last executing test programs: 8.326564365s ago: executing program 2 (id=1971): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef000000000000000008"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 8.288259265s ago: executing program 3 (id=1972): r0 = socket(0x1a, 0x5, 0xffffffff) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r3, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r4 = socket(0x1, 0x803, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)={0x2c, 0x35, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @nested={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x47, 0x0, 0x1, [@typed={0x8, 0x15c, 0x0, 0x0, @pid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) fsetxattr$security_ima(r8, &(0x7f0000000080), &(0x7f0000000180)=@md5={0x1, "5ebda7bec346cf7893dbb258d5567cf4"}, 0x11, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) ioctl$KVM_RUN(r11, 0xae80, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=r12], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r1, @ANYBLOB="00000000011200000a000100aaaaaaaaaaaa0000"], 0x2c}}, 0x0) 8.033335698s ago: executing program 3 (id=1973): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x1, 0x0, {0x4006, 0x5, 0x0, 0x6, 0x3, 0x0, 0x0, 0xfffffbff, 0x10, 0x6000, 0x2, r2, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180) pwrite64(r3, 0x0, 0x0, 0xf28) 6.648813023s ago: executing program 2 (id=1976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80482, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x4, &(0x7f0000000240)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.648633093s ago: executing program 3 (id=1977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 6.157633489s ago: executing program 0 (id=1978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 5.747892824s ago: executing program 3 (id=1979): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000ad6000/0x4000)=nil, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x1}) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000000066fb905c25afa254e7c14f3d4664f1c997769c920e7344d0aa674919e5103240c003bd087904c560f7e650e41e0ba7db0825cde851e4711ef4e2b726160e829cd2647d65585b406d4d78bc8eeb9838ce3db9ca9880888a90b1acef9ae5b8f292d915a2c1263c5fd2da1a6bc91196d21d3cf9e702a2f82c914fc3ce1e40fa0168289e5130e0a164362eabcfd00aa558e4efeaefb5fd9ce16d034d", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.382445218s ago: executing program 0 (id=1980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6, 0xfffffffd}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 5.122803791s ago: executing program 2 (id=1982): bpf$PROG_LOAD(0x88, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 5.078804251s ago: executing program 1 (id=1983): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0x170001, 0x10a000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e40, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000001c0)=0x1, 0x4) futex_waitv(0x0, 0x55, 0x0, 0x0, 0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r2, 0x5501) 5.078216022s ago: executing program 0 (id=1984): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef000000000000000008"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 3.987227804s ago: executing program 1 (id=1985): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x1, 0x0, {0x4006, 0x5, 0x0, 0x6, 0x3, 0x0, 0x0, 0xfffffbff, 0x10, 0x6000, 0x2, r2, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180) pwrite64(r3, 0x0, 0x0, 0xf28) 3.035612645s ago: executing program 1 (id=1986): mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0/file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x91) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x49b, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000280)={[{@redirect_dir_off}], [{@appraise}], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[], 0x1c}}, 0x800) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="32000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202"], 0x2f) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 3.033732545s ago: executing program 2 (id=1987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 2.142459325s ago: executing program 0 (id=1988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1.66085033s ago: executing program 2 (id=1989): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) recvfrom$llc(r0, &(0x7f0000000340)=""/203, 0xcb, 0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000000100), &(0x7f0000000200)=""/4096, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) 1.539862712s ago: executing program 1 (id=1990): socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x1) bind$inet6(r1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 1.343331604s ago: executing program 0 (id=1991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80482, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000240)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.085803847s ago: executing program 3 (id=1992): unshare(0x2020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000c00)={r0, 0x0, 0x20000000}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 492.367184ms ago: executing program 1 (id=1993): getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 317.219476ms ago: executing program 0 (id=1994): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x1, 0x0, {0x4006, 0x5, 0x0, 0x6, 0x3, 0x0, 0x0, 0xfffffbff, 0x10, 0x6000, 0x2, r2, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180) pwrite64(r3, 0x0, 0x0, 0xf28) 150.247618ms ago: executing program 3 (id=1995): mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0/file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x91) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x49b, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000280)={[{@redirect_dir_off}], [{@appraise}], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[], 0x1c}}, 0x800) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="32000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201"], 0x2f) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 92.473879ms ago: executing program 2 (id=1996): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef000000000000000008"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 0s ago: executing program 1 (id=1997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) kernel console output (not intermixed with test programs): umber 19 using dummy_hcd [ 441.071508][ T5782] usb 2-1: Using ep0 maxpacket: 8 [ 441.078124][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.088422][ T5782] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 441.097405][ T5782] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 441.108600][ T5782] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 441.120075][ T5782] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 441.129334][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.142426][ T5782] hub 2-1:1.0: bad descriptor, ignoring hub [ 441.148712][ T5782] hub: probe of 2-1:1.0 failed with error -5 [ 441.155924][ T5782] cdc_wdm 2-1:1.0: skipping garbage [ 441.161557][ T5782] cdc_wdm 2-1:1.0: skipping garbage [ 441.168773][ T5782] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 441.175179][ T5782] cdc_wdm 2-1:1.0: Unknown control protocol [ 441.397247][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.407128][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.424790][ T8870] netlink: 'syz.3.855': attribute type 1 has an invalid length. [ 441.446683][ T8870] bond4: entered promiscuous mode [ 441.452770][ T8870] 8021q: adding VLAN 0 to HW filter on device bond4 [ 441.491719][ T8870] bond4: (slave bridge4): making interface the new active one [ 441.499493][ T8870] bridge4: entered promiscuous mode [ 441.505663][ T8870] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 441.522255][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 441.547685][ T8870] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 441.560307][ T8870] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 441.601430][ T5778] Bluetooth: hci0: command 0x0c1a tx timeout [ 441.711816][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 441.718820][ T9] usb 3-1: config 0 has no interfaces? [ 441.725676][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 441.734992][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 441.743100][ T9] usb 3-1: Manufacturer: syz [ 441.749624][ T9] usb 3-1: config 0 descriptor?? [ 441.903523][ T8865] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 442.001414][ T5778] Bluetooth: hci2: command 0x0c1a tx timeout [ 442.001651][ T8842] Bluetooth: hci3: command 0x0c1a tx timeout [ 442.337339][ T8873] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 442.357764][ T8873] bond2: entered promiscuous mode [ 442.364394][ T8873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.400054][ T8873] bond2: (slave bridge2): making interface the new active one [ 442.407682][ T8873] bridge2: entered promiscuous mode [ 442.413757][ T8873] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 442.440138][ T5812] usb 2-1: USB disconnect, device number 19 [ 442.448361][ T8873] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 442.461673][ T8873] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 442.961121][ T8878] (null): rxe_set_mtu: Set mtu to 1024 [ 443.084636][ T8878] infiniband syz1: set active [ 443.092521][ T8878] infiniband syz1: added bond0 [ 443.169612][ T8878] RDS/IB: syz1: added [ 443.179503][ T8878] smc: adding ib device syz1 with port count 1 [ 443.186964][ T8878] smc: ib device syz1 port 1 has pnetid [ 443.326589][ T5851] usb 4-1: USB disconnect, device number 23 [ 443.515323][ T8893] fuse: Bad value for 'fd' [ 444.266425][ T23] usb 3-1: USB disconnect, device number 18 [ 444.467798][ T5776] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 444.525936][ T8904] block nbd0: server does not support multiple connections per device. [ 444.535065][ T8904] block nbd0: shutting down sockets [ 446.461426][ T5776] usb 4-1: Using ep0 maxpacket: 8 [ 446.479300][ T5776] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.511981][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'. [ 446.520905][ T5776] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 446.530183][ T5776] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 446.545947][ T5776] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 446.557541][ T5776] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 446.566891][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.588466][ T5776] hub 4-1:1.0: bad descriptor, ignoring hub [ 446.609475][ T5776] hub: probe of 4-1:1.0 failed with error -5 [ 446.634836][ T5776] cdc_wdm 4-1:1.0: skipping garbage [ 446.659435][ T5776] cdc_wdm 4-1:1.0: skipping garbage [ 446.674710][ T5776] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 446.687645][ T5776] cdc_wdm 4-1:1.0: Unknown control protocol [ 447.513960][ T8929] fuse: Bad value for 'fd' [ 448.151628][ T8908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 448.157859][ T8908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 448.166267][ T8908] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 448.172627][ T8908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 448.277678][ T8940] (null): rxe_set_mtu: Set mtu to 1024 [ 448.283748][ T8940] rdma_rxe: rxe_newlink: failed to add bond0 [ 448.325581][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 448.522166][ T23] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 448.641794][ T8842] Bluetooth: hci1: command 0x0c1a tx timeout [ 448.785102][ T23] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 448.807430][ T23] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 448.823057][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 448.832787][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 448.846420][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 448.856948][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 448.867180][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 448.916496][ T23] usb 3-1: string descriptor 0 read error: -22 [ 448.926880][ T23] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 448.937338][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.358088][ T23] usb 3-1: config 0 descriptor?? [ 449.371349][ T23] hub 3-1:0.0: bad descriptor, ignoring hub [ 449.377413][ T23] hub: probe of 3-1:0.0 failed with error -5 [ 449.388970][ T23] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input41 [ 450.173041][ T8842] Bluetooth: hci0: command 0x0c1a tx timeout [ 450.267721][ T8842] Bluetooth: hci2: command 0x0c1a tx timeout [ 450.273815][ T5778] Bluetooth: hci3: command 0x0c1a tx timeout [ 450.467033][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.477122][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.611512][ T5895] block nbd3: Possible stuck request ffff888022074c00: control (read@0,1024B). Runtime 210 seconds [ 450.622407][ T5895] block nbd3: Possible stuck request ffff888022074e00: control (read@1024,1024B). Runtime 210 seconds [ 450.633518][ T5895] block nbd3: Possible stuck request ffff888022075000: control (read@2048,1024B). Runtime 210 seconds [ 450.644676][ T5895] block nbd3: Possible stuck request ffff888022075200: control (read@3072,1024B). Runtime 210 seconds [ 450.741590][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 451.854537][ T8973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.197759][ T8971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.671589][ T8] usb 3-1: USB disconnect, device number 19 [ 453.017009][ T5776] usb 4-1: USB disconnect, device number 24 [ 453.150534][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 453.241483][ T5782] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 453.418451][ T8988] fuse: Bad value for 'fd' [ 453.451530][ T5782] usb 2-1: Using ep0 maxpacket: 16 [ 453.459080][ T5782] usb 2-1: config 0 has no interfaces? [ 453.466423][ T5782] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 453.475836][ T5782] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 453.483939][ T5782] usb 2-1: Manufacturer: syz [ 453.490495][ T5782] usb 2-1: config 0 descriptor?? [ 454.063280][ T8989] netlink: 'syz.1.892': attribute type 1 has an invalid length. [ 454.082561][ T8989] bond3: entered promiscuous mode [ 454.087931][ T8989] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.281368][ T8980] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 455.281407][ T5778] Bluetooth: hci1: command 0x0c1a tx timeout [ 455.729177][ T8980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 455.735685][ T8980] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 455.742120][ T8980] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 455.969119][ T8] usb 2-1: USB disconnect, device number 20 [ 456.013855][ T9006] overlayfs: missing 'workdir' [ 456.240716][ T9009] netlink: 52 bytes leftover after parsing attributes in process `syz.2.898'. [ 457.295337][ T9031] syzkaller0: entered promiscuous mode [ 457.300870][ T9031] syzkaller0: entered allmulticast mode [ 457.346552][ T9036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.908'. [ 457.365831][ T5778] Bluetooth: hci0: command 0x0c1a tx timeout [ 457.367541][ T9037] fuse: Bad value for 'fd' [ 457.507821][ T9042] fuse: Bad value for 'fd' [ 457.521393][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 457.721361][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 457.747764][ T23] usb 3-1: config 0 has no interfaces? [ 457.771601][ T5778] Bluetooth: hci2: command 0x0c1a tx timeout [ 457.774769][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 457.777829][ T8842] Bluetooth: hci3: command 0x0c1a tx timeout [ 457.787083][ T23] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 457.801654][ T23] usb 3-1: Manufacturer: syz [ 457.818712][ T23] usb 3-1: config 0 descriptor?? [ 459.611362][ T5776] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 