e20 [ 707.005148][ T29] [ 707.008279][ T29] [ 707.008279][ T29] Showing all locks held in the system: [ 707.016082][ T29] 1 lock held by khungtaskd/29: [ 707.020932][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 707.030944][ T29] 1 lock held by syslogd/5118: [ 707.035723][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 707.045882][ T29] 2 locks held by getty/5528: [ 707.050587][ T29] #0: ffff888030afa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 707.060422][ T29] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 707.070616][ T29] 1 lock held by udevd/5773: [ 707.075219][ T29] #0: ffff8881423574c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 707.085349][ T29] 1 lock held by udevd/5774: [ 707.090119][ T29] #0: ffff888021a204c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 707.100249][ T29] 1 lock held by udevd/5781: [ 707.104859][ T29] #0: ffff8880218384c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 707.114942][ T29] 1 lock held by udevd/5978: [ 707.119625][ T29] #0: ffff8880219034c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 707.129731][ T29] 1 lock held by udevd/6549: [ 707.134328][ T29] #0: ffff8880218234c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 707.144525][ T29] 1 lock held by udevd/6550: [ 707.149227][ T29] #0: ffff88802183d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 707.159348][ T29] 1 lock held by udevd/7247: [ 707.163968][ T29] #0: ffff888021a254c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 707.174035][ T29] [ 707.176409][ T29] ============================================= [ 707.176409][ T29] [ 707.184846][ T29] NMI backtrace for cpu 1 [ 707.189185][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 707.196398][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 707.206451][ T29] Call Trace: [ 707.209732][ T29] [ 707.212681][ T29] dump_stack_lvl+0x16c/0x230 [ 707.217387][ T29] ? show_regs_print_info+0x20/0x20 [ 707.222599][ T29] ? load_image+0x3b0/0x3b0 [ 707.227124][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 707.232076][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 707.238247][ T29] ? _printk+0xd0/0x110 [ 707.242417][ T29] ? load_image+0x3b0/0x3b0 [ 707.246933][ T29] ? load_image+0x3b0/0x3b0 [ 707.251444][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 707.257546][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 707.263536][ T29] watchdog+0xf41/0xf80 [ 707.267717][ T29] ? watchdog+0x1e1/0xf80 [ 707.272062][ T29] kthread+0x2fa/0x390 [ 707.276137][ T29] ? hungtask_pm_notify+0x90/0x90 [ 707.281167][ T29] ? kthread_blkcg+0xd0/0xd0 [ 707.285765][ T29] ret_from_fork+0x48/0x80 [ 707.290215][ T29] ? kthread_blkcg+0xd0/0xd0 [ 707.294802][ T29] ret_from_fork_asm+0x11/0x20 [ 707.299583][ T29] [ 707.302882][ T29] Sending NMI from CPU 1 to CPUs 0: [ 707.308154][ C0] NMI backtrace for cpu 0 [ 707.308164][ C0] CPU: 0 PID: 1123 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 707.308179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 707.308189][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 707.308212][ C0] RIP: 0010:kasan_check_range+0x1be/0x290 [ 707.308233][ C0] Code: 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 49 ff cc 75 ee 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 45 84 ff 75 61 41 f7 c7 00 ff 00 00 [ 707.308246][ C0] RSP: 0018:ffffc9000457f5f0 EFLAGS: 00000056 [ 707.308257][ C0] RAX: 0000000000000001 RBX: 0000000000000021 RCX: ffffffff81670461 [ 707.308268][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90d94500 [ 707.308277][ C0] RBP: ffffc9000457f868 R08: ffffffff90d94507 R09: 1ffffffff21b28a0 [ 707.308288][ C0] R10: dffffc0000000000 R11: fffffbfff21b28a1 R12: 0000000000000001 [ 707.308299][ C0] R13: ffff888023800000 R14: fffffbfff21b28a1 R15: 1ffffffff21b28a0 [ 707.308310][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 707.308322][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 707.308333][ C0] CR2: 00007f37af5b42f8 CR3: 000000001cbed000 CR4: 00000000003506f0 [ 707.308346][ C0] Call Trace: [ 707.308351][ C0] [ 707.308358][ C0] __lock_acquire+0x611/0x7c80 [ 707.308375][ C0] ? kasan_set_track+0x5f/0x70 [ 707.308390][ C0] ? slab_free_freelist_hook+0x130/0x1b0 [ 707.308414][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 707.308434][ C0] ? process_scheduled_works+0xa45/0x15b0 [ 707.308460][ C0] ? verify_lock_unused+0x140/0x140 [ 707.308475][ C0] ? mark_lock+0x94/0x320 [ 707.308493][ C0] ? mark_lock+0x94/0x320 [ 707.308509][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 707.308527][ C0] ? lock_chain_count+0x20/0x20 [ 707.308543][ C0] lock_acquire+0x197/0x410 [ 707.308558][ C0] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 707.308578][ C0] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 707.308595][ C0] ? read_lock_is_recursive+0x20/0x20 [ 707.308611][ C0] ? batadv_tvlv_container_ogm_append+0x463/0x4e0 [ 707.308637][ C0] ? batadv_tvlv_container_ogm_append+0x463/0x4e0 [ 707.308663][ C0] batadv_iv_ogm_schedule+0x417/0xe90 [ 707.308679][ C0] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 707.308701][ C0] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 707.308718][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 707.308741][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x731/0x840 [ 707.308764][ C0] ? process_scheduled_works+0x957/0x15b0 [ 707.308782][ C0] ? process_scheduled_works+0x957/0x15b0 [ 707.308800][ C0] process_scheduled_works+0xa45/0x15b0 [ 707.308835][ C0] ? assign_work+0x400/0x400 [ 707.308854][ C0] ? assign_work+0x39e/0x400 [ 707.308873][ C0] worker_thread+0xa55/0xfc0 [ 707.308900][ C0] kthread+0x2fa/0x390 [ 707.308913][ C0] ? pr_cont_work+0x560/0x560 [ 707.308930][ C0] ? kthread_blkcg+0xd0/0xd0 [ 707.308943][ C0] ret_from_fork+0x48/0x80 [ 707.308960][ C0] ? kthread_blkcg+0xd0/0xd0 [ 707.308973][ C0] ret_from_fork_asm+0x11/0x20 [ 707.308999][ C0] [ 707.309245][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 707.622244][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 707.629448][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 707.639504][ T29] Call Trace: [ 707.642788][ T29] [ 707.645725][ T29] dump_stack_lvl+0x16c/0x230 [ 707.650429][ T29] ? show_regs_print_info+0x20/0x20 [ 707.655637][ T29] ? load_image+0x3b0/0x3b0 [ 707.660178][ T29] panic+0x2c0/0x710 [ 707.664099][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 707.669740][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 707.674244][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 707.679792][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 707.685980][ T29] watchdog+0xf80/0xf80 [ 707.690143][ T29] ? watchdog+0x1e1/0xf80 [ 707.694477][ T29] kthread+0x2fa/0x390 [ 707.698543][ T29] ? hungtask_pm_notify+0x90/0x90 [ 707.703572][ T29] ? kthread_blkcg+0xd0/0xd0 [ 707.708163][ T29] ret_from_fork+0x48/0x80 [ 707.712602][ T29] ? kthread_blkcg+0xd0/0xd0 [ 707.717199][ T29] ret_from_fork_asm+0x11/0x20 [ 707.721979][ T29] [ 707.725355][ T29] Kernel Offset: disabled [ 707.729697][ T29] Rebooting in 86400 seconds..