last executing test programs: 32m53.745883932s ago: executing program 2 (id=59): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000300)={0x1}) 32m53.640650576s ago: executing program 2 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r2, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d}) tkill(r1, 0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) 32m52.994411424s ago: executing program 2 (id=62): socket$unix(0x1, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x4e, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000100)=0x2, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={r5, r6, 0x1, 0x0, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 32m51.723390898s ago: executing program 2 (id=65): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000007c0)={0x9, 0x48574653, 0x2, @discrete={0x80000001, 0x2}}) 32m51.100746395s ago: executing program 2 (id=67): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0xf6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800849, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 32m49.913766156s ago: executing program 2 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x1c, 0x142, 0x0, 0x1, [@typed={0x15, 0x9, 0x0, 0x0, @binary="144fb351b34278c33100fb600d6ad78d8a"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 32m34.850419538s ago: executing program 32 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x1c, 0x142, 0x0, 0x1, [@typed={0x15, 0x9, 0x0, 0x0, @binary="144fb351b34278c33100fb600d6ad78d8a"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 10.432487699s ago: executing program 4 (id=4664): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setrlimit(0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200008, 0x0) 9.403778281s ago: executing program 4 (id=4666): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x578, 0x280, 0x1001, 0xfffffffc, 0xd968d5b908ac0cde, 0x0, {0xfffffffc, 0x8}, {0x350}, {0x7}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x40000, 0x0, 0x0, 0x2c, 0x4, 0x0, 0x6}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) 9.241179948s ago: executing program 1 (id=4667): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) 8.312779326s ago: executing program 1 (id=4668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 7.397827844s ago: executing program 1 (id=4672): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setresuid(0x0, 0xee00, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$sock_int(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 7.397679964s ago: executing program 4 (id=4673): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x62, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004282, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 7.397495794s ago: executing program 3 (id=4674): socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x8949, 0x0, 0xfffffffe]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 6.628905486s ago: executing program 3 (id=4675): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40400d4) 6.316838759s ago: executing program 3 (id=4676): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000640)={[&(0x7f00000000c0)='\x00']}, &(0x7f0000000780)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="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", 0x323) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000880)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x3, 0x3ff, 0x80, 0xff, 0x2, 0x0, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000000000000aaaaaaaa480028da48564500001c0039ef2f43fb7cc88f8415d55c6816000000001190780800001ce0000001000017c100089078a1443a49069cd897c4c738673348237dd1512d1887ec1120d9938b21ef97fa9be0668e30b4623bc8d14d59cb500cc8af05747bbc6c8628bbe940077b6aab4bf2705b877071"], 0x0) 6.100479387s ago: executing program 4 (id=4677): socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r5, 0x2007ffd) sendfile(r3, r4, 0x0, 0x1000a3) 5.124908798s ago: executing program 0 (id=4680): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) sysinfo(0x0) r5 = accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000300)=0x5, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"}) 5.07572878s ago: executing program 3 (id=4681): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 4.849792809s ago: executing program 1 (id=4682): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x578, 0x280, 0x1001, 0xfffffffc, 0xd968d5b908ac0cde, 0x0, {0xfffffffc, 0x8}, {0x350}, {0x7}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x40000, 0x0, 0x0, 0x2c, 0x4, 0x0, 0x6}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) 4.079348761s ago: executing program 0 (id=4683): socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x8949, 0x0, 0xfffffffe]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 2.868857371s ago: executing program 1 (id=4684): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setrlimit(0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200008, 0x0) 2.804339783s ago: executing program 0 (id=4686): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x62, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004282, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 1.830485904s ago: executing program 1 (id=4687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x25, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0xfffffffd, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12) ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0) 1.540784156s ago: executing program 3 (id=4688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r1, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d}) tkill(r0, 0x7) 1.464563979s ago: executing program 0 (id=4689): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) 1.011784308s ago: executing program 4 (id=4690): syz_emit_ethernet(0x36, &(0x7f0000000340)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e21, 0x3, 'sed\x00', 0xd, 0x400000a, 0x8239}, 0x2c) getpid() fanotify_mark(0xffffffffffffffff, 0x80, 0x28000018, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0xfff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x7ebc7abf7d80e4f2, 0x200, 0x77}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x4f21, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.011600278s ago: executing program 3 (id=4691): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000640)={[&(0x7f00000000c0)='\x00']}, &(0x7f0000000780)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="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", 0x323) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000880)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x3, 0x3ff, 0x80, 0xff, 0x2, 0x0, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000000000000aaaaaaaa480028da48564500001c0039ef2f43fb7cc88f8415d55c6816000000001190780800001ce0000001000017c100089078a1443a49069cd897c4c738673348237dd1512d1887ec1120d9938b21ef97fa9be0668e30b4623bc8d14d59cb500cc8af05747bbc6c8628bbe940077b6aab4bf2705b877071"], 0x0) 1.007619938s ago: executing program 0 (id=4698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r1, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d}) tkill(r0, 0x7) 906.471372ms ago: executing program 4 (id=4692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) sysinfo(0x0) r5 = accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000300)=0x5, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"}) 0s ago: executing program 0 (id=4693): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x578, 0x280, 0x1001, 0xfffffffc, 0xd968d5b908ac0cde, 0x0, {0xfffffffc, 0x8}, {0x350}, {0x7}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x40000, 0x0, 0x0, 0x2c, 0x4, 0x0, 0x6}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): class 2 [ 1567.120506][ T97] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1567.128756][ T97] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1567.137892][ T97] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1567.147244][ T97] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1567.156534][ T97] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1567.166475][ T97] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1567.167915][T15634] dvb_usb_ec168: probe of 5-1:0.1 failed with error -71 [ 1567.174482][ T97] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1567.174860][ T97] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1567.203388][ T97] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1567.212951][ T97] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1567.222648][ T97] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1567.234450][T15634] usb 5-1: USB disconnect, device number 25 [ 1567.254057][T17780] ldm_validate_partition_table(): Disk read failed. [ 1567.352866][T17780] Dev nbd1: unable to read RDB block 0 [ 1567.415671][T17780] nbd1: unable to read partition table [ 1567.706120][T17780] ldm_validate_partition_table(): Disk read failed. [ 1567.742790][T17780] Dev nbd1: unable to read RDB block 0 [ 1568.075155][T17780] nbd1: unable to read partition table [ 1572.201932][T18718] nbd4: detected capacity change from 0 to 63 [ 1572.225208][T18722] block nbd4: NBD_DISCONNECT [ 1572.240732][T18722] block nbd4: Disconnected due to user request. [ 1572.249676][T18722] block nbd4: shutting down sockets [ 1572.337626][T17780] udevd[17780]: setting mode of /dev/gsmtty48 to 020600 failed: No such file or directory [ 1572.348170][T17780] udevd[17780]: setting owner of /dev/gsmtty48 to uid=0, gid=0 failed: No such file or directory [ 1574.944988][ T5877] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1575.260135][ T5877] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1575.300861][ T5877] usb 1-1: config 0 has no interface number 0 [ 1575.335146][ T5877] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1575.378323][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.403450][ T5877] usb 1-1: Product: syz [ 1575.407694][ T5877] usb 1-1: Manufacturer: syz [ 1575.427740][ T5877] usb 1-1: SerialNumber: syz [ 1575.442899][ T5877] usb 1-1: config 0 descriptor?? [ 1575.623766][T18755] nbd1: detected capacity change from 0 to 63 [ 1575.674605][T18760] block nbd1: NBD_DISCONNECT [ 1575.748185][ T5877] dvb_usb_ec168: probe of 1-1:0.1 failed with error -71 [ 1575.776327][T18760] block nbd1: Disconnected due to user request. [ 1575.796888][ T5877] usb 1-1: USB disconnect, device number 42 [ 1575.807587][T18760] block nbd1: shutting down sockets [ 1576.164524][T17974] blk_print_req_error: 62 callbacks suppressed [ 1576.164546][T17974] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1576.179968][T17974] buffer_io_error: 138 callbacks suppressed [ 1576.179984][T17974] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1576.193825][T17974] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1576.201573][T17974] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1576.209445][T17974] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1576.273431][ T97] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1576.283114][ T97] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1576.290899][ T97] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1576.316622][ T97] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1576.333141][ T97] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1576.362422][T17974] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1576.371924][T17974] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1576.383764][T17974] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1576.391884][T17974] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1576.403748][T17974] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1576.413367][T17974] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1576.423791][T17974] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1576.465494][ T97] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1576.487499][T17780] ldm_validate_partition_table(): Disk read failed. [ 1576.495502][ T97] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1576.504951][ T97] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1576.518231][T17780] Dev nbd1: unable to read RDB block 0 [ 1576.530973][T17780] nbd1: unable to read partition table [ 1576.597684][T17780] ldm_validate_partition_table(): Disk read failed. [ 1576.647724][T17780] Dev nbd1: unable to read RDB block 0 [ 1576.675511][T17780] nbd1: unable to read partition table [ 1579.934444][T18790] nbd4: detected capacity change from 0 to 63 [ 1579.964833][T18797] block nbd4: NBD_DISCONNECT [ 1579.969715][T18797] block nbd4: Disconnected due to user request. [ 1579.977012][T18797] block nbd4: shutting down sockets [ 1580.166701][T17732] ldm_validate_partition_table(): Disk read failed. [ 1580.175289][T17732] Dev nbd4: unable to read RDB block 0 [ 1580.182899][T17732] nbd4: unable to read partition table [ 1580.204030][T17732] ldm_validate_partition_table(): Disk read failed. [ 1580.349543][ T5857] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1580.382784][T17732] Dev nbd4: unable to read RDB block 0 [ 1580.498708][T17732] nbd4: unable to read partition table [ 1580.631540][ T5857] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1580.813778][ T5857] usb 2-1: config 0 has no interface number 0 [ 1580.830092][ T5857] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1580.839426][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.847581][ T5857] usb 2-1: Product: syz [ 1580.851948][ T5857] usb 2-1: Manufacturer: syz [ 1580.865664][ T5857] usb 2-1: SerialNumber: syz [ 1580.884205][ T5857] usb 2-1: config 0 descriptor?? [ 1581.115526][ T5857] dvb_usb_ec168: probe of 2-1:0.1 failed with error -71 [ 1581.310120][ T5857] usb 2-1: USB disconnect, device number 17 [ 1584.728538][T18834] nbd3: detected capacity change from 0 to 63 [ 1584.746136][T18836] block nbd3: NBD_DISCONNECT [ 1584.751248][T18836] block nbd3: Disconnected due to user request. [ 1584.764245][T18836] block nbd3: shutting down sockets [ 1590.393458][T18875] nbd0: detected capacity change from 0 to 63 [ 1590.679178][ T5791] block nbd0: Receive control failed (result -32) [ 1590.946538][T17974] block nbd0: Dead connection, failed to find a fallback [ 1590.961550][T17974] block nbd0: shutting down sockets [ 1590.967521][T17974] blk_print_req_error: 215 callbacks suppressed [ 1590.967536][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1590.984166][T17974] buffer_io_error: 286 callbacks suppressed [ 1590.984179][T17974] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1590.999299][T17974] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1591.007128][T17974] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1591.015138][T17974] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1591.023276][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1591.032333][T17974] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1591.040182][T17974] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1591.047971][T17974] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1591.055747][T17974] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1591.064370][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1591.073573][T17974] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1591.081294][T17974] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1591.089266][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1591.098614][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1591.108061][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1591.117323][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1591.126541][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1591.135767][T17974] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1591.144942][T17780] ldm_validate_partition_table(): Disk read failed. [ 1591.151878][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1591.162361][T17780] Dev nbd0: unable to read RDB block 0 [ 1591.175442][T17780] nbd0: unable to read partition table [ 1591.238783][T17780] ldm_validate_partition_table(): Disk read failed. [ 1591.315540][T17780] Dev nbd0: unable to read RDB block 0 [ 1591.326190][T17780] nbd0: unable to read partition table [ 1594.627571][T18916] nbd1: detected capacity change from 0 to 63 [ 1594.636190][ T5791] block nbd1: Receive control failed (result -32) [ 1594.680937][T17974] block nbd1: Dead connection, failed to find a fallback [ 1594.689825][T17974] block nbd1: shutting down sockets [ 1594.705567][T17732] ldm_validate_partition_table(): Disk read failed. [ 1594.724939][T17732] Dev nbd1: unable to read RDB block 0 [ 1594.732249][T17732] nbd1: unable to read partition table [ 1594.772914][T17732] ldm_validate_partition_table(): Disk read failed. [ 1594.814084][T17732] Dev nbd1: unable to read RDB block 0 [ 1594.849132][T17732] nbd1: unable to read partition table [ 1597.355145][T18946] nbd4: detected capacity change from 0 to 63 [ 1597.362856][ T5791] block nbd4: Receive control failed (result -32) [ 1597.364186][ T97] block nbd4: Send control failed (result -32) [ 1597.383308][ T97] block nbd4: Request send failed, requeueing [ 1597.393976][T18084] block nbd4: Dead connection, failed to find a fallback [ 1597.402221][T18084] block nbd4: shutting down sockets [ 1597.407799][T18084] blk_print_req_error: 189 callbacks suppressed [ 1597.407814][T18084] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1597.425605][T18084] buffer_io_error: 286 callbacks suppressed [ 