459.791434][ T5776] usb 4-1: Using ep0 maxpacket: 8 [ 459.798123][ T5776] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.808545][ T5776] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 459.817523][ T5776] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 459.828930][ T5776] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 459.840323][ T5776] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 459.849848][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.865161][ T5776] hub 4-1:1.0: bad descriptor, ignoring hub [ 459.871108][ T5776] hub: probe of 4-1:1.0 failed with error -5 [ 459.880977][ T5776] cdc_wdm 4-1:1.0: skipping garbage [ 459.886435][ T5776] cdc_wdm 4-1:1.0: skipping garbage [ 459.893307][ T5776] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 459.899253][ T5776] cdc_wdm 4-1:1.0: Unknown control protocol [ 460.086901][ T9064] loop4: detected capacity change from 0 to 7 [ 460.296891][ C1] blk_print_req_error: 2 callbacks suppressed [ 460.296910][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 460.331771][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.341008][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 460.353041][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.362271][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 460.373301][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.382523][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 460.393865][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.403104][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 460.431989][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 460.441285][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 460.947948][ T5776] usb 3-1: USB disconnect, device number 20 [ 461.041240][ T9074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.918'. [ 461.560701][ T9052] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 463.623706][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 463.860997][ T9076] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 463.867277][ T9076] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 463.873453][ T9076] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 463.879531][ T9076] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 463.902076][ T9092] fuse: Bad value for 'fd' [ 464.222952][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 464.343030][ T9100] loop4: detected capacity change from 0 to 7 [ 464.399499][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 464.412600][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.422091][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 464.433271][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.442688][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 464.458714][ T9089] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 464.467441][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.476693][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 464.488267][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 464.503113][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 465.083367][ T9089] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 465.089538][ T9089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 465.095851][ T9089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 465.363707][ T9109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.929'. [ 466.241353][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 466.801653][ T9052] usb 4-1: can't restore configuration #1 (error=-110) [ 466.810728][ T8] usb 4-1: USB disconnect, device number 25 [ 466.822696][ T9052] cdc_wdm 4-1:1.0: Error autopm - -16 [ 467.121729][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 467.121748][ T5778] Bluetooth: hci2: command 0x0c1a tx timeout [ 467.121785][ T5778] Bluetooth: hci0: command 0x0c1a tx timeout [ 467.442818][ T9136] loop4: detected capacity change from 0 to 7 [ 468.253634][ C0] blk_print_req_error: 2 callbacks suppressed [ 468.253646][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 468.281333][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.290631][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 468.301638][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.311743][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 468.322270][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.331552][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 468.391329][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.400613][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 468.409612][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.418951][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 468.492606][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 469.771443][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 469.942675][ T9158] fuse: Bad value for 'fd' [ 470.025023][ T9157] netlink: 120 bytes leftover after parsing attributes in process `syz.3.945'. [ 470.975229][ T9134] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 470.981462][ T9134] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 470.987462][ T9134] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 470.993601][ T9134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 472.495581][ T9169] block nbd0: shutting down sockets [ 472.510067][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 472.520179][ T9168] loop4: detected capacity change from 0 to 7 [ 472.563042][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 472.578162][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.587458][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 472.596095][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.605306][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 472.615883][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.625110][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 472.633787][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 472.644262][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 472.731348][ T9174] syzkaller0: entered promiscuous mode [ 472.737932][ T9174] syzkaller0: entered allmulticast mode [ 472.991518][ T5782] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 473.000182][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 473.043062][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 473.049195][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 473.055848][ T8842] Bluetooth: hci3: command 0x0c1a tx timeout [ 473.191479][ T5782] usb 4-1: Using ep0 maxpacket: 16 [ 473.213077][ T5782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 473.259185][ T5782] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 473.271624][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.299767][ T5782] usb 4-1: Product: syz [ 473.313798][ T5782] usb 4-1: Manufacturer: syz [ 473.329772][ T5782] usb 4-1: SerialNumber: syz [ 473.357623][ T5782] usb 4-1: config 0 descriptor?? [ 473.387510][ T5782] hub 4-1:0.0: bad descriptor, ignoring hub [ 473.414838][ T5782] hub: probe of 4-1:0.0 failed with error -5 [ 473.459642][ T5782] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 473.591740][ T9194] block nbd0: server does not support multiple connections per device. [ 473.602206][ T9194] block nbd0: shutting down sockets [ 474.292780][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 474.477640][ T9203] netlink: 120 bytes leftover after parsing attributes in process `syz.2.956'. [ 475.059315][ T9211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.892823][ T9209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.331101][ T5811] usb 4-1: USB disconnect, device number 27 [ 476.910367][ T9218] loop4: detected capacity change from 0 to 7 [ 477.008294][ C1] blk_print_req_error: 2 callbacks suppressed [ 477.008313][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 477.037549][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 477.046752][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 477.307194][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 477.316393][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 477.333110][ T9219] syzkaller0: entered promiscuous mode [ 477.340935][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 477.350109][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 477.368879][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 477.378065][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 477.392075][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 477.401331][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 477.409195][ T9219] syzkaller0: entered allmulticast mode [ 477.761326][ T9229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.591780][ T9225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.669971][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 480.158578][ T9250] loop4: detected capacity change from 0 to 7 [ 480.233753][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.244467][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.253713][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 480.268409][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.277787][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 480.291463][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.300702][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 480.313744][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 480.323608][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 481.062043][ T5895] block nbd3: Possible stuck request ffff888022074c00: control (read@0,1024B). Runtime 240 seconds [ 481.073006][ T5895] block nbd3: Possible stuck request ffff888022074e00: control (read@1024,1024B). Runtime 240 seconds [ 481.084589][ T5895] block nbd3: Possible stuck request ffff888022075000: control (read@2048,1024B). Runtime 240 seconds [ 481.101385][ T5895] block nbd3: Possible stuck request ffff888022075200: control (read@3072,1024B). Runtime 240 seconds [ 481.157933][ T9256] syzkaller0: entered promiscuous mode [ 481.172607][ T9256] syzkaller0: entered allmulticast mode [ 481.571923][ T9269] block nbd0: server does not support multiple connections per device. [ 481.584345][ T9269] block nbd0: shutting down sockets [ 483.443654][ T9303] loop4: detected capacity change from 0 to 7 [ 483.536721][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 483.609780][ C0] blk_print_req_error: 2 callbacks suppressed [ 483.609801][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 483.618164][ T9301] syzkaller0: entered promiscuous mode [ 483.632482][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.641498][ T9301] syzkaller0: entered allmulticast mode [ 483.641776][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.666188][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.675559][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.687186][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.696624][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.708188][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.717455][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.728195][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.737446][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 484.368349][ T9309] loop4: detected capacity change from 0 to 7 [ 484.416698][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 484.428450][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 484.437788][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 484.452815][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 484.462082][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 484.470695][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 484.479920][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 484.494331][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 484.503404][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 486.191056][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 487.133501][ T9369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.155447][ T9368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.273342][ T9373] loop4: detected capacity change from 0 to 7 [ 488.550585][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 488.573131][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 488.814570][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 488.967279][ T9397] Bluetooth: MGMT ver 1.22 [ 490.561366][ T9387] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 490.567775][ T8842] Bluetooth: hci1: command 0x0c1a tx timeout [ 490.840547][ T9418] loop4: detected capacity change from 0 to 7 [ 490.865080][ C1] blk_print_req_error: 8 callbacks suppressed [ 490.865094][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 490.881403][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.890551][ C1] buffer_io_error: 5 callbacks suppressed [ 490.890558][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 490.905087][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.914234][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 490.922894][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.932147][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 490.940556][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.949911][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 490.958363][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.967540][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 491.041667][ T8842] Bluetooth: hci2: command 0x0c1a tx timeout [ 491.342332][ T9387] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 491.348454][ T9387] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 491.354522][ T9387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.628058][ T9426] syzkaller0: entered promiscuous mode [ 491.633880][ T9426] syzkaller0: entered allmulticast mode [ 492.461398][ T5776] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 492.520240][ T9442] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1028'. [ 492.550693][ T9442] fuse: Bad value for 'fd' [ 492.566002][ T9444] syzkaller0: entered promiscuous mode [ 492.572685][ T9444] syzkaller0: entered allmulticast mode [ 492.641440][ T8842] Bluetooth: hci0: command 0x0c1a tx timeout [ 492.672873][ T5776] usb 4-1: Using ep0 maxpacket: 16 [ 492.692874][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 492.716815][ T5776] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 492.730130][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.741493][ T5776] usb 4-1: Product: syz [ 492.747592][ T5776] usb 4-1: Manufacturer: syz [ 492.752612][ T5776] usb 4-1: SerialNumber: syz [ 492.759664][ T5776] usb 4-1: config 0 descriptor?? [ 492.776017][ T5776] hub 4-1:0.0: bad descriptor, ignoring hub [ 492.782127][ T5776] hub: probe of 4-1:0.0 failed with error -5 [ 492.795507][ T5776] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 492.934875][ T9450] loop4: detected capacity change from 0 to 7 [ 492.973456][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 492.991334][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.000574][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 493.009145][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.018379][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 493.032055][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.041317][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 493.050306][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 493.059493][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 493.393357][ T8842] Bluetooth: hci3: command 0x0c1a tx timeout [ 493.399588][ T8842] Bluetooth: hci2: command 0x0c1a tx timeout [ 495.166253][ T5776] usb 4-1: USB disconnect, device number 28 [ 495.296912][ T9477] syzkaller0: entered promiscuous mode [ 495.302976][ T9477] syzkaller0: entered allmulticast mode [ 495.310644][ T9473] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1038'. [ 