1597.425619][T18084] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1597.439567][T18084] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1597.448813][T18084] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1597.456922][T18084] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1597.464739][T18084] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1597.474795][T18084] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1597.483923][T18084] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1597.491687][T18084] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1597.499609][T18084] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1597.507473][T18084] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1597.516082][T18084] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1597.525243][T18084] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1597.533102][T18084] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1597.542163][T18084] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1597.550170][T17974] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1597.559558][T17974] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1597.569154][T17974] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1597.578682][T17974] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1597.587883][T17974] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1597.681705][T17732] ldm_validate_partition_table(): Disk read failed. [ 1597.706472][T17732] Dev nbd4: unable to read RDB block 0 [ 1597.724074][T17732] nbd4: unable to read partition table [ 1597.739206][T17732] ldm_validate_partition_table(): Disk read failed. [ 1597.751808][T17732] Dev nbd4: unable to read RDB block 0 [ 1597.759421][T17732] nbd4: unable to read partition table [ 1601.922844][T18981] block nbd4: NBD_DISCONNECT [ 1601.941380][T18981] block nbd4: Send disconnect failed -32 [ 1604.063068][ T9412] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1604.368736][ T9412] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1605.026511][ T9412] usb 4-1: config 0 has no interface number 0 [ 1605.454359][ T9412] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1605.480099][ T9412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.649794][ T9412] usb 4-1: Product: syz [ 1605.654270][ T9412] usb 4-1: Manufacturer: syz [ 1605.665720][ T9412] usb 4-1: SerialNumber: syz [ 1605.677355][ T9412] usb 4-1: config 0 descriptor?? [ 1606.266246][ T9412] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1606.295520][ T9412] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1606.430661][ T9412] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1606.449782][ T9412] usb 4-1: media controller created [ 1606.543588][ T9412] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1607.579424][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.665546][ T9412] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1609.296708][ T9412] usb 4-1: USB disconnect, device number 23 [ 1611.788980][T19061] block nbd1: NBD_DISCONNECT [ 1611.820340][T19061] block nbd1: Send disconnect failed -32 [ 1613.523075][T14569] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1613.854732][T14569] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1613.863074][T14569] usb 2-1: config 0 has no interface number 0 [ 1613.872136][T14569] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1613.881695][T14569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.890006][T14569] usb 2-1: Product: syz [ 1613.900795][T14569] usb 2-1: Manufacturer: syz [ 1613.905708][T14569] usb 2-1: SerialNumber: syz [ 1613.931226][T14569] usb 2-1: config 0 descriptor?? [ 1614.427186][T14569] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1614.760684][T14569] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1614.819562][T14569] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1614.867814][T14569] usb 2-1: media controller created [ 1614.992188][T14569] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1615.303760][T14569] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1615.985559][T14569] usb 2-1: USB disconnect, device number 18 [ 1617.304065][T19108] block nbd4: NBD_DISCONNECT [ 1619.145364][T14569] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1619.345356][T14569] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1619.364568][T14569] usb 4-1: config 0 has no interface number 0 [ 1619.465556][T14569] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1619.523990][T14569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.006353][T14569] usb 4-1: Product: syz [ 1620.010599][T14569] usb 4-1: Manufacturer: syz [ 1620.024847][T14569] usb 4-1: SerialNumber: syz [ 1620.048303][T14569] usb 4-1: config 0 descriptor?? [ 1620.053967][ T5855] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1620.157329][T19137] nbd: nbd0 already in use [ 1620.162605][T19137] block nbd0: NBD_DISCONNECT [ 1620.170466][T19137] block nbd0: Send disconnect failed -32 [ 1620.353531][ T5855] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1620.453691][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.497112][T14569] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1620.716436][ T5855] usb 2-1: config 0 descriptor?? [ 1620.738760][T14569] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1620.861734][T14569] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1620.885358][T14569] usb 4-1: media controller created [ 1620.923832][T14569] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1621.000255][T14569] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1621.063126][T14569] usb 4-1: USB disconnect, device number 24 [ 1621.893747][ T5855] ath6kl: Failed to submit usb control message: -110 [ 1621.933151][ T5855] ath6kl: unable to send the bmi data to the device: -110 [ 1621.940565][ T5855] ath6kl: Unable to send get target info: -110 [ 1622.023322][ T5855] ath6kl: Failed to init ath6kl core: -110 [ 1622.042694][ T5855] ath6kl_usb: probe of 2-1:0.0 failed with error -110 [ 1622.115678][ T5855] usb 2-1: USB disconnect, device number 19 [ 1623.328573][T19170] fuse: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙0000000000000000000000000000000000000000' [ 1624.372047][T19176] block nbd3: NBD_DISCONNECT [ 1625.593188][ T6956] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1625.975776][ T6956] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1625.984556][ T6956] usb 2-1: config 0 has no interface number 0 [ 1626.012215][ T6956] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1626.022042][ T6956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.030315][ T6956] usb 2-1: Product: syz [ 1626.039647][ T6956] usb 2-1: Manufacturer: syz [ 1626.046748][ T6956] usb 2-1: SerialNumber: syz [ 1626.075468][ T6956] usb 2-1: config 0 descriptor?? [ 1626.350456][ T6956] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1626.396584][ T6956] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1626.410152][ T6956] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1626.422703][ T6956] usb 2-1: media controller created [ 1626.648886][ T6956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1627.371362][T19201] fuse: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙0000000000000000000000000000000000000000' [ 1627.403465][T15634] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1627.794828][T15634] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1627.933010][T15634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.083717][ T6956] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1628.168916][T15634] usb 5-1: config 0 descriptor?? [ 1628.248445][ T6956] usb 2-1: USB disconnect, device number 20 [ 1629.254172][T15634] ath6kl: Failed to submit usb control message: -110 [ 1629.263433][T15634] ath6kl: unable to send the bmi data to the device: -110 [ 1629.270612][T15634] ath6kl: Unable to send get target info: -110 [ 1629.373655][T15634] ath6kl: Failed to init ath6kl core: -110 [ 1629.380891][T15634] ath6kl_usb: probe of 5-1:0.0 failed with error -110 [ 1629.619431][T15634] usb 5-1: USB disconnect, device number 26 [ 1631.583293][T19242] fuse: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙0000000000000000000000000000000000000000' [ 1633.523562][T15634] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1634.643754][T15634] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1634.653259][T15634] usb 5-1: config 0 has no interface number 0 [ 1634.705325][T15634] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1634.723831][T15634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.732410][T15634] usb 5-1: Product: syz [ 1634.828400][T15634] usb 5-1: Manufacturer: syz [ 1634.962154][T15634] usb 5-1: SerialNumber: syz [ 1635.014336][T15634] usb 5-1: config 0 descriptor?? [ 1635.318027][T15634] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1635.344722][T15634] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1635.371451][T15634] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1635.392243][T15634] usb 5-1: media controller created [ 1635.419261][T15634] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1635.571698][T19277] fuse: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙0000000000000000000000000000000000000000' [ 1636.599861][T15634] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1637.002263][T15634] usb 5-1: USB disconnect, device number 27 [ 1638.496484][T19309] fuse: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙0000000000000000000000000000000000000000' [ 1641.388170][T19352] fuse: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙0000000000000000000000000000000000000000' [ 1644.332773][T15634] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1644.563891][T15634] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1644.577247][T15634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.007338][T15634] usb 5-1: config 0 descriptor?? [ 1645.938595][T15634] ath6kl: Failed to submit usb control message: -71 [ 1645.958493][T15634] ath6kl: unable to send the bmi data to the device: -71 [ 1645.967061][T15634] ath6kl: Unable to send get target info: -71 [ 1645.981407][T15634] ath6kl: Failed to init ath6kl core: -71 [ 1645.989803][T15634] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 1646.013939][T15634] usb 5-1: USB disconnect, device number 28 [ 1649.744605][ T9412] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1650.006208][T19434] fuse: Bad value for 'fd' [ 1650.196315][ T9412] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1650.206712][ T9412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.223814][ T9412] usb 1-1: config 0 descriptor?? [ 1650.773172][ T5857] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1650.874150][ T9412] ath6kl: Failed to submit usb control message: -71 [ 1650.939679][ T9412] ath6kl: unable to send the bmi data to the device: -71 [ 1650.974676][ T5857] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1650.990406][ T5857] usb 2-1: config 0 has no interface number 0 [ 1651.008315][ T9412] ath6kl: Unable to send get target info: -71 [ 1651.010625][ T5857] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1651.032592][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.041466][ T5857] usb 2-1: Product: syz [ 1651.045756][ T5857] usb 2-1: Manufacturer: syz [ 1651.052698][ T5857] usb 2-1: SerialNumber: syz [ 1651.095026][ T9412] ath6kl: Failed to init ath6kl core: -71 [ 1651.106872][ T5857] usb 2-1: config 0 descriptor?? [ 1651.135150][ T9412] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 1651.237784][ T9412] usb 1-1: USB disconnect, device number 43 [ 1651.331948][ T5857] dvb_usb_ec168: probe of 2-1:0.1 failed with error -32 [ 1651.356208][ T5857] usb 2-1: USB disconnect, device number 21 [ 1653.767758][T19468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3621'. [ 1655.175932][ T5876] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1655.226361][T19482] nbd: must specify at least one socket [ 1655.366035][ T5876] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1655.381341][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.399861][ T5876] usb 2-1: config 0 descriptor?? [ 1655.513060][ T5855] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1655.713122][ T5855] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1655.731524][ T5855] usb 1-1: config 0 has no interface number 0 [ 1655.747628][ T5855] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1655.757448][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.765914][ T5855] usb 1-1: Product: syz [ 1655.770127][ T5855] usb 1-1: Manufacturer: syz [ 1655.775307][ T5855] usb 1-1: SerialNumber: syz [ 1655.792778][ T5855] usb 1-1: config 0 descriptor?? [ 1656.015082][ T5876] ath6kl: Failed to submit usb control message: -71 [ 1656.016388][ T5855] dvb_usb_ec168: probe of 1-1:0.1 failed with error -32 [ 1656.052297][ T5876] ath6kl: unable to send the bmi data to the device: -71 [ 1656.072059][ T5855] usb 1-1: USB disconnect, device number 44 [ 1656.073054][ T5876] ath6kl: Unable to send get target info: -71 [ 1656.099628][ T5876] ath6kl: Failed to init ath6kl core: -71 [ 1656.117326][ T5876] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1656.136115][ T5876] usb 2-1: USB disconnect, device number 22 [ 1658.056239][T19517] nbd: must specify at least one socket [ 1659.043126][ T5877] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1659.257837][ T5877] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1659.274963][ T5877] usb 1-1: config 0 has no interface number 0 [ 1659.292286][ T5877] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1659.306344][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.326494][ T5877] usb 1-1: Product: syz [ 1659.331474][ T5877] usb 1-1: Manufacturer: syz [ 1659.337549][ T5877] usb 1-1: SerialNumber: syz [ 1659.351004][ T5877] usb 1-1: config 0 descriptor?? [ 1659.467784][T19536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3642'. [ 1659.572780][ T5877] dvb_usb_ec168: probe of 1-1:0.1 failed with error -32 [ 1659.596523][ T5877] usb 1-1: USB disconnect, device number 45 [ 1660.513196][ T5877] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1661.618428][ T5877] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1661.650483][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.831292][ T5877] usb 1-1: config 0 descriptor?? [ 1662.214493][T19552] nbd: must specify at least one socket [ 1663.095916][ T5877] ath6kl: Failed to submit usb control message: -110 [ 1663.104021][ T5877] ath6kl: unable to send the bmi data to the device: -110 [ 1663.112593][ T5877] ath6kl: Unable to send get target info: -110 [ 1663.124243][T19278] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1663.171522][ T5877] ath6kl: Failed to init ath6kl core: -110 [ 1663.191451][ T5877] ath6kl_usb: probe of 1-1:0.0 failed with error -110 [ 1663.267991][ T5877] usb 1-1: USB disconnect, device number 46 [ 1663.323427][T19278] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1663.331587][T19278] usb 5-1: config 0 has no interface number 0 [ 1663.345569][T19278] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1663.364985][T19278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.378514][T19278] usb 5-1: Product: syz [ 1663.382785][T19278] usb 5-1: Manufacturer: syz [ 1663.392097][T19278] usb 5-1: SerialNumber: syz [ 1663.407895][T19278] usb 5-1: config 0 descriptor?? [ 1663.696726][T19278] dvb_usb_ec168: probe of 5-1:0.1 failed with error -32 [ 1663.709346][T19278] usb 5-1: USB disconnect, device number 29 [ 1664.030077][T19580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3655'. [ 1666.289975][T19589] nbd: must specify a size in bytes for the device [ 1667.683261][T13061] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1668.177159][T13061] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1668.223079][T13061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.277270][ T5877] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1668.318810][T13061] usb 5-1: config 0 descriptor?? [ 1668.675929][ T5877] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1668.705220][ T5877] usb 4-1: config 0 has no interface number 0 [ 1668.776454][ T5877] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1668.827618][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.895846][ T5877] usb 4-1: Product: syz [ 1668.922687][ T5877] usb 4-1: Manufacturer: syz [ 1668.967339][ T5877] usb 4-1: SerialNumber: syz [ 1669.017442][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.077446][ T5877] usb 4-1: config 0 descriptor?? [ 1669.360100][ T5877] dvb_usb_ec168: probe of 4-1:0.1 failed with error -32 [ 1669.388057][T19620] nbd: must specify a size in bytes for the device [ 1669.431264][ T5877] usb 4-1: USB disconnect, device number 25 [ 1669.559554][T13061] ath6kl: Failed to submit usb control message: -71 [ 1669.568164][T13061] ath6kl: unable to send the bmi data to the device: -71 [ 1669.575821][T13061] ath6kl: Unable to send get target info: -71 [ 1669.584782][T13061] ath6kl: Failed to init ath6kl core: -71 [ 1669.591824][T13061] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 1669.604806][T13061] usb 5-1: USB disconnect, device number 30 [ 1672.932074][T19650] nbd: must specify a size in bytes for the device [ 1674.023204][ T9412] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1674.539429][ T9412] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1674.650712][ T9412] usb 1-1: config 0 has no interface number 0 [ 1674.682989][ T5877] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1674.746556][ T9412] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1674.846595][ T9412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.858059][ T9412] usb 1-1: Product: syz [ 1674.862307][ T9412] usb 1-1: Manufacturer: syz [ 1674.871553][ T9412] usb 1-1: SerialNumber: syz [ 1674.891886][ T9412] usb 1-1: config 0 descriptor?? [ 1674.936291][ T5877] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1674.950677][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.970640][ T5877] usb 2-1: config 0 descriptor?? [ 1675.383966][ T9412] dvb_usb_ec168: probe of 1-1:0.1 failed with error -32 [ 1675.567988][ T9412] usb 1-1: USB disconnect, device number 47 [ 1675.896444][ T5877] ath6kl: Failed to submit usb control message: -71 [ 1675.909078][ T5877] ath6kl: unable to send the bmi data to the device: -71 [ 1675.919126][ T5877] ath6kl: Unable to send get target info: -71 [ 1675.935873][ T5877] ath6kl: Failed to init ath6kl core: -71 [ 1675.943932][ T5877] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1675.974792][ T5877] usb 2-1: USB disconnect, device number 23 [ 1676.044741][T19682] nbd0: detected capacity change from 0 to 63 [ 1676.053235][ T5791] block nbd0: Receive control failed (result -104) [ 1676.059387][T18084] block nbd0: Send control failed (result -32) [ 1676.066185][T18084] block nbd0: Request send failed, requeueing [ 1676.072518][T18084] block nbd0: Dead connection, failed to find a fallback [ 1676.079823][T18084] block nbd0: shutting down sockets [ 1676.085148][T18084] blk_print_req_error: 96 callbacks suppressed [ 1676.085160][T18084] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1676.100702][T18084] buffer_io_error: 138 callbacks suppressed [ 1676.100716][T18084] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1676.103542][T17974] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1676.123682][T17974] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1676.131458][T17974] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1679.924265][T19716] nbd1: detected capacity change from 0 to 63 [ 1680.023349][T13061] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1680.071455][ T5791] block nbd1: Receive control failed (result -32) [ 1680.132042][T17974] block nbd1: Dead connection, failed to find a fallback [ 1680.139978][T17974] block nbd1: shutting down sockets [ 1680.145758][T17974] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1680.156246][T17974] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1680.173924][T17974] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1680.185457][T17974] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1680.198953][T17974] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1680.208530][T17974] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1680.218149][T17974] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1680.227188][T17974] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1680.231221][T13061] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1680.235510][T17974] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1680.288121][T17974] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1680.343610][T17974] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1680.353240][T17974] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1680.375563][T17974] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1680.377249][T13061] usb 4-1: config 0 has no interface number 0 [ 1680.385598][T17974] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1680.452261][T13061] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1680.455849][T17974] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1680.463060][T13061] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.505895][T17780] ldm_validate_partition_table(): Disk read failed. [ 1680.551306][T17780] Dev nbd1: unable to read RDB block 0 [ 1680.562965][T13061] usb 4-1: Product: syz [ 1680.567173][T13061] usb 4-1: Manufacturer: syz [ 1680.580718][T17780] nbd1: unable to read partition table [ 1680.591474][T13061] usb 4-1: SerialNumber: syz [ 1680.599033][T13061] usb 4-1: config 0 descriptor?? [ 1680.823739][T17780] ldm_validate_partition_table(): Disk read failed. [ 1680.834195][T13061] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1680.844961][T17780] Dev nbd1: unable to read RDB block 0 [ 1680.872576][T13061] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 1680.874773][T17780] nbd1: unable to read partition table [ 1680.911987][T13061] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 1681.432989][ T5877] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1681.769489][ T5877] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1681.778709][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.867367][ T5877] usb 2-1: config 0 descriptor?? [ 1683.027866][ T5877] ath6kl: Failed to submit usb control message: -110 [ 1683.053023][ T5877] ath6kl: unable to send the bmi data to the device: -110 [ 1683.060253][ T5877] ath6kl: Unable to send get target info: -110 [ 1683.115859][ T5877] ath6kl: Failed to init ath6kl core: -110 [ 1683.143450][ T5877] ath6kl_usb: probe of 2-1:0.0 failed with error -110 [ 1683.260933][ T5876] usb 2-1: USB disconnect, device number 24 [ 1683.464222][T19747] nbd2: detected capacity change from 0 to 63 [ 1683.477558][ T5791] block nbd2: Receive control failed (result -104) [ 1687.456699][T19780] nbd: must specify at least one socket [ 1687.466649][T19780] block nbd1: NBD_DISCONNECT [ 1687.471365][T19780] block nbd1: Send disconnect failed -32 [ 1688.287228][ T5855] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1688.520037][ T5855] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1688.594531][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.895475][ T5855] usb 5-1: config 0 descriptor?? [ 1689.654325][ C0] hrtimer: interrupt took 46737 ns [ 1689.973768][ T5855] ath6kl: Failed to submit usb control message: -110 [ 1690.002410][ T5855] ath6kl: unable to send the bmi data to the device: -110 [ 1690.035969][ T5855] ath6kl: Unable to send get target info: -110 [ 1690.112982][ T5855] ath6kl: Failed to init ath6kl core: -110 [ 1690.142638][ T5855] ath6kl_usb: probe of 5-1:0.0 failed with error -110 [ 1690.396693][ T5855] usb 5-1: USB disconnect, device number 31 [ 1690.871299][T19818] nbd: must specify at least one socket [ 1690.893217][T14569] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1691.183738][T14569] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1691.257353][T14569] usb 1-1: config 0 has no interface number 0 [ 1691.449770][T14569] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1691.589996][T14569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.599348][T14569] usb 1-1: Product: syz [ 1691.607358][T14569] usb 1-1: Manufacturer: syz [ 1691.613100][T14569] usb 1-1: SerialNumber: syz [ 1691.633541][T14569] usb 1-1: config 0 descriptor?? [ 1691.988466][T14569] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1693.742218][T19848] nbd: must specify at least one socket [ 1694.303884][ T5876] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1694.580989][ T5876] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1694.683160][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.728286][ T5876] usb 2-1: config 0 descriptor?? [ 1696.087423][ T5876] ath6kl: Failed to submit usb control message: -110 [ 1696.123425][ T5876] ath6kl: unable to send the bmi data to the device: -110 [ 1696.153076][ T5876] ath6kl: Unable to send get target info: -110 [ 1696.193245][ T5876] ath6kl: Failed to init ath6kl core: -110 [ 1696.233511][ T5876] ath6kl_usb: probe of 2-1:0.0 failed with error -110 [ 1696.267532][ T5876] usb 2-1: USB disconnect, device number 25 [ 1697.909287][T19887] nbd: nbd0 already in use [ 1697.934719][T19887] block nbd0: NBD_DISCONNECT [ 1697.969457][T19887] block nbd0: Send disconnect failed -32 [ 1697.996299][ C1] blk_print_req_error: 99 callbacks suppressed [ 1697.996322][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1698.011660][ C1] buffer_io_error: 141 callbacks suppressed [ 1698.011673][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1698.064865][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1698.131084][T17974] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1698.273016][T17974] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1698.281952][T17974] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1698.293485][T17974] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1698.301718][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1698.310910][T17974] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1698.318748][T17974] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1698.326575][T17974] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1698.334909][T17974] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1698.343047][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1698.352119][T17974] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1698.360443][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1698.372711][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1698.383274][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1698.392668][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1698.402509][T17732] ldm_validate_partition_table(): Disk read failed. [ 1698.409420][T17974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1698.453237][T18084] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1698.473664][T17732] Dev nbd0: unable to read RDB block 0 [ 1698.502693][T17732] nbd0: unable to read partition table [ 1698.654162][T17732] ldm_validate_partition_table(): Disk read failed. [ 1698.731696][T17732] Dev nbd0: unable to read RDB block 0 [ 1698.753271][T17732] nbd0: unable to read partition table [ 1699.711086][T19912] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1699.733606][T19563] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1699.937278][T19563] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1700.000549][T19563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.505556][T19563] usb 2-1: config 0 descriptor?? [ 1701.659958][T19563] ath6kl: Failed to submit usb control message: -110 [ 1701.683531][T19563] ath6kl: unable to send the bmi data to the device: -110 [ 1701.690880][T19563] ath6kl: Unable to send get target info: -110 [ 1701.727621][T19563] ath6kl: Failed to init ath6kl core: -110 [ 1701.738736][T19563] ath6kl_usb: probe of 2-1:0.0 failed with error -110 [ 1701.983557][ T5855] usb 2-1: USB disconnect, device number 26 [ 1702.213365][T19929] block nbd3: NBD_DISCONNECT [ 1708.234375][T19990] nbd1: detected capacity change from 0 to 63 [ 1708.247685][ T5791] block nbd1: Receive control failed (result -104) [ 1708.255303][T18084] block nbd1: Dead connection, failed to find a fallback [ 1708.262390][T18084] block nbd1: shutting down sockets [ 1708.267722][T18084] blk_print_req_error: 77 callbacks suppressed [ 1708.267736][T18084] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1708.283668][T18084] buffer_io_error: 135 callbacks suppressed [ 1708.283680][T18084] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1708.298418][T18084] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1708.307254][T18084] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1710.504537][T20017] nbd0: detected capacity change from 0 to 63 [ 1710.517375][ T5791] block nbd0: Receive control failed (result -104) [ 1710.593190][T19563] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1710.792215][T20019] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1710.805139][T19563] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1710.822744][T19563] usb 5-1: config 0 has no interface number 0 [ 1710.853646][T19563] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1710.910521][T19563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.947810][T19563] usb 5-1: Product: syz [ 1710.953410][T19563] usb 5-1: Manufacturer: syz [ 1710.958194][T19563] usb 5-1: SerialNumber: syz [ 1710.973144][T19563] usb 5-1: config 0 descriptor?? [ 1711.193818][T19563] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1711.215671][T19563] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1711.228619][T19563] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1711.239717][T19563] usb 5-1: media controller created [ 1711.286704][T19563] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1711.556840][T19563] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1711.671060][T19563] usb 5-1: USB disconnect, device number 32 [ 1713.813545][T17974] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 30 seconds [ 1714.151349][T20052] nbd: nbd1 already in use [ 1714.213141][ T5877] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1714.524985][ T5877] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1714.543374][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.576489][ T5877] usb 5-1: config 0 descriptor?? [ 1715.687792][ T5877] ath6kl: Failed to submit usb control message: -71 [ 1715.694953][ T5877] ath6kl: unable to send the bmi data to the device: -71 [ 1715.702045][ T5877] ath6kl: Unable to send get target info: -71 [ 1715.713175][ T5877] ath6kl: Failed to init ath6kl core: -71 [ 1715.720283][ T5877] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 1715.731978][ T5877] usb 5-1: USB disconnect, device number 33 [ 1716.694091][T20081] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1716.764516][T20079] nbd3: detected capacity change from 0 to 63 [ 1716.850346][ T5791] block nbd3: Receive control failed (result -104) [ 1717.973964][T20093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.179105][T20093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.347603][T20093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.485371][T20093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.524680][T20111] nbd: nbd1 already in use [ 1721.883754][T20093] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.856075][T20093] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.886402][T20093] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.902795][T20093] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.957125][T20145] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1725.077548][T20152] nbd4: detected capacity change from 0 to 63 [ 1725.086462][ T5791] block nbd4: Receive control failed (result -32) [ 1725.949936][T18084] block nbd4: Dead connection, failed to find a fallback [ 1725.957616][T18084] block nbd4: shutting down sockets [ 1725.962867][T18084] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1725.973318][T18084] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1725.989913][T17974] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1726.062970][T17974] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1726.070852][T17974] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1726.086023][T17974] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1726.114920][T18084] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1726.124739][T18084] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1726.137998][T18084] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1726.151304][T18084] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1726.159196][T18084] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1726.171261][T18084] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1726.181131][T18084] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1726.189143][T18084] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1726.200691][T18084] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1726.210863][T18084] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1726.221537][T18084] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1726.232932][T18084] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1726.243048][T18084] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1726.284523][T17974] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1726.372181][T17653] ldm_validate_partition_table(): Disk read failed. [ 1726.502049][T17653] Dev nbd4: unable to read RDB block 0 [ 1726.603631][ T5857] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1726.707347][T17653] nbd4: unable to read partition table [ 1726.724369][T17653] ldm_validate_partition_table(): Disk read failed. [ 1726.780284][T17653] Dev nbd4: unable to read RDB block 0 [ 1726.814936][T17653] nbd4: unable to read partition table [ 1726.842038][ T5857] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1726.887364][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.912051][ T5857] usb 5-1: config 0 descriptor?? [ 1727.835504][T20176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.060035][ T5857] ath6kl: Failed to submit usb control message: -110 [ 1728.081168][ T5857] ath6kl: unable to send the bmi data to the device: -110 [ 1728.108886][ T5857] ath6kl: Unable to send get target info: -110 [ 1728.148507][ T5857] ath6kl: Failed to init ath6kl core: -110 [ 1728.168816][ T5857] ath6kl_usb: probe of 5-1:0.0 failed with error -110 [ 1728.218544][T20176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.283338][ T5857] usb 5-1: USB disconnect, device number 34 [ 1728.970535][T20176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.254244][T20185] nbd: nbd3 already in use [ 1730.456461][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.545256][T20176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.764819][T20176] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.786546][T20176] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.882119][T20202] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1731.890118][T20176] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.929705][T20176] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.585824][ T5959] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1733.609383][T20223] nbd: nbd0 already in use [ 1734.642079][ T5959] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1734.672185][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.864080][ T5959] usb 5-1: config 0 descriptor?? [ 1737.113502][ T5959] ath6kl: Failed to submit usb control message: -71 [ 1737.216105][ T5959] ath6kl: unable to send the bmi data to the device: -71 [ 