495.326388][ T9473] fuse: Bad value for 'fd' [ 498.100709][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 498.196443][ T9504] loop4: detected capacity change from 0 to 7 [ 498.242941][ C0] blk_print_req_error: 2 callbacks suppressed [ 498.242952][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 498.260685][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 498.269914][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 498.280106][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 498.289386][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 498.298584][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 498.307788][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 498.316405][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 498.325965][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 498.335112][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 498.344354][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 498.531416][ T5782] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 498.711462][ T5782] usb 4-1: Using ep0 maxpacket: 16 [ 498.719149][ T5782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 498.732283][ T5782] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 498.742242][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.750418][ T5782] usb 4-1: Product: syz [ 498.754990][ T5782] usb 4-1: Manufacturer: syz [ 498.759646][ T5782] usb 4-1: SerialNumber: syz [ 498.774220][ T5782] usb 4-1: config 0 descriptor?? [ 498.782499][ T5782] hub 4-1:0.0: bad descriptor, ignoring hub [ 498.788517][ T5782] hub: probe of 4-1:0.0 failed with error -5 [ 498.797114][ T5782] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 498.814202][ T5782] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 498.844910][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.139594][ T9521] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1052'. [ 499.140014][ T9523] syzkaller0: entered promiscuous mode [ 499.165522][ T9523] syzkaller0: entered allmulticast mode [ 499.187057][ T9521] fuse: Bad value for 'fd' [ 500.181587][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 500.321502][ T9541] loop4: detected capacity change from 0 to 7 [ 500.332128][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 500.352837][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.362062][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 500.415419][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 500.425174][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.434491][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 500.443114][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 500.451829][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 500.460338][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 500.762104][ T9546] fuse: Bad value for 'fd' [ 500.891803][ T9550] syzkaller0: entered promiscuous mode [ 500.897335][ T9550] syzkaller0: entered allmulticast mode [ 501.332298][ T5812] usb 4-1: USB disconnect, device number 29 [ 502.392868][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.399231][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.121977][ T9581] block nbd0: server does not support multiple connections per device. [ 504.131871][ T9581] block nbd0: shutting down sockets [ 504.760896][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 505.072325][ T9588] fuse: Bad value for 'fd' [ 508.005753][ T9608] syzkaller0: entered promiscuous mode [ 508.011481][ T9608] syzkaller0: entered allmulticast mode [ 511.879423][ T5895] block nbd3: Possible stuck request ffff888022074c00: control (read@0,1024B). Runtime 270 seconds [ 511.890348][ T5895] block nbd3: Possible stuck request ffff888022074e00: control (read@1024,1024B). Runtime 270 seconds [ 511.901527][ T5895] block nbd3: Possible stuck request ffff888022075000: control (read@2048,1024B). Runtime 270 seconds [ 511.912633][ T5895] block nbd3: Possible stuck request ffff888022075200: control (read@3072,1024B). Runtime 270 seconds [ 512.244948][ T9638] syzkaller0: entered promiscuous mode [ 512.251351][ T9638] syzkaller0: entered allmulticast mode [ 513.406369][ T9649] syzkaller0: entered promiscuous mode [ 513.414430][ T9649] syzkaller0: entered allmulticast mode [ 513.495250][ T9651] syzkaller0: entered promiscuous mode [ 513.513584][ T9651] syzkaller0: entered allmulticast mode [ 514.959108][ T9669] block nbd0: server does not support multiple connections per device. [ 514.969521][ T9669] block nbd0: shutting down sockets [ 516.121450][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 516.321380][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 516.329708][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 516.341363][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 516.356032][ T8] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 516.365266][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.373797][ T8] usb 2-1: Product: syz [ 516.378014][ T8] usb 2-1: Manufacturer: syz [ 516.384037][ T8] usb 2-1: SerialNumber: syz [ 516.391002][ T8] usb 2-1: config 0 descriptor?? [ 516.400774][ T8] hub 2-1:0.0: bad descriptor, ignoring hub [ 516.406795][ T8] hub: probe of 2-1:0.0 failed with error -5 [ 516.415267][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 516.468793][ T8] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 516.531021][ T6646] udevd[6646]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.540300][ T9699] fuse: Bad value for 'fd' [ 519.545229][ T8] usb 2-1: USB disconnect, device number 21 [ 520.049817][ T9708] syzkaller0: entered promiscuous mode [ 520.068470][ T9708] syzkaller0: entered allmulticast mode [ 522.471779][ T9721] block nbd0: server does not support multiple connections per device. [ 522.481845][ T9721] block nbd0: shutting down sockets [ 523.174500][ T9728] fuse: Bad value for 'fd' [ 524.402105][ T9755] input: syz1 as /devices/virtual/input/input43 [ 525.469765][ T9760] syzkaller0: entered promiscuous mode [ 525.476945][ T9760] syzkaller0: entered allmulticast mode [ 526.314433][ T9766] fuse: Bad value for 'fd' [ 529.290263][ T9790] input: syz1 as /devices/virtual/input/input44 [ 529.321582][ T9784] block nbd0: shutting down sockets [ 531.175940][ T9815] (null): rxe_set_mtu: Set mtu to 1024 [ 531.188826][ T9815] rdma_rxe: rxe_newlink: failed to add bond0 [ 531.232073][ T9813] syzkaller0: entered promiscuous mode [ 531.252468][ T9813] syzkaller0: entered allmulticast mode [ 532.147491][ T9826] input: syz1 as /devices/virtual/input/input45 [ 533.138081][ T9830] fuse: Bad value for 'fd' [ 534.899528][ T9846] syz1: rxe_newlink: already configured on bond0 [ 536.280626][ T9874] input: syz1 as /devices/virtual/input/input46 [ 536.417778][ T9870] syzkaller0: entered promiscuous mode [ 536.489385][ T9870] syzkaller0: entered allmulticast mode [ 538.151432][ T6642] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 538.341353][ T6642] usb 2-1: Using ep0 maxpacket: 16 [ 538.350546][ T6642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 538.376126][ T6642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 538.390628][ T6642] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 538.399988][ T6642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.408069][ T6642] usb 2-1: Product: syz [ 538.413370][ T6642] usb 2-1: Manufacturer: syz [ 538.418010][ T6642] usb 2-1: SerialNumber: syz [ 538.425384][ T6642] usb 2-1: config 0 descriptor?? [ 538.438085][ T6642] hub 2-1:0.0: bad descriptor, ignoring hub [ 538.444356][ T6642] hub: probe of 2-1:0.0 failed with error -5 [ 538.452984][ T6642] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 538.511135][ T6642] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 538.561889][ T6646] udevd[6646]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.327014][ T9897] (null): rxe_set_mtu: Set mtu to 1024 [ 539.341685][ T9897] rdma_rxe: rxe_newlink: failed to add bond0 [ 540.945006][ T8] usb 2-1: USB disconnect, device number 22 [ 541.469988][ T9921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.297714][ T9917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.211582][ T5895] block nbd3: Possible stuck request ffff888022074c00: control (read@0,1024B). Runtime 300 seconds [ 543.224046][ T5895] block nbd3: Possible stuck request ffff888022074e00: control (read@1024,1024B). Runtime 300 seconds [ 543.236644][ T5895] block nbd3: Possible stuck request ffff888022075000: control (read@2048,1024B). Runtime 300 seconds [ 543.252154][ T5895] block nbd3: Possible stuck request ffff888022075200: control (read@3072,1024B). Runtime 300 seconds [ 543.432892][ T9928] syzkaller0: entered promiscuous mode [ 543.438565][ T9928] syzkaller0: entered allmulticast mode [ 543.883689][ T9937] (null): rxe_set_mtu: Set mtu to 1024 [ 543.897830][ T9937] rdma_rxe: rxe_newlink: failed to add bond0 [ 546.473105][ T9971] kvm: kvm [9969]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 546.775203][ T9978] (null): rxe_set_mtu: Set mtu to 1024 [ 546.816686][ T9978] rdma_rxe: rxe_newlink: failed to add bond0 [ 547.462059][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 547.570465][ T9990] syzkaller0: entered promiscuous mode [ 547.576271][ T9990] syzkaller0: entered allmulticast mode [ 550.071532][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 551.061486][ T5811] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 551.100618][T10036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.292732][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 551.309116][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 551.351085][ T5811] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 551.395260][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.444073][ T5811] usb 2-1: Product: syz [ 551.463012][ T5811] usb 2-1: Manufacturer: syz [ 551.484717][ T5811] usb 2-1: SerialNumber: syz [ 551.547135][ T5811] usb 2-1: config 0 descriptor?? [ 551.626926][ T5811] hub 2-1:0.0: bad descriptor, ignoring hub [ 551.668789][ T5811] hub: probe of 2-1:0.0 failed with error -5 [ 551.768231][ T5811] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 551.907856][T10034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.035049][T10040] syzkaller0: entered promiscuous mode [ 553.062778][T10040] syzkaller0: entered allmulticast mode [ 553.562837][T10055] kvm: kvm [10054]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 553.749708][ T23] usb 2-1: USB disconnect, device number 23 [ 556.693879][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 556.816931][T10075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 556.823142][T10075] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 556.829159][T10075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 556.835221][T10075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 557.471404][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 557.637691][T10097] syzkaller0: entered promiscuous mode [ 557.643416][T10097] syzkaller0: entered allmulticast mode [ 557.661515][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 557.669645][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 557.684845][ T9] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 557.694796][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.703286][ T9] usb 4-1: Product: syz [ 557.708018][ T9] usb 4-1: Manufacturer: syz [ 557.713255][ T9] usb 4-1: SerialNumber: syz [ 557.727843][ T9] usb 4-1: config 0 descriptor?? [ 557.735645][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 557.742224][ T9] hub: probe of 4-1:0.0 failed with error -5 [ 557.751907][ T9] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 559.258755][ T5778] Bluetooth: hci0: command 0x0c1a tx timeout [ 559.259597][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 559.272146][ T8842] Bluetooth: hci2: command 0x0c1a tx timeout [ 559.282771][ T8842] Bluetooth: hci3: command 0x0c1a tx timeout [ 561.451427][ T5811] usb 4-1: USB disconnect, device number 30 [ 561.459959][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 562.883215][T10148] syzkaller0: entered promiscuous mode [ 562.888778][T10148] syzkaller0: entered allmulticast mode [ 563.218204][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.224674][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.384247][ T5811] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 563.571619][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 563.579155][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 563.593300][ T5811] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 563.602741][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.610908][ T5811] usb 3-1: Product: syz [ 563.615259][ T5811] usb 3-1: Manufacturer: syz [ 563.619964][ T5811] usb 3-1: SerialNumber: syz [ 563.627662][ T5811] usb 3-1: config 0 descriptor?? [ 563.640739][ T5811] hub 3-1:0.0: bad descriptor, ignoring hub [ 563.646940][ T5811] hub: probe of 3-1:0.0 failed with error -5 [ 563.655727][ T5811] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 565.175734][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 565.963887][T10184] syzkaller0: entered promiscuous mode [ 565.969501][T10184] syzkaller0: entered allmulticast mode [ 566.105423][ T5811] usb 3-1: USB disconnect, device number 21 [ 568.881919][T10207] block nbd0: server does not support multiple connections per device. [ 568.890628][T10207] block nbd0: shutting down sockets [ 569.839540][T10239] syzkaller0: entered promiscuous mode [ 569.845537][T10239] syzkaller0: entered allmulticast mode [ 571.458495][T10253] input: syz1 as /devices/virtual/input/input47 [ 573.461432][ T5895] block nbd3: Possible stuck request ffff888022074c00: control (read@0,1024B). Runtime 330 seconds [ 573.473027][ T5895] block nbd3: Possible stuck request ffff888022074e00: control (read@1024,1024B). Runtime 330 seconds [ 573.484133][ T5895] block nbd3: Possible stuck request ffff888022075000: control (read@2048,1024B). Runtime 330 seconds [ 573.495228][ T5895] block nbd3: Possible stuck request ffff888022075200: control (read@3072,1024B). Runtime 330 seconds [ 573.941832][T10278] block nbd0: server does not support multiple connections per device. [ 573.952040][T10278] block nbd0: shutting down sockets [ 575.239491][T10292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.069871][T10290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.574618][T10310] input: syz1 as /devices/virtual/input/input48 [ 577.995213][T10301] syzkaller0: entered promiscuous mode [ 578.000912][T10301] syzkaller0: entered allmulticast mode [ 578.512692][T10334] block nbd0: server does not support multiple connections per device. [ 578.561695][T10334] block nbd0: shutting down sockets [ 580.619055][T10330] netlink: 'syz.1.1280': attribute type 1 has an invalid length. [ 580.627808][T10330] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 580.816051][T10350] input: syz1 as /devices/virtual/input/input49 [ 583.446937][T10387] syzkaller0: entered promiscuous mode [ 583.454139][T10387] syzkaller0: entered allmulticast mode [ 585.121545][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 586.198630][T10411] input: syz1 as /devices/virtual/input/input50 [ 587.144818][T10424] input: syz1 as /devices/virtual/input/input51 [ 588.489017][T10436] syzkaller0: entered promiscuous mode [ 588.501648][T10436] syzkaller0: entered allmulticast mode [ 588.515248][T10438] (null): rxe_set_mtu: Set mtu to 1024 [ 588.532333][T10438] rdma_rxe: rxe_newlink: failed to add bond0 [ 589.456489][T10449] input: syz1 as /devices/virtual/input/input52 [ 590.387186][T10451] syzkaller0: entered promiscuous mode [ 590.401556][T10451] syzkaller0: entered allmulticast mode [ 592.575049][T10496] (null): rxe_set_mtu: Set mtu to 1024 [ 592.580906][T10496] rdma_rxe: rxe_newlink: failed to add bond0 [ 593.434792][T10505] input: syz1 as /devices/virtual/input/input53 [ 593.488768][T10503] syzkaller0: entered