1737.244224][ T5959] ath6kl: Unable to send get target info: -71 [ 1737.259420][ T5959] ath6kl: Failed to init ath6kl core: -71 [ 1737.310244][ T5959] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 1737.321767][ T5959] usb 5-1: USB disconnect, device number 35 [ 1737.706878][T20248] tmpfs: Bad value for 'mpol' [ 1738.803310][T20260] overlayfs: overlapping lowerdir path [ 1738.976510][T18084] block nbd1: Possible stuck request ffff888021b8ca00: control (read@0,1024B). Runtime 30 seconds [ 1739.759473][T20267] nbd: nbd1 already in use [ 1741.100564][T18084] block nbd0: Possible stuck request ffff888021b2b000: control (read@0,1024B). Runtime 30 seconds [ 1741.111910][T18084] block nbd0: Possible stuck request ffff888021b2b200: control (read@1024,1024B). Runtime 30 seconds [ 1741.132787][T18084] block nbd0: Possible stuck request ffff888021b2b400: control (read@2048,1024B). Runtime 30 seconds [ 1741.145233][T18084] block nbd0: Possible stuck request ffff888021b2b600: control (read@3072,1024B). Runtime 30 seconds [ 1741.421700][T20282] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1743.093031][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3866'. [ 1744.543407][T17974] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 60 seconds [ 1745.293175][ T6956] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1745.379371][T20312] tmpfs: Bad value for 'mpol' [ 1745.609131][ T6956] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1745.618661][ T6956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.638380][ T6956] usb 2-1: config 0 descriptor?? [ 1746.368872][T20318] overlayfs: overlapping lowerdir path [ 1746.375925][T14569] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1746.377622][T13061] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1746.501320][T13061] dvb_usb_ec168: probe of 4-1:0.1 failed with error -110 [ 1746.539132][T13061] usb 4-1: USB disconnect, device number 26 [ 1746.979862][T14569] dvb_usb_ec168: probe of 1-1:0.1 failed with error -2 [ 1747.121501][T14569] usb 1-1: USB disconnect, device number 48 [ 1747.152070][T18084] block nbd3: Possible stuck request ffff88802207e200: control (read@0,1024B). Runtime 30 seconds [ 1747.163168][T18084] block nbd3: Possible stuck request ffff88802207e400: control (read@1024,1024B). Runtime 30 seconds [ 1747.174524][T18084] block nbd3: Possible stuck request ffff88802207e600: control (read@2048,1024B). Runtime 30 seconds [ 1747.188013][T18084] block nbd3: Possible stuck request ffff88802207e800: control (read@3072,1024B). Runtime 30 seconds [ 1747.201134][ T6956] ath6kl: Failed to submit usb control message: -71 [ 1747.207964][ T6956] ath6kl: unable to send the bmi data to the device: -71 [ 1747.215231][ T6956] ath6kl: Unable to send get target info: -71 [ 1747.237736][ T6956] ath6kl: Failed to init ath6kl core: -71 [ 1747.245781][ T6956] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1747.259242][ T6956] usb 2-1: USB disconnect, device number 27 [ 1747.276666][T20321] nbd: nbd4 already in use [ 1747.296587][T20321] nbd: must specify an index to disconnect [ 1750.310429][T20357] tmpfs: Bad value for 'mpol' [ 1751.359935][T20364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3884'. [ 1752.694442][T20368] nbd: nbd0 already in use [ 1752.704395][T20368] nbd: must specify an index to disconnect [ 1753.493038][T20262] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1753.752635][T20262] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1753.782173][T20262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.897356][T20262] usb 5-1: config 0 descriptor?? [ 1754.511392][T20262] ath6kl: Failed to submit usb control message: -71 [ 1754.518568][T20262] ath6kl: unable to send the bmi data to the device: -71 [ 1754.525777][T20262] ath6kl: Unable to send get target info: -71 [ 1754.541443][T20262] ath6kl: Failed to init ath6kl core: -71 [ 1754.561571][T20262] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 1754.713644][T20262] usb 5-1: USB disconnect, device number 36 [ 1758.853187][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3895'. [ 1759.660003][T20423] nbd: nbd0 already in use [ 1759.665773][T20423] nbd: must specify an index to disconnect [ 1761.473166][T19278] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1761.732016][T19278] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1761.751877][T19278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.791766][T19278] usb 2-1: config 0 descriptor?? [ 1762.460477][T19278] ath6kl: Failed to submit usb control message: -71 [ 1762.486165][T19278] ath6kl: unable to send the bmi data to the device: -71 [ 1762.507097][T19278] ath6kl: Unable to send get target info: -71 [ 1762.518427][T19278] ath6kl: Failed to init ath6kl core: -71 [ 1762.535236][T19278] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1762.576163][T19278] usb 2-1: USB disconnect, device number 28 [ 1769.265588][T20488] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1769.499227][T20262] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1769.507238][T18084] block nbd1: Possible stuck request ffff888021b8ca00: control (read@0,1024B). Runtime 60 seconds [ 1769.739472][T20262] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1769.748921][T20262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.784735][T20262] usb 5-1: config 0 descriptor?? [ 1770.217300][T20262] ath6kl: Failed to submit usb control message: -71 [ 1770.232797][T20262] ath6kl: unable to send the bmi data to the device: -71 [ 1770.240021][T20262] ath6kl: Unable to send get target info: -71 [ 1770.267632][T20262] ath6kl: Failed to init ath6kl core: -71 [ 1770.543456][T20262] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 1771.433358][T18084] block nbd0: Possible stuck request ffff888021b2b000: control (read@0,1024B). Runtime 60 seconds [ 1771.444922][T18084] block nbd0: Possible stuck request ffff888021b2b200: control (read@1024,1024B). Runtime 60 seconds [ 1771.456097][T18084] block nbd0: Possible stuck request ffff888021b2b400: control (read@2048,1024B). Runtime 60 seconds [ 1771.479014][T20262] usb 5-1: USB disconnect, device number 37 [ 1771.822151][T18084] block nbd0: Possible stuck request ffff888021b2b600: control (read@3072,1024B). Runtime 60 seconds [ 1774.691894][T17974] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 90 seconds [ 1776.138601][T20552] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1777.207317][T18084] block nbd3: Possible stuck request ffff88802207e200: control (read@0,1024B). Runtime 60 seconds [ 1777.218523][T18084] block nbd3: Possible stuck request ffff88802207e400: control (read@1024,1024B). Runtime 60 seconds [ 1777.231154][T18084] block nbd3: Possible stuck request ffff88802207e600: control (read@2048,1024B). Runtime 60 seconds [ 1777.260415][T18084] block nbd3: Possible stuck request ffff88802207e800: control (read@3072,1024B). Runtime 60 seconds [ 1777.944510][T14569] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1778.416013][T14569] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1778.425330][T14569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.456108][T14569] usb 5-1: config 0 descriptor?? [ 1778.874031][T14569] ath6kl: Failed to submit usb control message: -71 [ 1778.883004][T14569] ath6kl: unable to send the bmi data to the device: -71 [ 1778.898721][T14569] ath6kl: Unable to send get target info: -71 [ 1778.917371][T14569] ath6kl: Failed to init ath6kl core: -71 [ 1778.935366][T14569] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 1778.976625][T14569] usb 5-1: USB disconnect, device number 38 [ 1782.040090][T20606] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1783.522622][ T6955] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1783.846832][ T6955] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1783.863932][ T6955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.879459][ T6955] usb 2-1: config 0 descriptor?? [ 1783.970088][T20633] fuse: Bad value for 'fd' [ 1784.068410][T20619] delete_channel: no stack [ 1784.075168][T20625] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1784.081424][T20625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1784.089827][T20625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1784.101041][T20625] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1784.374805][ T6955] ath6kl: Failed to submit usb control message: -71 [ 1784.382042][ T6955] ath6kl: unable to send the bmi data to the device: -71 [ 1784.391111][ T6955] ath6kl: Unable to send get target info: -71 [ 1784.405953][ T6955] ath6kl: Failed to init ath6kl core: -71 [ 1784.433799][ T6955] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1784.505930][ T6955] usb 2-1: USB disconnect, device number 29 [ 1784.895843][T20641] fuse: Bad value for 'fd' [ 1785.983290][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1786.026558][T20648] ax25_connect(): syz.0.3957 uses autobind, please contact jreuter@yaina.de [ 1786.133021][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1786.140329][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1786.146830][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1788.826377][T20687] fuse: Bad value for 'fd' [ 1788.845390][T20688] fuse: Bad value for 'fd' [ 1788.852824][T20688] ./file0: Can't lookup blockdev [ 1788.933825][T20676] delete_channel: no stack [ 1788.939152][T20678] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1788.945906][T20678] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1788.954951][T20678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1788.961135][T20678] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1789.443179][ T9412] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1789.723508][ T9412] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1789.749041][ T9412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.843567][ T9412] usb 1-1: config 0 descriptor?? [ 1790.287818][ T9412] ath6kl: Failed to submit usb control message: -71 [ 1790.312714][ T9412] ath6kl: unable to send the bmi data to the device: -71 [ 1790.331412][ T9412] ath6kl: Unable to send get target info: -71 [ 1790.373435][ T9412] ath6kl: Failed to init ath6kl core: -71 [ 1790.444442][ T9412] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 1790.459691][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1790.722386][ T9412] usb 1-1: USB disconnect, device number 49 [ 1791.029640][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1791.036049][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1791.042284][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1791.299765][T20716] ax25_connect(): syz.1.3976 uses autobind, please contact jreuter@yaina.de [ 1791.900300][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.624286][ T9412] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1792.691102][T20725] ./file0: Can't open blockdev [ 1792.825086][ T9412] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1792.834602][ T9412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.847226][ T9412] usb 1-1: config 0 descriptor?? [ 1793.500518][ T9412] ath6kl: Failed to submit usb control message: -71 [ 1793.589973][ T9412] ath6kl: unable to send the bmi data to the device: -71 [ 1793.647735][ T9412] ath6kl: Unable to send get target info: -71 [ 1793.670409][ T9412] ath6kl: Failed to init ath6kl core: -71 [ 1793.682415][ T9412] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 1793.721821][ T9412] usb 1-1: USB disconnect, device number 50 [ 1794.097228][T20748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1794.307981][T20748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1794.692925][T20748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1794.692959][T20748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.440183][T20750] delete_channel: no stack [ 1796.455186][T20756] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1796.481027][T20756] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1796.502584][T20756] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1796.510544][T20756] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1798.103032][T13061] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1798.297606][T13061] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1798.311137][T13061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.324157][T13061] usb 5-1: config 0 descriptor?? [ 1798.372995][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1798.543263][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1798.550092][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1798.555902][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1798.618068][T13061] ath6kl: Failed to submit usb control message: -71 [ 1798.630758][T13061] ath6kl: unable to send the bmi data to the device: -71 [ 1798.640014][T13061] ath6kl: Unable to send get target info: -71 [ 1798.647334][T13061] ath6kl: Failed to init ath6kl core: -71 [ 1798.655024][T13061] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 1798.668069][T13061] usb 5-1: USB disconnect, device number 39 [ 1799.707126][T18084] block nbd1: Possible stuck request ffff888021b8ca00: control (read@0,1024B). Runtime 90 seconds [ 1800.349824][T20806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1800.358616][T20806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1800.376243][T20806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1800.398151][T20806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1800.533096][T20799] ./file0: Can't open blockdev [ 1801.923617][T18084] block nbd0: Possible stuck request ffff888021b2b000: control (read@0,1024B). Runtime 90 seconds [ 1801.934922][T18084] block nbd0: Possible stuck request ffff888021b2b200: control (read@1024,1024B). Runtime 90 seconds [ 1801.951447][T18084] block nbd0: Possible stuck request ffff888021b2b400: control (read@2048,1024B). Runtime 90 seconds [ 1801.975906][T18084] block nbd0: Possible stuck request ffff888021b2b600: control (read@3072,1024B). Runtime 90 seconds [ 1802.303850][T20810] delete_channel: no stack [ 1802.376885][T20816] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1802.563160][T20816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1802.570033][T20816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1802.604081][T20816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1804.453322][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1804.633097][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1804.633168][T20792] Bluetooth: hci2: command 0x0406 tx timeout [ 1804.639156][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1805.463230][T20650] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 120 seconds [ 1805.959572][T20852] delete_channel: no stack [ 1805.974447][T20859] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1805.986367][T20859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1805.995242][T20859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1806.131963][T20859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1807.346408][T18084] block nbd3: Possible stuck request ffff88802207e200: control (read@0,1024B). Runtime 90 seconds [ 1807.357846][T18084] block nbd3: Possible stuck request ffff88802207e400: control (read@1024,1024B). Runtime 90 seconds [ 1807.368952][T18084] block nbd3: Possible stuck request ffff88802207e600: control (read@2048,1024B). Runtime 90 seconds [ 1807.380056][T18084] block nbd3: Possible stuck request ffff88802207e800: control (read@3072,1024B). Runtime 90 seconds [ 1807.434056][ T5157] udevd[5157]: worker [17732] /devices/virtual/block/nbd1 is taking a long time [ 1807.453537][ T5157] udevd[5157]: worker [17780] /devices/virtual/block/nbd2 is taking a long time [ 1807.471618][ T5157] udevd[5157]: worker [17787] /devices/virtual/block/nbd0 is taking a long time [ 1807.488410][ T5157] udevd[5157]: worker [17789] /devices/virtual/block/nbd3 is taking a long time [ 1807.813994][T20856] Bluetooth: hci4: command 0x0406 tx timeout [ 1808.053138][T20856] Bluetooth: hci2: command 0x0406 tx timeout [ 1808.059434][T20856] Bluetooth: hci1: command 0x0406 tx timeout [ 1808.136564][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1810.848725][T20899] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1810.885261][T20899] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1811.069404][T20912] fuse: Bad value for 'fd' [ 1811.136592][T20899] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1811.215224][T20904] ax25_connect(): syz.1.4029 uses autobind, please contact jreuter@yaina.de [ 1811.243225][T20899] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1812.133079][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1812.933263][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1813.173185][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1813.263023][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1816.133791][T20970] ax25_connect(): syz.3.4048 uses autobind, please contact jreuter@yaina.de [ 1816.638983][T20967] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1816.689998][T20967] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1816.733812][T20967] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1816.767513][T20967] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1816.889587][T20975] ./file0: Can't lookup blockdev [ 1817.859847][T20953] fuse: Bad value for 'fd' [ 1817.893057][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1818.909836][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1818.916008][T20856] Bluetooth: hci2: command 0x0406 tx timeout [ 1818.922065][T20856] Bluetooth: hci1: command 0x0406 tx timeout [ 1820.758255][T21012] ax25_connect(): syz.3.4059 uses autobind, please contact jreuter@yaina.de [ 