promiscuous mode [ 593.533296][T10503] syzkaller0: entered allmulticast mode [ 594.583296][T10519] loop4: detected capacity change from 0 to 7 [ 594.636160][ C0] blk_print_req_error: 3 callbacks suppressed [ 594.636184][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 594.653551][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.663276][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 594.673059][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.682811][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 594.694028][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.703411][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 594.718621][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.727962][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 594.737522][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.746931][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 595.637798][T10542] (null): rxe_set_mtu: Set mtu to 1024 [ 595.647125][T10542] rdma_rxe: rxe_newlink: failed to add bond0 [ 596.235077][T10545] input: syz1 as /devices/virtual/input/input54 [ 597.278766][T10550] kvm: kvm [10549]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 598.956142][T10569] fuse: Bad value for 'fd' [ 599.360846][T10577] loop4: detected capacity change from 0 to 7 [ 599.377713][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 599.388527][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.397781][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 599.430947][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.440435][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 599.470532][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.479901][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 599.493870][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 599.503333][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 599.586282][T10581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1342'. [ 601.613896][T10608] syzkaller0: entered promiscuous mode [ 601.619434][T10608] syzkaller0: entered allmulticast mode [ 601.667545][T10610] fuse: Bad value for 'fd' [ 601.830634][T10621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1351'. [ 602.044004][T10628] loop4: detected capacity change from 0 to 7 [ 602.108962][ C0] blk_print_req_error: 2 callbacks suppressed [ 602.108982][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 602.138504][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 602.147923][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 602.284394][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 602.301993][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 602.311453][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 602.320452][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 602.329823][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 602.338791][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 602.348014][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 602.356780][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 602.366051][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 602.820252][T10652] fuse: Bad value for 'fd' [ 602.895080][T10654] fuse: Bad value for 'fd' [ 603.551406][ T5895] block nbd3: Possible stuck request ffff888022074c00: control (read@0,1024B). Runtime 360 seconds [ 603.562254][ T5895] block nbd3: Possible stuck request ffff888022074e00: control (read@1024,1024B). Runtime 360 seconds [ 603.573327][ T5895] block nbd3: Possible stuck request ffff888022075000: control (read@2048,1024B). Runtime 360 seconds [ 603.584365][ T5895] block nbd3: Possible stuck request ffff888022075200: control (read@3072,1024B). Runtime 360 seconds [ 603.722886][T10658] syzkaller0: entered promiscuous mode [ 603.729329][T10658] syzkaller0: entered allmulticast mode [ 603.847068][T10666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1362'. [ 606.154194][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 606.270186][T10694] fuse: Bad value for 'fd' [ 606.606704][T10699] fuse: Bad value for 'fd' [ 607.512192][T10703] block nbd0: server does not support multiple connections per device. [ 607.546782][T10703] block nbd0: shutting down sockets [ 607.734204][T10677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 607.740332][T10677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 607.746439][T10677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 607.752498][T10677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 608.171818][ T5779] Bluetooth: hci1: command 0x0c1a tx timeout [ 608.228937][T10707] syzkaller0: entered promiscuous mode [ 608.237414][T10707] syzkaller0: entered allmulticast mode [ 608.252077][T10712] input: syz1 as /devices/virtual/input/input55 [ 608.314557][T10714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1375'. [ 608.806238][T10731] fuse: Bad value for 'fd' [ 609.440342][T10733] fuse: Bad value for 'group_id' [ 609.812761][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout [ 609.820398][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout [ 609.835188][ T5779] Bluetooth: hci0: command 0x0c1a tx timeout [ 611.347730][ T5139] udevd[5139]: worker [5761] /devices/virtual/block/nbd3 timeout; kill it [ 611.930471][ T5139] udevd[5139]: seq 12184 '/devices/virtual/block/nbd3' killed [ 611.953124][T10738] block nbd0: shutting down sockets [ 612.246488][T10756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1386'. [ 612.275260][T10755] syzkaller0: entered promiscuous mode [ 612.280795][T10755] syzkaller0: entered allmulticast mode [ 615.426115][T10785] block nbd0: server does not support multiple connections per device. [ 615.438064][T10785] block nbd0: shutting down sockets [ 615.594795][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 615.635132][T10799] syzkaller0: entered promiscuous mode [ 615.642214][T10799] syzkaller0: entered allmulticast mode [ 617.731955][T10822] block nbd0: server does not support multiple connections per device. [ 617.741606][T10822] block nbd0: shutting down sockets [ 618.413189][T10830] syzkaller0: entered promiscuous mode [ 618.418734][T10830] syzkaller0: entered allmulticast mode [ 618.482683][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 620.142276][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 620.583215][T10867] fuse: Bad value for 'fd' [ 620.916169][T10869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1421'. [ 621.154257][T10875] fuse: Unknown parameter '0000000000000000000001777777777777777777777' [ 621.314461][T10880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.070480][T10876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.171399][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 622.171437][T10851] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 622.442011][T10851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 622.448204][T10851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 622.454614][T10851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 622.768036][T10888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.605061][T10882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.219833][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'. [ 624.282040][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 624.483265][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 624.483276][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout [ 624.645231][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.657335][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.202682][T10919] syzkaller0: entered promiscuous mode [ 625.221319][T10919] syzkaller0: entered allmulticast mode [ 625.465966][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.691072][T10931] syzkaller0: entered promiscuous mode [ 625.699685][T10926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.718320][T10931] syzkaller0: entered allmulticast mode [ 629.149869][T10975] fuse: Unknown parameter 'grou00000000000000000000' [ 630.273678][T10994] syzkaller0: entered promiscuous mode [ 630.281866][T10994] syzkaller0: entered allmulticast mode [ 630.436173][T11004] fuse: Unknown parameter 'grou00000000000000000000' [ 631.059801][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1465'. [ 633.392909][T11036] fuse: Bad value for 'fd' [ 633.612587][ T5895] block nbd3: Possible stuck request ffff888022074c00: control (read@0,1024B). Runtime 390 seconds [ 633.623459][ T5895] block nbd3: Possible stuck request ffff888022074e00: control (read@1024,1024B). Runtime 390 seconds [ 633.634622][ T5895] block nbd3: Possible stuck request ffff888022075000: control (read@2048,1024B). Runtime 390 seconds [ 633.646071][ T5895] block nbd3: Possible stuck request ffff888022075200: control (read@3072,1024B). Runtime 390 seconds [ 633.738610][T11011] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 633.745097][T11011] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 633.751753][T11011] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 633.758043][T11011] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 634.889652][ T5779] Bluetooth: hci1: command 0x0c1a tx timeout [ 635.761416][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 635.771416][ T5779] Bluetooth: hci0: command 0x0c1a tx timeout [ 635.777505][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 635.917700][T11045] block nbd0: shutting down sockets [ 637.065363][T11057] loop4: detected capacity change from 0 to 7 [ 637.077058][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 638.141289][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.150500][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.246372][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.255640][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.331408][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.340640][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.437505][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.446743][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.523006][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.532253][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 639.836348][T11072] fuse: Unknown parameter 'group_i00000000000000000000' [ 639.870290][T11061] block nbd0: shutting down sockets [ 640.078041][T11077] input: syz1 as /devices/virtual/input/input56 [ 641.391891][T11089] block nbd0: server does not support multiple connections per device. [ 641.402391][T11089] block nbd0: shutting down sockets [ 643.777718][T11096] block nbd0: shutting down sockets [ 643.812803][T11102] loop4: detected capacity change from 0 to 7 [ 643.866645][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 643.876590][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.885809][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 643.898149][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.907399][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 643.916754][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.925990][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 643.943151][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.952345][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 643.961861][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.971081][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 644.225687][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1495'. [ 645.908585][T11130] fuse: Unknown parameter 'group_i00000000000000000000' [ 645.947886][T11133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1502'. [ 647.038919][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout [ 648.531657][T11148] loop4: detected capacity change from 0 to 7 [ 648.617664][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 648.631571][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.640768][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 648.667609][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.676921][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 648.691331][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.700570][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 648.713465][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 648.731390][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 648.788494][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1509'. [ 649.278729][T11169] fuse: Unknown parameter 'group_id00000000000000000000' [ 649.410073][T11174] input: syz1 as /devices/virtual/input/input57 [ 653.824215][T11191] loop4: detected capacity change from 0 to 7 [ 653.886419][ C0] blk_print_req_error: 2 callbacks suppressed [ 653.886437][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 653.893744][T11196] fuse: Unknown parameter 'group_id00000000000000000000' [ 653.951973][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.961183][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 654.186452][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 654.195695][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.246588][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 655.255881][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.353577][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 655.362887][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.377495][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 655.386804][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 655.520620][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'. [ 655.867963][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 657.921569][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 657.922066][T11215] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 657.944343][T11239] fuse: Bad value for 'fd' [ 658.642633][T11215] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 658.648759][T11215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 658.655044][T11215] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 658.755038][T11241] loop4: detected capacity change from 0 to 7 [ 658.766547][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 658.802297][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.811545][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 658.824705][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.833938][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 658.842602][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.851846][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 658.861362][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 659.377935][ C1] blk_print_req_error: 1 callbacks suppressed [ 659.377954][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.393308][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 660.023836][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 660.030074][ T5811] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 660.691371][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 660.713001][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 660.724112][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 660.730171][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout [ 660.738614][ T5811] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 660.763625][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.791971][ T5811] usb 3-1: Product: syz [ 660.796194][ T5811] usb 3-1: Manufacturer: syz [ 660.800820][ T5811] usb 3-1: SerialNumber: syz [ 661.561424][ T5811] usb 3-1: config 0 descriptor?? [ 661.572383][ T5811] hub 3-1:0.0: bad descriptor, ignoring hub [ 661.578435][ T5811] hub: probe of 3-1:0.0 failed with error -5 [ 661.590741][ T5811] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 661.664423][T11275] loop4: detected capacity change from 0 to 7 [ 661.727716][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 661.739685][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.749002][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 662.797392][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.806676][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 662.922472][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.931747][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 662.943894][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.953160][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 662.971332][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.980597][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 663.093061][T11287] block nbd0: server does not support multiple connections per device. [ 663.102917][T11287] block nbd0: shutting down sockets [ 664.335932][ T5811] usb 3-1: USB disconnect, device number 22 [ 664.352715][ T8479] block nbd3: Possible stuck request ffff888022074c00: control (read@0,1024B). Runtime 420 seconds [ 664.364315][ T8479] block nbd3: Possible stuck request ffff888022074e00: control (read@1024,1024B). Runtime 420 seconds [ 664.376441][ T8479] block nbd3: Possible stuck request ffff888022075000: control (read@2048,1024B). Runtime 420 seconds [ 664.387476][ T8479] block nbd3: Possible stuck request ffff888022075200: control (read@3072,1024B). Runtime 420 seconds [ 665.658697][ T5811] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 667.073488][T11315] syzkaller0: entered promiscuous mode [ 667.079055][T11315] syzkaller0: entered allmulticast mode [ 667.823606][ T5811] usb 3-1: device not accepting address 23, error -71 [ 669.235552][T11335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1559'. [ 669.249747][T11333] loop4: detected capacity change from 0 to 7 [ 669.380418][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 669.405354][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.414616][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.440625][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.449824][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.470771][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.480133][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.623619][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.633004][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.658637][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.667901][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 670.399839][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 671.523900][T11356] fuse: Bad value for 'fd' [ 672.194006][ T5779] Bluetooth: hci1: command 0x0c1a tx timeout [ 672.200204][T11331] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 672.206668][T11331] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 672.213067][T11331] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 672.219220][T11331] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 672.682959][ T6642] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 672.901836][ T6642] usb 4-1: Using ep0 maxpacket: 16 [ 672.918474][ T6642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 673.184987][ T6642] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 673.196087][ T6642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.205527][ T6642] usb 4-1: Product: syz [ 673.209815][ T6642] usb 4-1: Manufacturer: syz [ 673.214776][ T6642] usb 4-1: SerialNumber: syz [ 673.232105][ T6642] usb 4-1: config 0 descriptor?? [ 673.244406][ T6642] hub 4-1:0.0: bad descriptor, ignoring hub [ 673.244483][T11369] syzkaller0: entered promiscuous mode [ 673.252414][ T6642] hub: probe of 4-1:0.0 failed with error -5 [ 673.258731][T11369] syzkaller0: entered allmulticast mode [ 673.272475][ T6642] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 673.823937][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 673.925583][T11378] loop4: detected capacity change from 0 to 7 [ 673.993186][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 674.006338][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.015594][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 674.024272][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.033511][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 674.042366][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.051559][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 674.070071][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 674.071500][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 674.084506][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 674.095768][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 674.112110][ T9] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 674.121490][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.130570][ T9] usb 2-1: Product: syz [ 674.135525][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 674.146571][ T9] usb 2-1: Manufacturer: syz [ 674.151229][ T9] usb 2-1: SerialNumber: syz [ 674.158117][ T9] usb 2-1: config 0 descriptor?? [ 674.165510][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 674.173130][ T9] hub: probe of 2-1:0.0 failed with error -5 [ 674.180826][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 674.241718][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout [ 674.242717][ T5778] Bluetooth: hci0: command 0x0c1a tx timeout [ 674.254212][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 675.108206][ T6642] usb 4-1: USB disconnect, device number 31 [ 676.161476][T11372] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 676.167909][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 676.376480][T11372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 676.382744][T11372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 676.388834][T11372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 676.425230][ T9] usb 2-1: USB disconnect, device number 24 [ 677.441454][T11407] syzkaller0: entered promiscuous mode [ 677.455026][T11407] syzkaller0: entered allmulticast mode [ 678.587971][ T5779] Bluetooth: hci0: command 0x0c1a tx timeout [ 678.594104][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 678.600145][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 678.610081][T11409] loop4: detected capacity change from 0 to 7 [ 678.684000][ C0] blk_print_req_error: 2 callbacks suppressed [ 678.684013][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 678.704139][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.713388][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 678.724985][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.734296][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 678.747045][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.756310][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 678.765395][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.774644][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 678.785000][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.794250][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 679.171439][ T27] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 680.132015][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 680.142289][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 680.161521][ T27] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 680.231425][T11440] input: syz1 as /devices/virtual/input/input58 [ 681.233062][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.241601][ T27] usb 4-1: Product: syz [ 681.245989][ T27] usb 4-1: Manufacturer: syz [ 681.250740][ T27] usb 4-1: SerialNumber: syz [ 681.787409][ T27] usb 4-1: config 0 descriptor?? [ 681.794591][ T27] hub 4-1:0.0: bad descriptor, ignoring hub [ 681.800539][ T27] hub: probe of 4-1:0.0 failed with error -5 [ 681.808900][ T27] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 681.954886][ T27] usb 4-1: USB disconnect, device number 32 [ 682.023309][T11455] loop4: detected capacity change from 0 to 7 [ 682.036122][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 682.038377][ T6646] udevd[6646]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 682.097505][T11451] syzkaller0: entered promiscuous mode [ 682.108760][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 682.113107][T11451] syzkaller0: entered allmulticast mode [ 682.119956][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 682.133153][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.143759][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 682.153015][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.164494][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.175746][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.185420][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.415395][T11468] input: syz1 as /devices/virtual/input/input59 [ 684.378009][T11492] input: syz1 as /devices/virtual/input/input60 [ 685.318727][T11494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.563595][T11490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.084039][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.090347][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.275150][T11496] syzkaller0: entered promiscuous mode [ 686.285330][T11496] syzkaller0: entered allmulticast mode [ 686.352723][T11499] input: syz1 as /devices/virtual/input/input61 [ 687.225011][T11501] loop4: detected capacity change from 0 to 7 [ 687.306265][ C0] blk_print_req_error: 3 callbacks suppressed [ 687.306285][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 687.331218][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 687.340629][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 687.350363][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 687.359590][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 688.214256][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.223542][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 688.237886][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.247159][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 688.325958][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.335133][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 689.591611][T11544] input: syz1 as /devices/virtual/input/input62 [ 689.743878][T11543] syzkaller0: entered promiscuous mode [ 689.805653][T11543] syzkaller0: entered allmulticast mode [ 689.981666][ T27] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 690.211993][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 690.253713][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 690.323619][ T27] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 690.366176][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.413196][ T27] usb 3-1: Product: syz [ 690.439442][ T27] usb 3-1: Manufacturer: syz [ 690.463826][ T27] usb 3-1: SerialNumber: syz [ 690.498162][ T27] usb 3-1: config 0 descriptor?? [ 690.512508][ T27] hub 3-1:0.0: bad descriptor, ignoring hub [ 690.531439][ T27] hub: probe of 3-1:0.0 failed with error -5 [ 690.539046][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 691.723283][T11552] loop4: detected capacity change from 0 to 7 [ 691.780574][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 691.808901][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.818170][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 691.832416][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.841671][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 691.865373][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 691.874611][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 691.883517][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 691.895547][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 691.926325][T11564] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.937864][T11564] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.073529][T11565] netlink: 'syz.3.1619': attribute type 16 has an invalid length. [ 692.083155][T11565] netlink: 'syz.3.1619': attribute type 17 has an invalid length. [ 692.124208][T11565] ip6gre0: left allmulticast mode [ 692.139588][T11565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.318193][T11574] input: syz1 as /devices/virtual/input/input63 [ 693.273800][T11576] syzkaller0: entered promiscuous mode [ 693.279350][T11576] syzkaller0: entered allmulticast mode [ 693.299778][ T5812] usb 3-1: USB disconnect, device number 25 [ 693.468897][T11580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1625'. [ 694.267418][T11591] loop4: detected capacity change from 0 to 7 [ 694.431483][ T8479] block nbd3: Possible stuck request ffff888022074c00: control (read@0,1024B). Runtime 450 seconds [ 694.443719][ C1] blk_print_req_error: 2 callbacks suppressed [ 694.443736][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 694.444044][ T8479] block nbd3: Possible stuck request ffff888022074e00: control (read@1024,1024B). Runtime 450 seconds [ 694.470452][ T8479] block nbd3: Possible stuck request ffff888022075000: control (read@2048,1024B). Runtime 450 seconds [ 694.481452][ T8479] block nbd3: Possible stuck request ffff888022075200: control (read@3072,1024B). Runtime 450 seconds [ 694.515173][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 694.524516][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 694.535673][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 694.544908][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 694.556451][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 694.565713][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 694.579322][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 694.588551][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 694.606825][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 694.616076][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 694.697902][T11601] input: syz1 as /devices/virtual/input/input64 [ 695.842057][T11613] input: syz1 as /devices/virtual/input/input65 [ 696.211512][ T8] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 696.442376][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 696.496447][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 696.672764][ T8] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 696.734237][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.761443][ T8] usb 4-1: Product: syz [ 696.762230][T11616] syzkaller0: entered promiscuous mode [ 696.765663][ T8] usb 4-1: Manufacturer: syz [ 696.765682][ T8] usb 4-1: SerialNumber: syz [ 696.781180][T11616] syzkaller0: entered allmulticast mode [ 696.788565][ T8] usb 4-1: config 0 descriptor?? [ 696.803024][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 696.832802][ T8] hub: probe of 4-1:0.0 failed with error -5 [ 696.851566][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 698.161175][T11631] loop4: detected capacity change from 0 to 7 [ 698.171663][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 698.183834][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.193073][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 698.221995][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.231206][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 698.241706][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.250917][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 698.262117][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 698.274432][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 698.916830][ T5776] usb 4-1: USB disconnect, device number 33 [ 699.069668][T11641] kvm: kvm [11640]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 700.265096][T11673] input: syz1 as /devices/virtual/input/input66 [ 701.136914][T11682] loop4: detected capacity change from 0 to 7 [ 701.183250][ C0] blk_print_req_error: 2 callbacks suppressed [ 701.183262][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 701.199224][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 701.208456][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 701.220772][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 