1820.981104][T21018] fuse: Bad value for 'fd' [ 1821.033851][T21019] ./file0: Can't lookup blockdev [ 1821.387420][T21009] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1821.427015][T21009] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1821.437428][T21009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1821.443767][T21009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1822.933118][T20856] Bluetooth: hci4: command 0x0406 tx timeout [ 1823.573340][T20856] Bluetooth: hci0: command 0x0406 tx timeout [ 1823.573578][T20856] Bluetooth: hci2: command 0x0406 tx timeout [ 1823.573756][T20856] Bluetooth: hci1: command 0x0406 tx timeout [ 1824.987340][T21050] delete_channel: no stack [ 1824.992312][T21052] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1825.000429][T21052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1825.007243][T21052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1825.013412][T21052] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1825.336640][T21062] ax25_connect(): syz.4.4072 uses autobind, please contact jreuter@yaina.de [ 1826.213523][T21072] ./file0: Can't lookup blockdev [ 1826.773153][T20856] Bluetooth: hci4: command 0x0406 tx timeout [ 1827.197019][T20856] Bluetooth: hci0: command 0x0406 tx timeout [ 1827.203154][T20856] Bluetooth: hci2: command 0x0406 tx timeout [ 1827.209350][T20856] Bluetooth: hci1: command 0x0406 tx timeout [ 1829.643416][T21100] delete_channel: no stack [ 1829.673647][T21101] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1829.679773][T21101] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1829.686009][T21101] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1829.692091][T21101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1829.888879][T21107] ax25_connect(): syz.4.4089 uses autobind, please contact jreuter@yaina.de [ 1830.288387][T21112] fuse: Bad value for 'fd' [ 1830.294568][T21112] ./file0: Can't lookup blockdev [ 1830.393801][T18084] block nbd1: Possible stuck request ffff888021b8ca00: control (read@0,1024B). Runtime 120 seconds [ 1831.143309][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1831.775656][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1831.775690][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1831.781982][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1832.381052][T18084] block nbd0: Possible stuck request ffff888021b2b000: control (read@0,1024B). Runtime 120 seconds [ 1832.391933][T18084] block nbd0: Possible stuck request ffff888021b2b200: control (read@1024,1024B). Runtime 120 seconds [ 1832.407809][T18084] block nbd0: Possible stuck request ffff888021b2b400: control (read@2048,1024B). Runtime 120 seconds [ 1832.419507][T18084] block nbd0: Possible stuck request ffff888021b2b600: control (read@3072,1024B). Runtime 120 seconds [ 1832.785846][T21147] fuse: Bad value for 'fd' [ 1832.795425][T21147] ./file0: Can't lookup blockdev [ 1833.790849][T21140] delete_channel: no stack [ 1833.813511][T21141] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1833.819619][T21141] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1833.825937][T21141] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1833.832041][T21141] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1834.349396][T21164] ax25_connect(): syz.4.4103 uses autobind, please contact jreuter@yaina.de [ 1834.900359][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1835.893399][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1835.898215][T20856] Bluetooth: hci2: command 0x0406 tx timeout [ 1835.906534][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1836.073068][T20650] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 150 seconds [ 1837.983852][T18084] block nbd3: Possible stuck request ffff88802207e200: control (read@0,1024B). Runtime 120 seconds [ 1837.995510][T18084] block nbd3: Possible stuck request ffff88802207e400: control (read@1024,1024B). Runtime 120 seconds [ 1838.006647][T18084] block nbd3: Possible stuck request ffff88802207e600: control (read@2048,1024B). Runtime 120 seconds [ 1838.017972][T18084] block nbd3: Possible stuck request ffff88802207e800: control (read@3072,1024B). Runtime 120 seconds [ 1838.453226][T21188] delete_channel: no stack [ 1838.458023][T21189] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1838.464553][T21189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1838.470604][T21189] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1838.476824][T21189] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1838.578557][T21195] fuse: Bad value for 'fd' [ 1838.588532][T21195] ./file0: Can't lookup blockdev [ 1839.972974][T20856] Bluetooth: hci4: command 0x0406 tx timeout [ 1840.263028][T21209] ax25_connect(): syz.4.4116 uses autobind, please contact jreuter@yaina.de [ 1840.823700][T20856] Bluetooth: hci0: command 0x0406 tx timeout [ 1840.829838][T20856] Bluetooth: hci2: command 0x0406 tx timeout [ 1840.836155][T20856] Bluetooth: hci1: command 0x0406 tx timeout [ 1844.155623][T21250] ax25_connect(): syz.0.4128 uses autobind, please contact jreuter@yaina.de [ 1844.833044][T21238] delete_channel: no stack [ 1844.838007][T21240] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1844.844344][T21240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1844.850396][T21240] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1844.856495][T21240] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1845.977636][T21256] delete_channel: no stack [ 1846.044869][T21257] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1846.053838][T21257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1846.061843][T21257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1846.069471][T21257] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1846.202093][T21264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4131'. [ 1847.602272][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1848.555769][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1848.565385][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1848.571461][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1849.896859][T21289] ax25_connect(): syz.4.4139 uses autobind, please contact jreuter@yaina.de [ 1851.271836][T21295] delete_channel: no stack [ 1851.304468][T21301] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1851.320775][T21301] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1851.329168][T21301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1851.336999][T21301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1852.267980][T21320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4145'. [ 1853.338688][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.339107][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1853.351798][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1853.358689][T20856] Bluetooth: hci4: command 0x0406 tx timeout [ 1853.414516][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1854.900724][T21342] ax25_connect(): syz.1.4151 uses autobind, please contact jreuter@yaina.de [ 1856.571327][T21349] delete_channel: no stack [ 1856.581658][T21352] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1856.771884][T21352] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1856.775374][T21352] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1856.775558][T21352] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1857.241704][T21365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4158'. [ 1858.373014][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1858.613614][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1858.853055][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1858.859189][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1859.071767][T21383] ax25_connect(): syz.1.4162 uses autobind, please contact jreuter@yaina.de [ 1860.052018][T21390] bridge_slave_0: left allmulticast mode [ 1860.349816][T21390] bridge_slave_0: left promiscuous mode [ 1860.387103][T21390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.615725][T21390] bridge_slave_1: left allmulticast mode [ 1860.632589][T21390] bridge_slave_1: left promiscuous mode [ 1860.652811][T21390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.672454][T21391] delete_channel: no stack [ 1860.694031][T21390] bond0: (slave bond_slave_0): Releasing backup interface [ 1860.769185][T21390] bond0: (slave bond_slave_1): Releasing backup interface [ 1860.840480][T21390] team0: Port device team_slave_0 removed [ 1860.871821][T21390] team0: Port device team_slave_1 removed [ 1860.933704][T21396] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1860.944593][T21396] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1860.959310][T21396] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1860.966003][T21396] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1861.013694][T18084] block nbd1: Possible stuck request ffff888021b8ca00: control (read@0,1024B). Runtime 150 seconds [ 1862.983389][T18084] block nbd0: Possible stuck request ffff888021b2b000: control (read@0,1024B). Runtime 150 seconds [ 1862.994208][T18084] block nbd0: Possible stuck request ffff888021b2b200: control (read@1024,1024B). Runtime 150 seconds [ 1863.005235][T18084] block nbd0: Possible stuck request ffff888021b2b400: control (read@2048,1024B). Runtime 150 seconds [ 1863.016319][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1863.016383][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1863.016421][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1863.022476][T18084] block nbd0: Possible stuck request ffff888021b2b600: control (read@3072,1024B). Runtime 150 seconds [ 1863.028554][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1863.962880][T21431] ax25_connect(): syz.0.4174 uses autobind, please contact jreuter@yaina.de [ 1864.365528][T21424] delete_channel: no stack [ 1864.370885][T21428] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1864.399950][T21428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1864.527213][T21428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1864.623904][T21428] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1865.654870][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1866.234119][T20650] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 180 seconds [ 1867.131720][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1867.132694][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 1867.138433][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1867.354129][T21449] delete_channel: no stack [ 1867.361999][T21456] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1867.375333][T21456] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1867.427639][T21456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1867.452442][T21456] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1867.958687][T21469] bridge_slave_0: left allmulticast mode [ 1867.978165][T21469] bridge_slave_0: left promiscuous mode [ 1868.003089][T21469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.046260][T21469] bridge_slave_1: left allmulticast mode [ 1868.051987][T21469] bridge_slave_1: left promiscuous mode [ 1868.063473][T18084] block nbd3: Possible stuck request ffff88802207e200: control (read@0,1024B). Runtime 150 seconds [ 1868.074647][T18084] block nbd3: Possible stuck request ffff88802207e400: control (read@1024,1024B). Runtime 150 seconds [ 1868.116154][T21469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.713035][T18084] block nbd3: Possible stuck request ffff88802207e600: control (read@2048,1024B). Runtime 150 seconds [ 1868.724177][T18084] block nbd3: Possible stuck request ffff88802207e800: control (read@3072,1024B). Runtime 150 seconds [ 1868.749939][T21469] bond0: (slave bond_slave_0): Releasing backup interface [ 1868.811790][T21469] bond0: (slave bond_slave_1): Releasing backup interface [ 1869.342850][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1869.395443][T21469] team0: Port device team_slave_0 removed [ 1869.424627][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1869.496625][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1869.502813][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1869.561508][T21476] ax25_connect(): syz.1.4186 uses autobind, please contact jreuter@yaina.de [ 1869.599838][T21469] team0: Port device team_slave_1 removed [ 1871.786131][T21501] delete_channel: no stack [ 1871.790999][T21502] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1871.797201][T21502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1871.803292][T21502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1871.809321][T21502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1871.884460][T21511] fuse: Bad value for 'fd' [ 1871.889954][T21511] ./file0: Can't lookup blockdev [ 1873.093050][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1874.219579][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1874.226049][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1874.232429][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1875.593640][T21548] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1875.896777][T21550] fuse: Bad value for 'fd' [ 1875.906677][T21550] ./file0: Can't lookup blockdev [ 1876.196218][T21544] delete_channel: no stack [ 1876.214980][T21547] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1876.252355][T21547] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1876.279712][T21547] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1876.302783][T21547] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1877.733174][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 1878.293406][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 1878.294018][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1878.373084][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1881.038961][T21586] fuse: Bad value for 'fd' [ 1881.068291][T21586] ./file0: Can't lookup blockdev [ 1883.169898][T21600] delete_channel: no stack [ 1883.176477][T21602] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1883.228816][T21602] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1883.241288][T21602] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1883.255567][T21602] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1884.643021][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1885.252994][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1885.259852][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1885.362991][T21329] Bluetooth: hci0: command 0x0406 tx timeout [ 1886.268275][T21637] ./file0: Can't lookup blockdev [ 1889.007855][T21658] delete_channel: no stack [ 1889.040570][T21661] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1889.069322][T21661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1889.238161][T21661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1889.245787][T21661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1890.904407][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1891.096623][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1891.110813][T18084] block nbd1: Possible stuck request ffff888021b8ca00: control (read@0,1024B). Runtime 180 seconds [ 1891.253102][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1891.259339][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1891.767627][T21682] ./file0: Can't lookup blockdev [ 1893.211083][T18084] block nbd0: Possible stuck request ffff888021b2b000: control (read@0,1024B). Runtime 180 seconds [ 1893.221906][T18084] block nbd0: Possible stuck request ffff888021b2b200: control (read@1024,1024B). Runtime 180 seconds [ 1893.232964][T18084] block nbd0: Possible stuck request ffff888021b2b400: control (read@2048,1024B). Runtime 180 seconds [ 1893.275147][T18084] block nbd0: Possible stuck request ffff888021b2b600: control (read@3072,1024B). Runtime 180 seconds [ 1896.366299][T21724] ./file0: Can't lookup blockdev [ 1896.983048][T20650] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 210 seconds [ 1898.143290][T18084] block nbd3: Possible stuck request ffff88802207e200: control (read@0,1024B). Runtime 180 seconds [ 1898.679845][T21736] delete_channel: no stack [ 1898.707663][T21739] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1898.723529][T18084] block nbd3: Possible stuck request ffff88802207e400: control (read@1024,1024B). Runtime 180 seconds [ 1898.734654][T18084] block nbd3: Possible stuck request ffff88802207e600: control (read@2048,1024B). Runtime 180 seconds [ 1898.746068][T21739] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1898.754486][T18084] block nbd3: Possible stuck request ffff88802207e800: control (read@3072,1024B). Runtime 180 seconds [ 1898.768680][T21744] fuse: Bad value for 'fd' [ 1898.778608][T21739] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1898.790482][T21739] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1899.673752][T21757] ./file0: Can't lookup blockdev [ 1900.133461][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1900.773006][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1900.962505][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1900.969548][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1903.851998][T21763] delete_channel: no stack [ 1903.866849][T21780] fuse: Bad value for 'fd' [ 1903.881446][T21776] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1903.890085][T21776] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1903.914306][T21776] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1903.935770][T21776] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1905.023033][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1905.651548][T21803] ./file0: Can't lookup blockdev [ 