701.230242][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 701.239484][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 701.248773][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 701.261737][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 701.270952][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 701.284515][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 701.293890][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 702.331941][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1659'. [ 702.772646][T11714] syzkaller0: entered promiscuous mode [ 702.778178][T11714] syzkaller0: entered allmulticast mode [ 702.905602][T11717] loop4: detected capacity change from 0 to 7 [ 702.954236][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 702.964043][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 702.973227][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 702.983238][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 702.992436][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 703.000825][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 703.010034][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 703.018649][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 703.027267][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 703.558985][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1666'. [ 704.402426][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1672'. [ 704.853871][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 704.973030][T11755] fuse: Bad value for 'fd' [ 705.020276][T11756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1675'. [ 705.084895][T11739] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 705.091080][T11739] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 705.097283][T11739] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 705.103396][T11739] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 705.170665][T11762] loop4: detected capacity change from 0 to 7 [ 706.111433][ T5776] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 706.185252][T11778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.894969][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 707.019184][T11775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.138670][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 707.162310][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 707.168390][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 707.761986][ T5776] usb 2-1: Using ep0 maxpacket: 16 [ 707.769216][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 707.781428][ T27] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 707.789565][ T5776] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 707.798936][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.807098][ T5776] usb 2-1: Product: syz [ 707.811772][ T5776] usb 2-1: Manufacturer: syz [ 707.816420][ T5776] usb 2-1: SerialNumber: syz [ 707.824164][ T5776] usb 2-1: config 0 descriptor?? [ 707.830918][ T5776] hub 2-1:0.0: bad descriptor, ignoring hub [ 707.837090][ T5776] hub: probe of 2-1:0.0 failed with error -5 [ 707.844658][ T5776] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 707.981399][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 707.988278][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 708.001718][ T27] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 708.010876][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.018916][ T27] usb 3-1: Product: syz [ 708.023140][ T27] usb 3-1: Manufacturer: syz [ 708.027762][ T27] usb 3-1: SerialNumber: syz [ 708.040422][ T27] usb 3-1: config 0 descriptor?? [ 708.052025][ T27] hub 3-1:0.0: bad descriptor, ignoring hub [ 708.057986][ T27] hub: probe of 3-1:0.0 failed with error -5 [ 708.065886][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 709.259605][ T5776] usb 2-1: USB disconnect, device number 25 [ 709.330751][T11800] loop4: detected capacity change from 0 to 7 [ 709.820808][ C1] blk_print_req_error: 8 callbacks suppressed [ 709.820855][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 710.158102][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 710.167375][ C0] buffer_io_error: 5 callbacks suppressed [ 710.167383][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 710.188698][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 710.197910][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 710.207227][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 710.216413][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 710.225482][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 710.234688][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 710.243758][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 710.252931][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 710.311641][ T5812] usb 3-1: USB disconnect, device number 26 [ 710.451523][T11811] input: syz1 as /devices/virtual/input/input67 [ 711.527586][T11817] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.537860][T11817] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.579274][T11822] netlink: 'syz.0.1692': attribute type 16 has an invalid length. [ 711.587285][T11822] netlink: 'syz.0.1692': attribute type 17 has an invalid length. [ 711.603982][T11822] ip6gre0: left allmulticast mode [ 711.618266][T11822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.175592][T11838] loop4: detected capacity change from 0 to 7 [ 712.184580][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 712.198955][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 712.208149][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 712.255610][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 712.264833][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 712.281376][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 712.290580][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 712.300140][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 712.309377][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 714.157513][T11865] input: syz1 as /devices/virtual/input/input68 [ 715.139406][T11873] input: syz1 as /devices/virtual/input/input69 [ 716.080177][T11877] loop4: detected capacity change from 0 to 7 [ 716.229491][ C0] blk_print_req_error: 2 callbacks suppressed [ 716.229511][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 716.291895][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 716.301122][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 716.331921][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 716.341135][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 716.379841][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 716.389104][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 716.441875][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 716.451114][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 716.463022][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 716.472245][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 716.958123][T11885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.974772][T11883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.554659][T11894] block nbd0: server does not support multiple connections per device. [ 717.563772][T11894] block nbd0: shutting down sockets [ 718.567285][T11911] input: syz1 as /devices/virtual/input/input70 [ 719.698502][T11917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1722'. [ 720.157807][T11929] loop4: detected capacity change from 0 to 7 [ 720.252704][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 720.262974][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 720.272254][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 720.283485][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 720.292718][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 720.341198][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 720.350470][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 720.362123][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 720.373227][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 720.633366][T11931] ip6gre0: entered allmulticast mode [ 722.529505][T11964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1734'. [ 722.802736][T11950] block nbd0: server does not support multiple connections per device. [ 722.812561][T11950] block nbd0: shutting down sockets [ 723.161968][T11975] loop4: detected capacity change from 0 to 7 [ 723.300067][ C0] blk_print_req_error: 2 callbacks suppressed [ 723.300087][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 723.319910][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 723.329221][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 723.365524][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 723.374809][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 723.398959][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 723.408230][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 723.448550][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 723.457790][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 723.470989][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 723.480226][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 724.186634][T11981] input: syz1 as /devices/virtual/input/input71 [ 724.870404][T11777] block nbd3: Possible stuck request ffff888022074c00: control (read@0,1024B). Runtime 480 seconds [ 724.898593][T11777] block nbd3: Possible stuck request ffff888022074e00: control (read@1024,1024B). Runtime 480 seconds [ 724.943737][T11777] block nbd3: Possible stuck request ffff888022075000: control (read@2048,1024B). Runtime 480 seconds [ 724.991594][T11777] block nbd3: Possible stuck request ffff888022075200: control (read@3072,1024B). Runtime 480 seconds [ 726.441198][T12007] input: syz1 as /devices/virtual/input/input72 [ 727.995498][T12003] block nbd0: server does not support multiple connections per device. [ 728.004709][T12003] block nbd0: shutting down sockets [ 729.048640][T12023] input: syz1 as /devices/virtual/input/input73 [ 729.960771][T12029] input: syz1 as /devices/virtual/input/input74 [ 731.051063][T12040] input: syz1 as /devices/virtual/input/input75 [ 733.690182][T12061] netlink: 'syz.0.1760': attribute type 16 has an invalid length. [ 733.698698][T12061] netlink: 'syz.0.1760': attribute type 17 has an invalid length. [ 733.720276][T12061] ip6gre0: left allmulticast mode [ 733.741457][T12061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 733.932193][T12075] syzkaller0: entered promiscuous mode [ 733.937787][T12075] syzkaller0: entered allmulticast mode [ 734.432583][T12082] input: syz1 as /devices/virtual/input/input76 [ 736.443358][T12089] block nbd0: shutting down sockets [ 738.242318][T12106] syzkaller0: entered promiscuous mode [ 738.247952][T12106] syzkaller0: entered allmulticast mode [ 738.253662][ T5776] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 738.505556][ T5776] usb 2-1: Using ep0 maxpacket: 16 [ 738.650202][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 739.144723][ T5776] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 739.153909][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.162019][ T5776] usb 2-1: Product: syz [ 739.166673][ T5776] usb 2-1: Manufacturer: syz [ 739.171810][ T5776] usb 2-1: SerialNumber: syz [ 739.179964][ T5776] usb 2-1: config 0 descriptor?? [ 739.188828][ T5776] hub 2-1:0.0: bad descriptor, ignoring hub [ 739.198367][ T5776] hub: probe of 2-1:0.0 failed with error -5 [ 739.206651][ T5776] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 739.991560][T12129] block nbd0: server does not support multiple connections per device. [ 740.000235][T12129] block nbd0: shutting down sockets [ 740.893533][ T8] usb 2-1: USB disconnect, device number 26 [ 741.083960][T12142] syzkaller0: entered promiscuous mode [ 741.112262][T12142] syzkaller0: entered allmulticast mode [ 741.371027][T12150] fuse: Unknown parameter 'user_id00000000000000000000' [ 742.641821][T12173] input: syz1 as /devices/virtual/input/input77 [ 743.053250][ T27] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 743.251757][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 743.294717][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 743.410517][ T27] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 743.454984][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.502587][ T27] usb 2-1: Product: syz [ 743.519901][ T27] usb 2-1: Manufacturer: syz [ 743.531432][ T27] usb 2-1: SerialNumber: syz [ 743.556073][ T27] usb 2-1: config 0 descriptor?? [ 744.947234][ T27] hub 2-1:0.0: bad descriptor, ignoring hub [ 745.005207][ T27] hub: probe of 2-1:0.0 failed with error -5 [ 745.095652][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 745.161685][T12184] syzkaller0: entered promiscuous mode [ 745.168248][T12184] syzkaller0: entered allmulticast mode [ 745.201869][T12181] block nbd0: shutting down sockets [ 745.307769][T12188] fuse: Unknown parameter 'user_id00000000000000000000' [ 745.439761][T12194] syzkaller0: entered promiscuous mode [ 745.446961][T12194] syzkaller0: entered allmulticast mode [ 746.390490][ T5851] usb 2-1: USB disconnect, device number 27 [ 746.548976][T12204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1804'. [ 747.363551][T12219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1806'. [ 747.464791][T12223] fuse: Unknown parameter 'user_id00000000000000000000' [ 747.525207][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.659952][T12228] syzkaller0: entered promiscuous mode [ 747.665832][T12228] syzkaller0: entered allmulticast mode [ 748.629818][T12229] block nbd0: server does not support multiple connections per device. [ 748.639161][T12229] block nbd0: shutting down sockets [ 749.447192][T12248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1814'. [ 750.920169][T12266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1818'. [ 751.021945][T12263] block nbd0: server does not support multiple connections per device. [ 751.032355][T12263] block nbd0: shutting down sockets [ 751.248286][T12269] fuse: Bad value for 'fd' [ 752.098193][T12283] syzkaller0: entered promiscuous mode [ 752.323193][T12281] block nbd0: server does not support multiple connections per device. [ 752.332524][T12281] block nbd0: shutting down sockets [ 752.378271][T12283] syzkaller0: entered allmulticast mode [ 753.503136][T12300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1826'. [ 753.551550][T12291] block nbd0: server does not support multiple connections per device. [ 753.560171][T12291] block nbd0: shutting down sockets [ 754.307042][T12313] netlink: 'syz.3.1829': attribute type 16 has an invalid length. [ 754.315207][T12313] netlink: 'syz.3.1829': attribute type 17 has an invalid length. [ 754.347850][T12313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 754.354655][T12315] fuse: Bad value for 'fd' [ 754.435306][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1831'. [ 755.227258][T11777] block nbd3: Possible stuck request ffff888022074c00: control (read@0,1024B). Runtime 510 seconds [ 755.238157][T11777] block nbd3: Possible stuck request ffff888022074e00: control (read@1024,1024B). Runtime 510 seconds [ 755.249256][T11777] block nbd3: Possible stuck request ffff888022075000: control (read@2048,1024B). Runtime 510 seconds [ 755.260327][T11777] block nbd3: Possible stuck request ffff888022075200: control (read@3072,1024B). Runtime 510 seconds [ 755.316056][T12332] syzkaller0: entered promiscuous mode [ 755.321777][T12332] syzkaller0: entered allmulticast mode [ 755.651452][ T27] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 755.703318][T12343] fuse: Bad value for 'fd' [ 755.781239][T12345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1840'. [ 755.813631][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1841'. [ 