1905.989760][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1905.989778][T21329] Bluetooth: hci1: command 0x0406 tx timeout [ 1905.989842][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1910.585852][ T5157] udevd[5157]: worker [17732] /devices/virtual/block/nbd1 timeout; kill it [ 1911.256672][ T5157] udevd[5157]: seq 23617 '/devices/virtual/block/nbd1' killed [ 1911.317013][ T5157] udevd[5157]: worker [17780] /devices/virtual/block/nbd2 timeout; kill it [ 1911.332109][ T5157] udevd[5157]: seq 22897 '/devices/virtual/block/nbd2' killed [ 1911.717329][ T5157] udevd[5157]: worker [17787] /devices/virtual/block/nbd0 timeout; kill it [ 1911.863068][ T5157] udevd[5157]: seq 23646 '/devices/virtual/block/nbd0' killed [ 1911.870591][ T5157] udevd[5157]: worker [17789] /devices/virtual/block/nbd3 timeout; kill it [ 1911.913268][ T5157] udevd[5157]: seq 23817 '/devices/virtual/block/nbd3' killed [ 1912.269715][T21829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4278'. [ 1914.776192][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.731577][T21866] ./file0: Can't lookup blockdev [ 1916.475515][T21863] delete_channel: no stack [ 1916.500089][T21868] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1916.508699][T21868] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1916.517027][T21868] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1916.528922][T21868] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1918.033576][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1918.574796][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1918.575855][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 1918.581161][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1921.086328][T21912] ./file0: Can't lookup blockdev [ 1921.160997][T17784] udevd[17784]: setting mode of /dev/gsmtty31 to 020600 failed: No such file or directory [ 1921.186762][T18084] block nbd1: Possible stuck request ffff888021b8ca00: control (read@0,1024B). Runtime 210 seconds [ 1921.219663][T17784] udevd[17784]: setting owner of /dev/gsmtty31 to uid=0, gid=0 failed: No such file or directory [ 1922.095606][T21915] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1922.104241][T21915] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1922.116258][T21915] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1922.125924][T21915] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1923.736677][T21922] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1923.743396][T18084] block nbd0: Possible stuck request ffff888021b2b000: control (read@0,1024B). Runtime 210 seconds [ 1923.754255][T18084] block nbd0: Possible stuck request ffff888021b2b200: control (read@1024,1024B). Runtime 210 seconds [ 1923.765884][T18084] block nbd0: Possible stuck request ffff888021b2b400: control (read@2048,1024B). Runtime 210 seconds [ 1923.777122][T18084] block nbd0: Possible stuck request ffff888021b2b600: control (read@3072,1024B). Runtime 210 seconds [ 1923.843543][T21922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1923.893805][T21922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1923.905589][T21922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1923.995582][T21925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1925.828351][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 1925.892952][T21329] Bluetooth: hci1: command 0x0406 tx timeout [ 1925.973102][T21329] Bluetooth: hci0: command 0x0406 tx timeout [ 1925.973655][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1926.478491][T21955] ./file0: Can't lookup blockdev [ 1927.602971][T10070] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 240 seconds [ 1928.122057][T21967] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1928.263356][T18084] block nbd3: Possible stuck request ffff88802207e200: control (read@0,1024B). Runtime 210 seconds [ 1928.803301][T18084] block nbd3: Possible stuck request ffff88802207e400: control (read@1024,1024B). Runtime 210 seconds [ 1928.815100][T18084] block nbd3: Possible stuck request ffff88802207e600: control (read@2048,1024B). Runtime 210 seconds [ 1928.872096][T18084] block nbd3: Possible stuck request ffff88802207e800: control (read@3072,1024B). Runtime 210 seconds [ 1929.368693][T21970] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1929.398317][T21970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1929.422464][T21965] netlink: 'syz.0.4312': attribute type 1 has an invalid length. [ 1929.520120][T21970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1929.553214][T21970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1930.747575][T21986] ./file0: Can't lookup blockdev [ 1930.933009][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1931.413050][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1931.572952][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 1931.579099][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1934.055238][T22015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4324'. [ 1934.835330][T22023] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1936.412585][T22020] netlink: 'syz.1.4326': attribute type 1 has an invalid length. [ 1936.675618][T22033] delete_channel: no stack [ 1936.680775][T22035] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1936.693389][T22035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1936.709872][T22035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1936.738145][T22035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1938.642385][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1939.325758][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1939.325954][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1939.326121][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1943.050615][T22073] delete_channel: no stack [ 1943.068011][T22079] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1943.075123][T22079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1943.081170][T22079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1943.237154][T22088] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1943.315414][T22089] netlink: 'syz.3.4344': attribute type 1 has an invalid length. [ 1943.379564][T22079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1944.900355][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1945.173039][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1945.173052][T21329] Bluetooth: hci1: command 0x0406 tx timeout [ 1945.414434][T21329] Bluetooth: hci0: command 0x0406 tx timeout [ 1949.316494][T22132] delete_channel: no stack [ 1950.036712][T22134] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1950.060464][T22134] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1950.066761][T22134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1950.073561][T22134] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1951.042972][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 1951.323402][T18084] block nbd1: Possible stuck request ffff888021b8ca00: control (read@0,1024B). Runtime 240 seconds [ 1951.869065][T22164] IPv6: NLM_F_CREATE should be specified when creating new route [ 1951.869480][T22164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1951.869627][T22164] IPv6: NLM_F_CREATE should be set when creating new route [ 1951.869715][T22164] IPv6: NLM_F_CREATE should be set when creating new route [ 1952.150870][T21329] Bluetooth: hci0: command 0x0406 tx timeout [ 1952.150900][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1952.150922][T21329] Bluetooth: hci1: command 0x0406 tx timeout [ 1952.217062][T22164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1953.823599][T18084] block nbd0: Possible stuck request ffff888021b2b000: control (read@0,1024B). Runtime 240 seconds [ 1953.901925][T18084] block nbd0: Possible stuck request ffff888021b2b200: control (read@1024,1024B). Runtime 240 seconds [ 1953.978984][T18084] block nbd0: Possible stuck request ffff888021b2b400: control (read@2048,1024B). Runtime 240 seconds [ 1954.031857][T22174] delete_channel: no stack [ 1954.061648][T18084] block nbd0: Possible stuck request ffff888021b2b600: control (read@3072,1024B). Runtime 240 seconds [ 1954.131260][T22177] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1954.181001][T22177] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1954.328338][T22177] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1954.455107][T22177] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1955.733100][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1956.213180][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1956.372984][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1956.543049][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1957.773229][T10070] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 270 seconds [ 1958.376634][T18084] block nbd3: Possible stuck request ffff88802207e200: control (read@0,1024B). Runtime 240 seconds [ 1958.475661][T22223] IPv6: NLM_F_CREATE should be specified when creating new route [ 1958.487543][T22223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1958.494920][T22223] IPv6: NLM_F_CREATE should be set when creating new route [ 1958.502312][T22223] IPv6: NLM_F_CREATE should be set when creating new route [ 1958.599078][T22215] delete_channel: no stack [ 1958.873218][T22223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1958.913977][T18084] block nbd3: Possible stuck request ffff88802207e400: control (read@1024,1024B). Runtime 240 seconds [ 1958.925077][T18084] block nbd3: Possible stuck request ffff88802207e600: control (read@2048,1024B). Runtime 240 seconds [ 1958.936179][T18084] block nbd3: Possible stuck request ffff88802207e800: control (read@3072,1024B). Runtime 240 seconds [ 1958.951767][T22219] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1958.963026][T22219] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1958.983042][T22219] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1958.990056][T22219] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1960.615221][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 1961.016615][T21329] Bluetooth: hci0: command 0x0406 tx timeout [ 1961.022903][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1961.028967][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1964.557604][T22261] delete_channel: no stack [ 1964.562371][T22263] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1964.782749][T22270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1964.877880][T22270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1965.071945][T22263] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1965.098872][T22263] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1965.127227][T22263] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1965.582984][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1965.724584][T22277] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1967.093447][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1967.173024][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1967.173145][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 1969.033368][T22302] delete_channel: no stack [ 1969.049187][T22307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1969.056961][T22307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1969.081736][T22307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1969.100716][T22307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1969.311784][T22318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1969.330166][T22318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1971.013257][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 1971.093513][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 1971.094206][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1971.172882][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1973.690330][T22342] delete_channel: no stack [ 1973.705112][T22346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1973.714063][T22346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1973.727362][T22346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1973.753365][T22346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1974.338883][T22353] IPv6: NLM_F_CREATE should be specified when creating new route [ 1974.622109][T22353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1974.629505][T22353] IPv6: NLM_F_CREATE should be set when creating new route [ 1974.637003][T22353] IPv6: NLM_F_CREATE should be set when creating new route [ 1974.676886][T22359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1975.662993][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1975.753042][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 1975.759148][T21329] Bluetooth: hci1: command 0x0406 tx timeout [ 1975.823008][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1976.363369][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1977.310030][T22377] delete_channel: no stack [ 1977.341165][T22384] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1977.341305][T22384] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1977.341430][T22384] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1977.341561][T22384] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1978.946981][T22403] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1979.413299][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1979.419628][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1979.425924][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1979.432129][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1980.176669][T22415] ./file0: Can't open blockdev [ 1981.782973][T18084] block nbd1: Possible stuck request ffff888021b8ca00: control (read@0,1024B). Runtime 270 seconds [ 1981.805800][T22422] delete_channel: no stack [ 1981.810956][T22427] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1981.830642][T22427] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1981.848464][T22427] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1981.868029][T22427] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1983.333051][T20856] Bluetooth: hci4: command 0x0406 tx timeout [ 1983.893177][T20856] Bluetooth: hci2: command 0x0406 tx timeout [ 1983.894035][T21329] Bluetooth: hci1: command 0x0406 tx timeout [ 1984.063265][T21329] Bluetooth: hci0: command 0x0406 tx timeout [ 1984.213507][T22450] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 1984.533264][T18084] block nbd0: Possible stuck request ffff888021b2b000: control (read@0,1024B). Runtime 270 seconds [ 1984.544750][T18084] block nbd0: Possible stuck request ffff888021b2b200: control (read@1024,1024B). Runtime 270 seconds [ 1984.556457][T18084] block nbd0: Possible stuck request ffff888021b2b400: control (read@2048,1024B). Runtime 270 seconds [ 1984.567967][T18084] block nbd0: Possible stuck request ffff888021b2b600: control (read@3072,1024B). Runtime 270 seconds [ 1985.055936][T22456] ./file0: Can't open blockdev [ 1986.986849][T22479] block nbd0: NBD_DISCONNECT [ 1987.002442][T22479] block nbd0: Send disconnect failed -32 [ 1987.018400][T22479] block nbd0: shutting down sockets [ 1987.065882][ C0] blk_print_req_error: 79 callbacks suppressed [ 1987.065897][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1987.081353][ C0] buffer_io_error: 138 callbacks suppressed [ 1987.081363][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1987.095089][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1987.104156][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1987.111889][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1987.120940][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1987.128701][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1987.137750][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1987.145933][T18084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1987.155821][T18084] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1987.163667][T18084] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1987.171769][T18084] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1987.179581][T18084] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1987.187774][T18084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1987.196986][T18084] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1987.204840][T18084] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1987.212972][T18084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1987.222448][T18084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1987.232055][T18084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1987.241586][T18084] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1987.251702][T17787] ldm_validate_partition_table(): Disk read failed. [ 1987.268575][T17787] Dev nbd0: unable to read RDB block 0 [ 1987.281386][T17787] nbd0: unable to read partition table [ 1987.369240][ T5157] udevd[5157]: worker [17787] terminated by signal 9 (Killed) [ 1987.501928][ T5157] udevd[5157]: worker [17787] failed while handling '/devices/virtual/block/nbd0' [ 1988.396120][T10070] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 300 seconds [ 1989.014130][T18084] block nbd3: Possible stuck request ffff88802207e200: control (read@0,1024B). Runtime 270 seconds [ 1989.025459][T18084] block nbd3: Possible stuck request ffff88802207e400: control (read@1024,1024B). Runtime 270 seconds [ 1989.036665][T18084] block nbd3: Possible stuck request ffff88802207e600: control (read@2048,1024B). Runtime 270 seconds [ 1989.045848][T22488] delete_channel: no stack [ 1989.048065][T18084] block nbd3: Possible stuck request ffff88802207e800: control (read@3072,1024B). Runtime 270 seconds [ 