755.831777][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 755.844943][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 755.885596][ T27] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 755.896378][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.904600][ T27] usb 2-1: Product: syz [ 755.908957][ T27] usb 2-1: Manufacturer: syz [ 755.913823][ T27] usb 2-1: SerialNumber: syz [ 755.923443][ T27] usb 2-1: config 0 descriptor?? [ 755.930240][ T27] hub 2-1:0.0: bad descriptor, ignoring hub [ 755.936283][ T27] hub: probe of 2-1:0.0 failed with error -5 [ 755.943680][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 756.691617][T12361] syzkaller0: entered promiscuous mode [ 756.697311][T12361] syzkaller0: entered allmulticast mode [ 756.798685][T12363] syzkaller0: entered promiscuous mode [ 756.805509][T12363] syzkaller0: entered allmulticast mode [ 757.004051][T12371] fuse: Unknown parameter '0x0000000000000003' [ 758.330463][ T27] usb 2-1: USB disconnect, device number 28 [ 759.384828][T12385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1853'. [ 759.393033][T12387] syzkaller0: entered promiscuous mode [ 759.399718][T12387] syzkaller0: entered allmulticast mode [ 759.582971][T12396] fuse: Unknown parameter '0x0000000000000003' [ 759.987693][T12406] gretap0: entered promiscuous mode [ 759.993877][T12406] vlan2: entered promiscuous mode [ 760.232604][T12408] gretap0: entered promiscuous mode [ 760.238036][T12408] vlan2: entered promiscuous mode [ 760.620710][T12413] fuse: Bad value for 'group_id' [ 760.951870][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 761.038846][T12430] fuse: Unknown parameter '0xffffffffffffffff' [ 761.104353][T12410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 761.110493][T12410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 761.116698][T12410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 761.122770][T12410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 761.434381][T12443] input: syz1 as /devices/virtual/input/input78 [ 762.284744][T12449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1872'. [ 762.961379][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 762.987972][ T5812] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 763.051788][T12462] block nbd0: server does not support multiple connections per device. [ 763.078147][T12462] block nbd0: shutting down sockets [ 763.078797][T12465] fuse: Unknown parameter '0x0000000000000003' [ 763.201507][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 763.206605][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 763.207691][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 763.213280][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout [ 763.287499][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 763.391131][ T5812] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 763.411068][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.439516][ T5812] usb 4-1: Product: syz [ 763.454520][ T5812] usb 4-1: Manufacturer: syz [ 763.472476][ T5812] usb 4-1: SerialNumber: syz [ 763.550531][ T5812] usb 4-1: config 0 descriptor?? [ 763.580402][ T5812] hub 4-1:0.0: bad descriptor, ignoring hub [ 763.586987][ T5812] hub: probe of 4-1:0.0 failed with error -5 [ 763.596777][ T5812] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 764.362435][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 764.506058][T12471] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 764.512257][T12471] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 764.518351][T12471] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 764.524478][T12471] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 764.604850][T12478] syzkaller0: entered promiscuous mode [ 764.610472][T12478] syzkaller0: entered allmulticast mode [ 764.795767][T12482] loop4: detected capacity change from 0 to 7 [ 764.911040][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 764.921733][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 764.930920][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 764.943945][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 764.953170][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 765.046866][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.056184][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 765.070374][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.079715][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 765.093475][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.102738][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 765.686637][ T23] usb 4-1: USB disconnect, device number 34 [ 765.813802][T12487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1886'. [ 765.850435][T12493] fuse: Unknown parameter '0x0000000000000003' [ 765.956566][T12498] input: syz1 as /devices/virtual/input/input79 [ 766.401596][ T5778] Bluetooth: hci1: command 0x0c1a tx timeout [ 766.571668][ T5778] Bluetooth: hci2: command 0x0c1a tx timeout [ 766.577911][ T5778] Bluetooth: hci3: command 0x0c1a tx timeout [ 766.586283][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 767.365331][ T2921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.375948][ T5776] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 767.412362][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.424994][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.548362][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 767.601382][ T5776] usb 4-1: Using ep0 maxpacket: 16 [ 767.666803][T12520] loop4: detected capacity change from 0 to 7 [ 768.431673][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 768.499632][ T5776] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 768.509075][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.517678][ T5776] usb 4-1: Product: syz [ 768.522319][ T5776] usb 4-1: Manufacturer: syz [ 768.527129][ T5776] usb 4-1: SerialNumber: syz [ 768.535993][ T5776] usb 4-1: config 0 descriptor?? [ 768.543616][ T5776] hub 4-1:0.0: bad descriptor, ignoring hub [ 768.549753][ T5776] hub: probe of 4-1:0.0 failed with error -5 [ 768.580068][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 768.590891][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.600114][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 768.609977][T12510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 768.616107][T12510] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 768.622147][T12510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 768.628124][T12510] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 768.639585][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.648878][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 768.657583][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.660036][ T5776] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 768.666783][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 768.671318][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 768.707642][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 768.844186][ T5776] usb 4-1: USB disconnect, device number 35 [ 768.856060][T12527] fuse: Unknown parameter '0x0000000000000003' [ 768.865352][T12526] vlan2: entered promiscuous mode [ 768.948585][T12529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1898'. [ 769.578128][T12549] loop4: detected capacity change from 0 to 7 [ 769.601475][ T5778] Bluetooth: hci1: command 0x0c1a tx timeout [ 769.790087][T12554] fuse: Unknown parameter 'fd0x0000000000000003' [ 769.922456][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.932959][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.942205][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.480326][T12574] fuse: Unknown parameter 'fd0x0000000000000003' [ 770.662596][T12579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1916'. [ 770.721431][ T5778] Bluetooth: hci2: command 0x0c1a tx timeout [ 770.724488][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 770.733559][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 770.827457][T12586] loop4: detected capacity change from 0 to 7 [ 770.913578][ C1] blk_print_req_error: 8 callbacks suppressed [ 770.913597][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 770.930756][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 770.939981][ C1] buffer_io_error: 5 callbacks suppressed [ 770.939994][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 770.957775][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 770.967013][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 770.978992][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 770.988213][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 771.000361][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.009809][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 771.022317][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.031541][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 771.959895][T12599] syzkaller0: entered promiscuous mode [ 771.965637][T12599] syzkaller0: entered allmulticast mode [ 772.055291][T12601] fuse: Unknown parameter 'fd0x0000000000000003' [ 772.241816][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.256658][T12605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1927'. [ 772.457807][T12617] loop4: detected capacity change from 0 to 7 [ 772.542624][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 772.613023][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 772.622343][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.645367][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 772.654668][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.666342][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 772.675674][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.687223][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.698706][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 773.291767][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.675865][T12635] syzkaller0: entered promiscuous mode [ 773.681596][T12635] syzkaller0: entered allmulticast mode [ 774.323692][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.401991][ T8923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.411240][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.432291][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.539325][T12652] loop4: detected capacity change from 0 to 7 [ 775.098399][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.151595][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.398638][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.432576][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.441314][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.474476][T12657] input: syz1 as /devices/virtual/input/input80 [ 776.507664][T12664] syzkaller0: entered promiscuous mode [ 776.531532][T12664] syzkaller0: entered allmulticast mode [ 777.252933][T12681] netlink: 'syz.3.1951': attribute type 1 has an invalid length. [ 777.285384][T12681] 8021q: adding VLAN 0 to HW filter on device bond5 [ 777.377584][T12681] bond5: entered promiscuous mode [ 777.392104][T12686] loop4: detected capacity change from 0 to 7 [ 777.400474][T12681] bond5: entered allmulticast mode [ 777.410117][ C1] blk_print_req_error: 8 callbacks suppressed [ 777.410131][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 777.493329][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 777.505055][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 777.514654][ C1] buffer_io_error: 5 callbacks suppressed [ 777.514667][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 777.534269][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 777.543505][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 777.556259][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 777.565472][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 777.578211][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 777.587442][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 777.602978][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 777.612260][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 778.269046][T12693] syzkaller0: entered promiscuous mode [ 778.276250][T12693] syzkaller0: entered allmulticast mode [ 778.562092][ T5812] net_ratelimit: 15 callbacks suppressed [ 778.562109][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.659086][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 778.726649][T12707] netlink: 'syz.3.1961': attribute type 16 has an invalid length. [ 778.736858][T12707] netlink: 'syz.3.1961': attribute type 17 has an invalid length. [ 778.750984][T12707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 779.194818][T12714] netlink: 'syz.1.1963': attribute type 1 has an invalid length. [ 779.281593][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.313375][T12714] 8021q: adding VLAN 0 to HW filter on device bond4 [ 779.325276][T12716] bond4: entered promiscuous mode [ 779.330485][T12716] bond4: entered allmulticast mode [ 779.532475][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.558110][T12719] loop4: detected capacity change from 0 to 7 [ 779.602255][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.630958][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 779.649857][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.659129][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 779.684173][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.693441][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 779.707012][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 779.720614][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 779.735382][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 780.348704][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.440767][T12721] syzkaller0: entered promiscuous mode [ 780.446535][T12721] syzkaller0: entered allmulticast mode [ 780.641783][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.641910][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.881773][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.372735][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.542734][T12748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.417141][T12746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.040847][T12754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1978'. [ 783.064872][T12752] syzkaller0: entered promiscuous mode [ 783.070465][T12752] syzkaller0: entered allmulticast mode [ 783.130518][T12757] loop4: detected capacity change from 0 to 7 [ 783.152145][ C0] blk_print_req_error: 3 callbacks suppressed [ 783.152164][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 783.194704][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.203958][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 783.251320][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.260551][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 783.303843][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.313121][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 783.343783][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.353041][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 783.382776][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 783.392052][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 783.683438][ T5776] net_ratelimit: 4 callbacks suppressed [ 783.683457][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.762037][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.928025][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.011871][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.236143][T12770] input: syz1 as /devices/virtual/input/input81 [ 785.038922][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.066122][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.327041][T11777] block nbd3: Possible stuck request ffff888022074c00: control (read@0,1024B). Runtime 540 seconds [ 785.337948][T11777] block nbd3: Possible stuck request ffff888022074e00: control (read@1024,1024B). Runtime 540 seconds [ 785.349010][T11777] block nbd3: Possible stuck request ffff888022075000: control (read@2048,1024B). Runtime 540 seconds [ 785.360034][T11777] block nbd3: Possible stuck request ffff888022075200: control (read@3072,1024B). Runtime 540 seconds [ 786.091772][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.100164][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.208261][T12782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.728956][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.961595][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.022450][T12780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.592510][T12787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1988'. [ 787.755877][T12792] loop4: detected capacity change from 0 to 7 [ 787.914047][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 787.937670][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 787.946933][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 787.993003][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 788.002259][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 788.050430][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 788.059720][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 788.073318][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 788.085804][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 788.585818][T12797] syzkaller0: entered promiscuous mode [ 788.631194][T12797] syzkaller0: entered allmulticast mode [ 788.752491][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 788.766488][T12802] infiniband syz1: set active [ 788.842998][ T6642] net_ratelimit: 4 callbacks suppressed [ 788.843013][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.858617][T12803] netlink: 'syz.1.1993': attribute type 16 has an invalid length. [ 788.867562][T12803] netlink: 'syz.1.1993': attribute type 17 has an invalid length. [ 788.890114][T12803] ip6gre0: left allmulticast mode [ 788.906094][T12803] infiniband syz1: set active [ 788.922735][T12803] infiniband syz1: set active [ 788.934252][T12803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 789.121524][ T29] INFO: task udevd:5761 blocked for more than 163 seconds. [ 789.128934][ T29] Not tainted syzkaller #0 [ 789.134568][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.157965][T12809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.189045][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 789.201790][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.210209][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.223954][ T29] task:udevd state:D stack:24552 pid:5761 ppid:5139 flags:0x00004006 [ 789.293107][ T29] Call Trace: [ 789.310840][ T29] [ 789.338763][ T29] __schedule+0x1553/0x45a0 [ 789.386459][ T29] ? asan.module_dtor+0x20/0x20 [ 789.425498][ T29] ? mark_lock+0x94/0x320 [ 789.469285][ T29] ? lock_chain_count+0x20/0x20 [ 789.528331][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 789.574075][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 789.623863][ T29] schedule+0xbd/0x170 [ 789.661221][ T29] io_schedule+0x80/0xd0 [ 789.716223][ T29] folio_wait_bit_common+0x714/0xfa0 [ 789.763370][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.787714][ T29] ? folio_wait_bit+0x30/0x30 [ 789.797686][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.834693][ T29] ? _compound_head+0x120/0x120 [ 789.886496][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 789.938681][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 789.975186][ T29] ? blkdev_writepage+0x30/0x30 [ 789.980717][T12807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.028114][ T29] read_part_sector+0xd2/0x340 [ 790.070755][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 790.130703][ T29] ? put_partition+0x370/0x370 [ 790.145201][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.190475][ T29] bdev_disk_changed+0x740/0x1420 [ 790.211005][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 790.233303][ T29] ? iput+0x343/0x920 [ 790.251143][ T29] blkdev_get_whole+0x30d/0x390 [ 790.276348][ T29] blkdev_get_by_dev+0x279/0x600 [ 790.299959][ T29] blkdev_open+0x152/0x360 [ 790.326765][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 790.345661][ T29] do_dentry_open+0x8c6/0x1500 [ 790.364006][ T29] path_openat+0x27f1/0x3230 [ 790.384651][ T29] ? do_sys_openat2+0xda/0x1d0 [ 790.409209][ T29] ? verify_lock_unused+0x140/0x140 [ 790.432006][ T29] ? do_filp_open+0x430/0x430 [ 790.452551][ T29] ? __virt_addr_valid+0x18c/0x540 [ 790.472862][ T29] do_filp_open+0x1f5/0x430 [ 790.493435][ T29] ? vfs_tmpfile+0x490/0x490 [ 790.517143][ T29] ? _raw_spin_unlock+0x28/0x40 [ 790.539340][ T29] ? alloc_fd+0x58f/0x630 [ 790.558771][ T29] do_sys_openat2+0x134/0x1d0 [ 790.581014][ T29] ? do_sys_open+0xe0/0xe0 [ 790.603461][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 790.627865][ T29] ? lock_chain_count+0x20/0x20 [ 790.635885][ T29] __x64_sys_openat+0x139/0x160 [ 790.645478][ T29] do_syscall_64+0x55/0xa0 [ 790.653918][ T29] ? clear_bhb_loop+0x40/0x90 [ 790.660372][ T29] ? clear_bhb_loop+0x40/0x90 [ 790.668447][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 790.676299][ T29] RIP: 0033:0x7f0b32ea7407 [ 790.683992][ T29] RSP: 002b:00007fff42da3020 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 790.695991][ T29] RAX: ffffffffffffffda RBX: 00007f0b33579880 RCX: 00007f0b32ea7407 [ 790.708234][ T29] RDX: 00000000000a0800 RSI: 000055ee889327a0 RDI: ffffffffffffff9c [ 790.720075][ T29] RBP: 000055ee888ae910 R08: 0000000000000000 R09: 0000000000000000 [ 790.735990][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ee888c3830 [ 790.758576][ T29] R13: 000055ee888c6410 R14: 0000000000000000 R15: 000055ee888c3830 [ 790.770650][ T29] [ 790.776067][ T29] [ 790.776067][ T29] Showing all locks held in the system: [ 790.788364][ T29] 2 locks held by kworker/0:0/8: [ 790.794924][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 790.810634][ T29] #1: ffffc900000d7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 790.829174][ T29] 1 lock held by khungtaskd/29: [ 790.838569][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 790.855952][ T29] 4 locks held by kworker/1:1H/55: [ 790.864849][ T29] 2 locks held by getty/5532: [ 790.873140][ T29] #0: ffff888031afa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 790.886282][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 790.900398][ T29] 1 lock held by udevd/5761: [ 790.908236][ T29] #0: ffff888021f584c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 790.922341][ T29] 5 locks held by kworker/1:3/5782: [ 790.929208][ T29] 2 locks held by kworker/1:6/6642: [ 790.938816][ T29] 1 lock held by syz.3.1995/12807: [ 790.954295][ T29] #0: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 790.971314][ T29] 2 locks held by syz.1.1997/12810: [ 790.978156][ T29] #0: ffff88823bca0ca0 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 790.993170][ T29] #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 791.008315][ T29] [ 791.011077][ T29] ============================================= [ 791.011077][ T29] [ 791.024933][ T29] NMI backtrace for cpu 0 [ 791.029317][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 791.036532][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 791.046597][ T29] Call Trace: [ 791.049893][ T29] [ 791.052838][ T29] dump_stack_lvl+0x18c/0x250 [ 791.057551][ T29] ? show_regs_print_info+0x20/0x20 [ 791.062772][ T29] ? load_image+0x420/0x420 [ 791.067308][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 791.072266][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 791.078432][ T29] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 791.084079][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 791.089301][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 791.095401][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 791.101406][ T29] watchdog+0xf3d/0xf80 [ 791.105586][ T29] ? watchdog+0x1e1/0xf80 [ 791.109942][ T29] kthread+0x2fa/0x390 [ 791.114022][ T29] ? hungtask_pm_notify+0x90/0x90 [ 791.119071][ T29] ? kthread_blkcg+0xd0/0xd0 [ 791.123693][ T29] ret_from_fork+0x48/0x80 [ 791.128128][ T29] ? kthread_blkcg+0xd0/0xd0 [ 791.132734][ T29] ret_from_fork_asm+0x11/0x20 [ 791.137529][ T29] [ 791.141066][ T29] Sending NMI from CPU 0 to CPUs 1: [ 791.146350][ C1] NMI backtrace for cpu 1 [ 791.146359][ C1] CPU: 1 PID: 12808 Comm: syz.3.1995 Not tainted syzkaller #0 [ 791.146375][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 791.146383][ C1] RIP: 0010:kasan_check_range+0x1c2/0x290 [ 791.146407][ C1] Code: 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 6b 49 ff c3 49 ff cc 75 f2 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff 00 00 0f 85 89 00 [ 791.146420][ C1] RSP: 0018:ffffc900001f05d0 EFLAGS: 00000056 [ 791.146433][ C1] RAX: 0000000000000101 RBX: 000000000000080c RCX: ffffffff81684203 [ 791.146444][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911c6600 [ 791.146453][ C1] RBP: ffffc900001f0828 R08: ffffffff911c6607 R09: 1ffffffff2238cc0 [ 791.146464][ C1] R10: dffffc0000000000 R11: fffffbfff2238cc1 R12: 00000000023ae141 [ 791.146475][ C1] R13: ffff88802d77da00 R14: 0000000013ce5f21 R15: ffff88802d77e500 [ 791.146486][ C1] FS: 00007fc6ca7d96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 791.146499][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 791.146509][ C1] CR2: 000020000000b000 CR3: 0000000023dda000 CR4: 00000000003506e0 [ 791.146523][ C1] Call Trace: [ 791.146528][ C1] [ 791.146534][ C1] __lock_acquire+0x1273/0x7d40 [ 791.146562][ C1] ? verify_lock_unused+0x140/0x140 [ 791.146580][ C1] ? verify_lock_unused+0x140/0x140 [ 791.146596][ C1] ? verify_lock_unused+0x140/0x140 [ 791.146616][ C1] lock_acquire+0x19e/0x420 [ 791.146641][ C1] ? snd_seq_prioq_cell_out+0x3d/0x390 [ 791.146722][ C1] ? read_lock_is_recursive+0x20/0x20 [ 791.146738][ C1] ? snd_seq_timer_get_cur_tick+0x4a/0x70 [ 791.146754][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 791.146770][ C1] ? __rwlock_init+0x150/0x150 [ 791.146788][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 791.146807][ C1] ? snd_seq_prioq_cell_out+0x3d/0x390 [ 791.146821][ C1] ? _raw_spin_lock+0x40/0x40 [ 791.146837][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 791.146854][ C1] ? _raw_spin_unlock+0x40/0x40 [ 791.146869][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 791.146886][ C1] ? _raw_spin_unlock+0x40/0x40 [ 791.146902][ C1] snd_seq_prioq_cell_out+0x3d/0x390 [ 791.146919][ C1] snd_seq_check_queue+0x1f5/0x4d0 [ 791.146969][ C1] ? snd_seq_queue_find_name+0x120/0x120 [ 791.146993][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 791.147012][ C1] ? snd_seq_timer_open+0x610/0x610 [ 791.147025][ C1] snd_timer_process_callbacks+0x1e7/0x2b0 [ 791.147068][ C1] snd_timer_interrupt+0xec3/0x1090 [ 791.147090][ C1] snd_hrtimer_callback+0x206/0x360 [ 791.147111][ C1] __hrtimer_run_queues+0x520/0xc40 [ 791.147127][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 791.147147][ C1] ? snd_hrtimer_stop+0x90/0x90 [ 791.147166][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 791.147181][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 791.147202][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 791.147227][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 791.147247][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 791.147266][ C1] [ 791.147270][ C1] [ 791.147275][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 791.147294][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 791.147313][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0b 74 cc f6 65 8b 05 4c a1 73 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 791.147326][ C1] RSP: 0018:ffffc90003867740 EFLAGS: 00000206 [ 791.147338][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 81d3fbdb3a680500 [ 791.147348][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 791.147359][ C1] RBP: ffffc900038677c0 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 791.147370][ C1] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: dffffc0000000000 [ 791.147381][ C1] R13: ffff8880b8f29b80 R14: ffff8880b8f29580 R15: 1ffff9200070cee8 [ 791.147399][ C1] ? _raw_spin_unlock+0x40/0x40 [ 791.147416][ C1] ? detach_timer+0x13d/0x2b0 [ 791.147431][ C1] __try_to_del_timer_sync+0x1c2/0x280 [ 791.147447][ C1] ? __timer_delete_sync+0x10e/0x2e0 [ 791.147460][ C1] __timer_delete_sync+0x223/0x2e0 [ 791.147475][ C1] ? timer_delete_sync+0x20/0x20 [ 791.147493][ C1] schedule_timeout+0x192/0x2d0 [ 791.147509][ C1] ? console_conditional_schedule+0x40/0x40 [ 791.147525][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 791.147542][ C1] ? update_process_times+0x1b0/0x1b0 [ 791.147558][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 791.147574][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 791.147590][ C1] ? snd_rawmidi_write+0x369/0xb90 [ 791.147604][ C1] snd_rawmidi_write+0x3b4/0xb90 [ 791.147623][ C1] ? snd_rawmidi_read+0x6d0/0x6d0 [ 791.147642][ C1] ? do_task_dead+0xd0/0xd0 [ 791.147657][ C1] ? end_current_label_crit_section+0x149/0x170 [ 791.147677][ C1] ? common_file_perm+0x198/0x1f0 [ 791.147695][ C1] ? fsnotify_perm+0x5d/0x5e0 [ 791.147715][ C1] ? security_file_permission+0x79/0xa0 [ 791.147736][ C1] do_iter_write+0x4ea/0xc30 [ 791.147760][ C1] ? snd_rawmidi_read+0x6d0/0x6d0 [ 791.147773][ C1] ? vfs_iter_write+0xa0/0xa0 [ 791.147790][ C1] ? __import_iovec+0x3fa/0x850 [ 791.147808][ C1] ? import_iovec+0x73/0xa0 [ 791.147822][ C1] do_writev+0x27f/0x480 [ 791.147844][ C1] ? do_readv+0x460/0x460 [ 791.147870][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 791.147887][ C1] ? lock_chain_count+0x20/0x20 [ 791.147905][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 791.147923][ C1] do_syscall_64+0x55/0xa0 [ 791.147935][ C1] ? clear_bhb_loop+0x40/0x90 [ 791.147952][ C1] ? clear_bhb_loop+0x40/0x90 [ 791.147970][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.147987][ C1] RIP: 0033:0x7fc6c999cdd9 [ 791.147999][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.148011][ C1] RSP: 002b:00007fc6ca7d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 791.148025][ C1] RAX: ffffffffffffffda RBX: 00007fc6c9c15fa0 RCX: 00007fc6c999cdd9 [ 791.148036][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 791.148045][ C1] RBP: 00007fc6c9a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 791.148054][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.148063][ C1] R13: 00007fc6c9c16038 R14: 00007fc6c9c15fa0 R15: 00007fffcca762b8 [ 791.148080][ C1] [ 791.785797][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.799044][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.800717][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 791.800732][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 791.800748][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 791.800757][ T29] Call Trace: [ 791.800764][ T29] [ 791.800770][ T29] dump_stack_lvl+0x18c/0x250 [ 791.800800][ T29] ? show_regs_print_info+0x20/0x20 [ 791.800824][ T29] ? load_image+0x420/0x420 [ 791.800854][ T29] panic+0x2dc/0x730 [ 791.800871][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 791.800889][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 791.800907][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 791.800929][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 791.800952][ T29] watchdog+0xf7c/0xf80 [ 791.800973][ T29] ? watchdog+0x1e1/0xf80 [ 791.800996][ T29] kthread+0x2fa/0x390 [ 791.801011][ T29] ? hungtask_pm_notify+0x90/0x90 [ 791.801030][ T29] ? kthread_blkcg+0xd0/0xd0 [ 791.801046][ T29] ret_from_fork+0x48/0x80 [ 791.801063][ T29] ? kthread_blkcg+0xd0/0xd0 [ 791.801079][ T29] ret_from_fork_asm+0x11/0x20 [ 791.801108][ T29] [ 791.807462][ T29] Kernel Offset: disabled