1989.114072][T22490] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1989.143442][T22490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1989.169875][T22490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1989.199628][T22490] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1989.218968][T22503] fuse: Bad value for 'fd' [ 1989.293895][T22502] ./file0: Can't lookup blockdev [ 1990.213053][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 1991.264008][T20856] Bluetooth: hci1: command 0x0406 tx timeout [ 1991.264030][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1991.264460][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 1991.486555][T22531] syz.4.4463: attempt to access beyond end of device [ 1991.486555][T22531] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1996.120813][T22555] delete_channel: no stack [ 1996.126312][T22558] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1996.133999][T22558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1996.141321][T22558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1996.148416][T22558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1997.498207][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1998.218744][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1998.224990][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 1998.231138][T21329] Bluetooth: hci1: command 0x0406 tx timeout [ 1998.350428][T22586] syz.0.4477: attempt to access beyond end of device [ 1998.350428][T22586] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2000.430765][T22603] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 2002.598307][T22625] syz.1.4489: attempt to access beyond end of device [ 2002.598307][T22625] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2003.525800][T22626] delete_channel: no stack [ 2003.546058][T22629] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2003.633769][T22629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2003.683363][T22629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2003.691714][T22629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2004.862905][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 2005.653749][T21329] Bluetooth: hci1: command 0x0406 tx timeout [ 2005.733096][T20856] Bluetooth: hci2: command 0x0406 tx timeout [ 2005.746659][T21329] Bluetooth: hci0: command 0x0406 tx timeout [ 2006.085961][T22663] IPv6: NLM_F_CREATE should be specified when creating new route [ 2006.109751][T22663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2006.117152][T22663] IPv6: NLM_F_CREATE should be set when creating new route [ 2006.124510][T22663] IPv6: NLM_F_CREATE should be set when creating new route [ 2006.154304][T22658] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 2006.354706][T22666] syz.1.4500: attempt to access beyond end of device [ 2006.354706][T22666] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2009.081989][T22679] delete_channel: no stack [ 2009.087257][T22684] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2009.096600][T22684] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2009.104286][T22684] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2009.118178][T22684] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2009.698370][T22703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2010.259406][T22705] syz.4.4511: attempt to access beyond end of device [ 2010.259406][T22705] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2010.613280][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 2011.031732][T22710] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 2011.172972][T21329] Bluetooth: hci0: command 0x0406 tx timeout [ 2011.175491][T20856] Bluetooth: hci2: command 0x0406 tx timeout [ 2011.179027][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 2012.216892][T18084] block nbd1: Possible stuck request ffff888021b8ca00: control (read@0,1024B). Runtime 300 seconds [ 2014.309056][T22749] syz.0.4522: attempt to access beyond end of device [ 2014.309056][T22749] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2014.902960][T13061] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2015.093174][T13061] usb 5-1: Using ep0 maxpacket: 16 [ 2015.112440][T13061] usb 5-1: device descriptor read/all, error -71 [ 2015.867994][T22762] syz.0.4534: attempt to access beyond end of device [ 2015.867994][T22762] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2016.588064][T22750] delete_channel: no stack [ 2016.687529][T22754] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2016.793571][T22754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2016.862673][T22754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2016.869892][T22754] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2017.585202][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 2018.462862][T20650] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 330 seconds [ 2018.782937][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 2018.932897][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 2018.939187][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 2019.094409][T18084] block nbd3: Possible stuck request ffff88802207e200: control (read@0,1024B). Runtime 300 seconds [ 2019.106390][T18084] block nbd3: Possible stuck request ffff88802207e400: control (read@1024,1024B). Runtime 300 seconds [ 2019.117483][T18084] block nbd3: Possible stuck request ffff88802207e600: control (read@2048,1024B). Runtime 300 seconds [ 2019.128565][T18084] block nbd3: Possible stuck request ffff88802207e800: control (read@3072,1024B). Runtime 300 seconds [ 2020.481025][T22795] syz.4.4537: attempt to access beyond end of device [ 2020.481025][T22795] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2023.048698][T15634] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2023.119794][T22789] team0 (unregistering): Port device team_slave_0 removed [ 2023.149418][T22789] team0 (unregistering): Port device team_slave_1 removed [ 2023.482640][T15634] usb 2-1: Using ep0 maxpacket: 16 [ 2023.945012][T15634] usb 2-1: device descriptor read/all, error -71 [ 2025.397100][T22818] delete_channel: no stack [ 2025.518516][T22822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2025.649790][T22822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2025.658069][T22822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2025.666042][T22822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2026.594582][T22841] syz.0.4548: attempt to access beyond end of device [ 2026.594582][T22841] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2026.853678][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 2027.746886][T20856] Bluetooth: hci0: command 0x0406 tx timeout [ 2027.747134][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 2027.747371][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 2029.826742][T22868] delete_channel: no stack [ 2029.831628][T22871] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2029.860782][T22871] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2029.873992][T22871] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2029.880508][T22871] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2030.263091][ T6956] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2030.462989][ T6956] usb 2-1: Using ep0 maxpacket: 16 [ 2030.479008][ T6956] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2030.487531][ T6956] usb 2-1: config 0 has no interface number 0 [ 2030.512176][ T6956] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2030.523709][ T6956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.533245][ T6956] usb 2-1: Product: syz [ 2030.537536][ T6956] usb 2-1: Manufacturer: syz [ 2030.542235][ T6956] usb 2-1: SerialNumber: syz [ 2030.564684][ T6956] usb 2-1: config 0 descriptor?? [ 2030.736151][ T6956] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2031.182951][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 2031.644290][T22889] syz.3.4563: attempt to access beyond end of device [ 2031.644290][T22889] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2031.894537][T21329] Bluetooth: hci0: command 0x0406 tx timeout [ 2031.900827][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 2031.907192][T21329] Bluetooth: hci1: command 0x0406 tx timeout [ 2032.286637][ T6956] gspca_spca1528: reg_w err -110 [ 2032.323151][ T6956] spca1528: probe of 2-1:0.1 failed with error -110 [ 2032.439674][ T6956] usb 2-1: USB disconnect, device number 32 [ 2035.615371][T22912] delete_channel: no stack [ 2035.851355][T22915] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2036.017834][T22915] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2036.040052][T22915] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2036.120764][T22915] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2036.571540][T22934] syz.0.4575: attempt to access beyond end of device [ 2036.571540][T22934] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2037.416096][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 2037.668888][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.053002][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 2038.059294][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 2038.133184][T21329] Bluetooth: hci0: command 0x0406 tx timeout [ 2040.029992][ T5857] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2040.252937][ T5857] usb 2-1: device descriptor read/64, error -71 [ 2040.553046][ T5857] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2040.802949][ T5857] usb 2-1: device descriptor read/64, error -71 [ 2041.029551][ T5857] usb usb2-port1: attempt power cycle [ 2041.682960][ T5857] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2042.014411][ T5857] usb 2-1: device descriptor read/8, error -71 [ 2042.283018][ T5857] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2042.291242][T22955] delete_channel: no stack [ 2042.354272][T22956] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2042.360387][T22956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2042.366682][T22956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2042.372726][T22956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2042.643660][ T5857] usb 2-1: device descriptor read/8, error -71 [ 2042.908411][ T5857] usb usb2-port1: unable to enumerate USB device [ 2042.920282][T18084] block nbd1: Possible stuck request ffff888021b8ca00: control (read@0,1024B). Runtime 330 seconds [ 2043.183631][T22982] syz.4.4590: attempt to access beyond end of device [ 2043.183631][T22982] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2043.605002][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 2044.452901][T21329] Bluetooth: hci1: command 0x0406 tx timeout [ 2044.453039][T20856] Bluetooth: hci0: command 0x0406 tx timeout [ 2044.453221][T20856] Bluetooth: hci2: command 0x0406 tx timeout [ 2045.126517][T22994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2046.224865][T22995] delete_channel: no stack [ 2046.231288][T22996] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2046.237467][T22996] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2046.243579][T22996] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2046.249598][T22996] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2047.175632][T23004] delete_channel: no stack [ 2047.180295][T23006] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2047.186603][T23006] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2047.192676][T23006] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2047.198800][T23006] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2047.959166][T23024] syz.3.4602: attempt to access beyond end of device [ 2047.959166][T23024] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2048.533056][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 2048.544109][T10070] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 360 seconds [ 2049.262936][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 2049.269037][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 2049.286958][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 2051.075822][T22741] block nbd3: Possible stuck request ffff88802207e200: control (read@0,1024B). Runtime 330 seconds [ 2051.090910][T22741] block nbd3: Possible stuck request ffff88802207e400: control (read@1024,1024B). Runtime 330 seconds [ 2051.102010][T22741] block nbd3: Possible stuck request ffff88802207e600: control (read@2048,1024B). Runtime 330 seconds [ 2051.113118][T22741] block nbd3: Possible stuck request ffff88802207e800: control (read@3072,1024B). Runtime 330 seconds [ 2051.345069][ T9412] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2051.529627][T23038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2051.542916][ T9412] usb 1-1: device descriptor read/64, error -71 [ 2051.833590][ T9412] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2052.187048][ T9412] usb 1-1: device descriptor read/64, error -71 [ 2052.398937][ T9412] usb usb1-port1: attempt power cycle [ 2052.429151][T23039] delete_channel: no stack [ 2052.455596][T23040] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2052.461693][T23040] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2052.467898][T23040] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2052.473971][T23040] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2054.183327][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.234134][T23066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2054.535082][T20856] Bluetooth: hci0: command 0x0406 tx timeout [ 2054.535971][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 2054.541176][T20856] Bluetooth: hci1: command 0x0406 tx timeout [ 2054.579316][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.919714][T23075] syz.1.4621: attempt to access beyond end of device [ 2054.919714][T23075] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2055.703224][T23069] delete_channel: no stack [ 2055.709131][T23070] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2055.715380][T23070] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2055.721438][T23070] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2055.760767][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.808703][T20856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2055.829587][T20856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2055.840070][T20856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2055.850176][T20856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2055.859364][T20856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2055.868529][T20856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2056.852896][T20856] Bluetooth: hci1: command 0x0406 tx timeout [ 2056.960960][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2057.975987][T20856] Bluetooth: hci0: command 0x0406 tx timeout [ 2057.982331][T20856] Bluetooth: hci2: command 0x0406 tx timeout [ 2058.320953][T21329] Bluetooth: hci3: command tx timeout [ 2058.333054][ T5857] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2058.903497][ T5857] usb 2-1: device descriptor read/64, error -71 [ 2059.993003][ T5857] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2060.252858][ T5857] usb 2-1: device descriptor read/64, error -71 [ 2060.384643][T21329] Bluetooth: hci3: command tx timeout [ 2060.390475][ T5857] usb usb2-port1: attempt power cycle [ 2060.434542][T23102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2060.817426][ T5857] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2060.936198][ T5857] usb 2-1: device descriptor read/8, error -71 [ 2061.110452][T23071] chnl_net:caif_netlink_parms(): no params data found [ 2061.233349][T23103] delete_channel: no stack [ 2061.270403][T23104] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2061.276748][T23104] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2061.283513][T23104] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2061.291890][T23104] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2061.297992][T23104] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2061.349619][T23104] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2061.961881][T23127] syz.1.4633: attempt to access beyond end of device [ 2061.961881][T23127] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2062.774099][T20856] Bluetooth: hci1: command 0x0406 tx timeout [ 2063.343145][T21329] Bluetooth: hci0: command 0x0406 tx timeout [ 2063.343490][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 2063.343966][T20856] Bluetooth: hci3: command 0x0419 tx timeout [ 2063.745650][T23071] bridge0: port 1(bridge_slave_0) entered blocking state [ 2063.763236][T23071] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.776919][T23071] bridge_slave_0: entered allmulticast mode [ 2063.793820][T23071] bridge_slave_0: entered promiscuous mode [ 2063.855680][T23071] bridge0: port 2(bridge_slave_1) entered blocking state [ 2063.869357][T23071] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.968993][T23071] bridge_slave_1: entered allmulticast mode [ 2063.977060][T23071] bridge_slave_1: entered promiscuous mode [ 2064.202662][T23144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2064.323621][T23071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2064.868633][T23071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2064.902690][T23148] delete_channel: no stack [ 2065.180028][T23071] team0: Port device team_slave_0 added [ 2065.212387][T23071] team0: Port device team_slave_1 added [ 2065.444773][ T5791] Bluetooth: hci3: command 0x0419 tx timeout [ 2066.133646][ T11] hsr_slave_0: left promiscuous mode [ 2066.196642][ T11] hsr_slave_1: left promiscuous mode [ 2066.526918][T23180] syz.1.4644: attempt to access beyond end of device [ 2066.526918][T23180] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2067.369277][ T11] veth1_macvtap: left promiscuous mode [ 2067.377470][ T11] veth0_macvtap: left promiscuous mode [ 2067.385040][ T11] veth1_vlan: left promiscuous mode [ 2067.390519][ T11] veth0_vlan: left promiscuous mode [ 2067.503173][ T5791] Bluetooth: hci3: command 0x0419 tx timeout [ 2067.699507][ T11] bond1 (unregistering): Released all slaves [ 2068.779053][ T11] pimreg (unregistering): left allmulticast mode [ 2069.576267][ T5791] Bluetooth: hci3: command 0x0419 tx timeout [ 2070.312230][ T11] bond0 (unregistering): Released all slaves [ 2070.419135][T23071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2070.434156][T23071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2070.497735][T23071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2070.551336][T23071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2070.558476][T23071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2070.584467][ C1] vkms_vblank_simulate: vblank timer overrun [ 2070.824993][T23071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2071.046004][T23198] delete_channel: no stack [ 2071.056002][T23192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2071.251348][T23071] hsr_slave_0: entered promiscuous mode [ 2071.278652][T23071] hsr_slave_1: entered promiscuous mode [ 2071.296477][T23071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2071.308016][T23071] Cannot create hsr debugfs directory [ 2071.841343][T23216] syz.3.4653: attempt to access beyond end of device [ 2071.841343][T23216] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2073.508346][T22741] block nbd1: Possible stuck request ffff888021b8ca00: control (read@0,1024B). Runtime 360 seconds [ 2074.044867][T23240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2074.976477][T23242] delete_channel: no stack [ 2075.334815][T23071] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2075.346825][T23071] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2075.364923][T23071] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2075.375308][T23071] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2075.473174][T23071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2075.499931][T23071] 8021q: adding VLAN 0 to HW filter on device team0 [ 2075.515197][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.522484][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2075.542059][T20275] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.549308][T20275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2075.869879][T23071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2075.948955][T23071] veth0_vlan: entered promiscuous mode [ 2075.965879][T23071] veth1_vlan: entered promiscuous mode [ 2076.002804][T23071] veth0_macvtap: entered promiscuous mode [ 2076.020515][T23071] veth1_macvtap: entered promiscuous mode [ 2076.052017][T23071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2076.064201][T23071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2076.075285][T23071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2076.086172][T23071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2076.104790][T23071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2076.129109][T23071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2076.140975][T23071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2076.151100][T23071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2076.161657][T23071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2076.173615][T23071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2076.194887][T23071] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2076.209469][T23071] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2076.220223][T23071] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2076.236878][T23071] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2076.359605][T18816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2076.382553][T18816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2076.424322][T18816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2076.432270][T18816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2076.716748][T23294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2078.061979][T23319] syz.4.4664: attempt to access beyond end of device [ 2078.061979][T23319] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2078.743361][T20650] block nbd2: Possible stuck request ffff888021bc8000: control (read@0,4096B). Runtime 390 seconds [ 2080.981246][T23348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2081.225562][T22741] block nbd3: Possible stuck request ffff88802207e200: control (read@0,1024B). Runtime 360 seconds [ 2081.236383][T22741] block nbd3: Possible stuck request ffff88802207e400: control (read@1024,1024B). Runtime 360 seconds [ 2081.247427][T22741] block nbd3: Possible stuck request ffff88802207e600: control (read@2048,1024B). Runtime 360 seconds [ 2081.259612][T22741] block nbd3: Possible stuck request ffff88802207e800: control (read@3072,1024B). Runtime 360 seconds [ 2082.319337][T23360] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 2085.174190][T23392] IPv6: NLM_F_CREATE should be specified when creating new route [ 2085.182061][T23392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2085.189331][T23392] IPv6: NLM_F_CREATE should be set when creating new route [ 2085.196605][T23392] IPv6: NLM_F_CREATE should be set when creating new route [ 2085.580951][T23400] syz.1.4684: attempt to access beyond end of device [ 2085.580951][T23400] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2087.127938][ T5877] IPVS: starting estimator thread 0... [ 2087.260919][T23419] IPVS: using max 18 ests per chain, 43200 per kthread [ 2088.214528][ T29] INFO: task udevd:17732 blocked for more than 143 seconds. [ 2088.221901][ T29] Not tainted syzkaller #0 [ 2088.243353][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2088.252458][ T29] task:udevd state:D stack:23144 pid:17732 ppid:5157 flags:0x00004006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2088.262181][ T29] Call Trace: [ 2088.266616][ T29] [ 2088.269600][ T29] __schedule+0x14d2/0x44d0 [ 2088.274926][ T29] ? asan.module_dtor+0x20/0x20 [ 2088.279842][ T29] ? mark_lock+0x94/0x320 [ 2088.284892][ T29] ? lock_chain_count+0x20/0x20 [ 2088.289766][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 2088.295235][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 2088.300671][ T29] schedule+0xbd/0x170 [ 2088.320281][ T29] io_schedule+0x80/0xd0 [ 2088.340896][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 2088.362822][ T29] ? folio_wait_bit+0x30/0x30 [ 2088.396723][ T29] ? _compound_head+0x120/0x120 [ 2088.836696][ T29] ? filemap_add_folio+0x192/0x3c0 [ 2088.876234][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 2088.881553][ T29] ? blkdev_writepage+0x30/0x30 [ 2088.923284][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 2088.928473][ T29] ? blkdev_writepage+0x30/0x30 [ 2088.953970][ T29] read_part_sector+0xd2/0x350 [ 2088.958811][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 2089.002814][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 2089.008189][ T29] ? put_partition+0x350/0x350 [ 2089.037965][ T29] ? alloc_pages+0x4dc/0x740 [ 2089.042650][ T29] bdev_disk_changed+0x73a/0x1410 [ 2089.103012][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 2089.108388][ T29] ? iput+0x347/0x920 [ 2089.112412][ T29] blkdev_get_whole+0x30d/0x390 [ 2089.136581][ T29] blkdev_get_by_dev+0x279/0x600 [ 2089.141600][ T29] blkdev_open+0x152/0x360 [ 2089.177669][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 2089.182322][ T29] do_dentry_open+0x8c6/0x1500 [ 2089.207556][ T29] path_openat+0x274b/0x3190 [ 2089.212223][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 2089.258132][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2089.282864][ T29] ? verify_lock_unused+0x140/0x140 [ 2089.288125][ T29] ? do_filp_open+0x3d0/0x3d0 [ 2089.332800][ T29] ? __virt_addr_valid+0x18c/0x540 [ 2089.337978][ T29] do_filp_open+0x1c5/0x3d0 [ 2089.362928][ T29] ? vfs_tmpfile+0x490/0x490 [ 2089.367629][ T29] ? _raw_spin_unlock+0x28/0x40 [ 2089.372514][ T29] ? alloc_fd+0x58f/0x630 [ 2089.402794][ T29] do_sys_openat2+0x12c/0x1c0 [ 2089.407552][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 2089.432984][ T29] ? do_sys_open+0xe0/0xe0 [ 2089.437481][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2089.444315][ T29] ? lock_chain_count+0x20/0x20 [ 2089.449223][ T29] __x64_sys_openat+0x139/0x160 [ 2089.462989][ T29] do_syscall_64+0x55/0xb0 [ 2089.467465][ T29] ? clear_bhb_loop+0x40/0x90 [ 2089.472181][ T29] ? clear_bhb_loop+0x40/0x90 [ 2089.476991][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2089.482988][ T29] RIP: 0033:0x7f7ff54a7407 [ 2089.487426][ T29] RSP: 002b:00007fff5bcab380 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2089.498161][ T29] RAX: ffffffffffffffda RBX: 00007f7ff5b63880 RCX: 00007f7ff54a7407 [ 2089.506225][ T29] RDX: 00000000000a0800 RSI: 00005651c48efbf0 RDI: ffffffffffffff9c [ 2089.514332][ T29] RBP: 00005651c48c3910 R08: 0000000000000000 R09: 0000000000000000 [ 2089.522324][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005651c4ab5e60 [ 2089.530490][ T29] R13: 00005651c48db410 R14: 0000000000000000 R15: 00005651c4ab5e60 [ 2089.538642][ T29] [ 2089.541722][ T29] INFO: task udevd:17780 blocked for more than 144 seconds. [ 2089.551191][ T29] Not tainted syzkaller #0 [ 2089.562907][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2089.571736][ T29] task:udevd state:D stack:24424 pid:17780 ppid:5157 flags:0x00004006 [ 2089.581074][ T29] Call Trace: [ 2089.584617][ T29] [ 2089.587591][ T29] __schedule+0x14d2/0x44d0 [ 2089.592154][ T29] ? asan.module_dtor+0x20/0x20 [ 2089.597176][ T29] ? preempt_schedule+0xab/0xc0 [ 2089.602089][ T29] ? preempt_schedule_common+0x82/0xc0 [ 2089.607612][ T29] ? preempt_schedule+0xab/0xc0 [ 2089.612501][ T29] schedule+0xbd/0x170 [ 2089.616678][ T29] io_schedule+0x80/0xd0 [ 2089.620977][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 2089.626566][ T29] ? folio_wait_bit+0x30/0x30 [ 2089.631302][ T29] ? _compound_head+0x120/0x120 [ 2089.636716][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 2089.642052][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 2089.647816][ T29] ? blkdev_writepage+0x30/0x30 [ 2089.652719][ T29] read_part_sector+0xd2/0x350 [ 2089.657597][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 2089.663142][ T29] ? put_partition+0x350/0x350 [ 2089.667955][ T29] bdev_disk_changed+0x73a/0x1410 [ 2089.673097][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 2089.678420][ T29] ? iput+0x347/0x920 [ 2089.682410][ T29] blkdev_get_whole+0x30d/0x390 [ 2089.687337][ T29] blkdev_get_by_dev+0x279/0x600 [ 2089.692307][ T29] blkdev_open+0x152/0x360 [ 2089.696931][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 2089.701554][ T29] do_dentry_open+0x8c6/0x1500 [ 2089.706420][ T29] path_openat+0x274b/0x3190 [ 2089.711057][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 2089.716147][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2089.722233][ T29] ? verify_lock_unused+0x140/0x140 [ 2089.727491][ T29] ? do_filp_open+0x3d0/0x3d0 [ 2089.732214][ T29] ? __virt_addr_valid+0x18c/0x540 [ 2089.737548][ T29] do_filp_open+0x1c5/0x3d0 [ 2089.742135][ T29] ? vfs_tmpfile+0x490/0x490 [ 2089.746853][ T29] ? _raw_spin_unlock+0x28/0x40 [ 2089.752367][ T29] ? alloc_fd+0x58f/0x630 [ 2089.756843][ T29] do_sys_openat2+0x12c/0x1c0 [ 2089.761547][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 2089.767428][ T29] ? do_sys_open+0xe0/0xe0 [ 2089.771873][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2089.777983][ T29] ? lock_chain_count+0x20/0x20 [ 2089.782946][ T29] __x64_sys_openat+0x139/0x160 [ 2089.787847][ T29] do_syscall_64+0x55/0xb0 [ 2089.792319][ T29] ? clear_bhb_loop+0x40/0x90 [ 2089.797042][ T29] ? clear_bhb_loop+0x40/0x90 [ 2089.801746][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2089.807719][ T29] RIP: 0033:0x7f7ff54a7407 [ 2089.812159][ T29] RSP: 002b:00007fff5bcab380 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2089.820680][ T29] RAX: ffffffffffffffda RBX: 00007f7ff5b63880 RCX: 00007f7ff54a7407 [ 2089.828722][ T29] RDX: 00000000000a0800 RSI: 00005651c48ce670 RDI: ffffffffffffff9c [ 2089.836824][ T29] RBP: 00005651c48c3910 R08: 0000000000000000 R09: 0000000000000000 [ 2089.844959][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005651c48d7fa0 [ 2089.853495][ T29] R13: 00005651c48db410 R14: 0000000000000000 R15: 00005651c48d7fa0 [ 2089.861493][ T29] [ 2089.919380][ T29] INFO: task udevd:17789 blocked for more than 145 seconds. [ 2089.957929][ T29] Not tainted syzkaller #0 [ 2089.985359][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2089.994698][ T29] task:udevd state:D stack:24872 pid:17789 ppid:5157 flags:0x00004006 [ 2090.004207][ T29] Call Trace: [ 2090.007508][ T29] [ 2090.013113][ T29] __schedule+0x14d2/0x44d0 [ 2090.017700][ T29] ? asan.module_dtor+0x20/0x20 [ 2090.022599][ T29] ? mark_lock+0x94/0x320 [ 2090.027314][ T29] ? lock_chain_count+0x20/0x20 [ 2090.032194][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 2090.061629][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 2090.067876][ T29] schedule+0xbd/0x170 [ 2090.072001][ T29] io_schedule+0x80/0xd0 [ 2090.077065][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 2090.082423][ T29] ? folio_wait_bit+0x30/0x30 [ 2090.087576][ T29] ? _compound_head+0x120/0x120 [ 2090.092474][ T29] ? filemap_add_folio+0x192/0x3c0 [ 2090.098023][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 2090.118211][ T29] ? blkdev_writepage+0x30/0x30 [ 2090.123386][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 2090.128531][ T29] ? blkdev_writepage+0x30/0x30 [ 2090.142992][ T29] read_part_sector+0xd2/0x350 [ 2090.147843][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 2090.179795][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 2090.185481][ T29] ? put_partition+0x350/0x350 [ 2090.190310][ T29] bdev_disk_changed+0x73a/0x1410 [ 2090.195818][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 2090.201133][ T29] blkdev_get_whole+0x30d/0x390 [ 2090.228530][ T29] blkdev_get_by_dev+0x279/0x600 [ 2090.233814][ T29] blkdev_open+0x152/0x360 [ 2090.238279][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 2090.247086][ T29] do_dentry_open+0x8c6/0x1500 [ 2090.251876][ T29] path_openat+0x274b/0x3190 [ 2090.263112][ T29] ? __schedule+0x14da/0x44d0 [ 2090.288502][ T29] ? do_filp_open+0x3d0/0x3d0 [ 2090.297649][ T29] ? asan.module_dtor+0x20/0x20 [ 2090.302535][ T29] ? mark_lock+0x94/0x320 [ 2090.318900][ T29] do_filp_open+0x1c5/0x3d0 [ 2090.323840][ T29] ? vfs_tmpfile+0x490/0x490 [ 2090.328489][ T29] ? preempt_schedule_common+0x82/0xc0 [ 2090.337792][ T29] ? _raw_spin_unlock+0x3a/0x40 [ 2090.342686][ T29] ? alloc_fd+0x58f/0x630 [ 2090.372829][ T29] do_sys_openat2+0x12c/0x1c0 [ 2090.377569][ T29] ? do_sys_open+0xe0/0xe0 [ 2090.382022][ T29] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2090.407150][ T29] __x64_sys_openat+0x139/0x160 [ 2090.412071][ T29] do_syscall_64+0x55/0xb0 [ 2090.434338][ T29] ? clear_bhb_loop+0x40/0x90 [ 2090.439081][ T29] ? clear_bhb_loop+0x40/0x90 [ 2090.443911][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2090.449853][ T29] RIP: 0033:0x7f7ff54a7407 [ 2090.454381][ T29] RSP: 002b:00007fff5bcab380 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2090.463266][ T29] RAX: ffffffffffffffda RBX: 00007f7ff5b63880 RCX: 00007f7ff54a7407 [ 2090.472227][ T29] RDX: 00000000000a0800 RSI: 00005651c48c44d0 RDI: ffffffffffffff9c [ 2090.480394][ T29] RBP: 00005651c48c3910 R08: 0000000000000000 R09: 0000000000000000 [ 2090.488503][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005651c48d6e20 [ 2090.496561][ T29] R13: 00005651c48db410 R14: 0000000000000000 R15: 00005651c48d6e20 [ 2090.504653][ T29] [ 2090.512636][ T29] [ 2090.512636][ T29] Showing all locks held in the system: [ 2090.552935][ T29] 1 lock held by khungtaskd/29: [ 2090.557864][ T29] #0: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2090.580375][ T29] 3 locks held by kworker/u4:4/59: [ 2090.585894][ T29] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 2090.603155][ T29] #1: ffffc900015a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 2090.622016][ T29] #2: ffffffff8dfbc5c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 2090.631396][ T29] 2 locks held by getty/5547: [ 2090.636662][ T29] #0: ffff88802cc560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2090.646778][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 2090.657241][ T29] 3 locks held by kworker/0:1/9412: [ 2090.662477][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 2090.674811][ T29] #1: ffffc90003177d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 2090.687831][ T29] #2: ffff88801e3ca240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x26c/0x3170 [ 2090.698350][ T29] 2 locks held by syz-executor/15617: [ 2090.704116][ T29] #0: ffffffff8dfbc5c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 2090.713446][ T29] #1: ffffffff8cd358b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 2090.724906][ T29] 1 lock held by udevd/17732: [ 2090.729615][ T29] #0: ffff888021aaa4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2090.740611][ T29] 1 lock held by udevd/17780: [ 2090.745648][ T29] #0: ffff888021aaf4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2090.756001][ T29] 1 lock held by udevd/17789: [ 2090.760709][ T29] #0: ffff888021ac34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2090.771220][ T29] 2 locks held by kworker/1:3/20262: [ 2090.779857][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 2090.791281][ T29] #1: ffffc900051c7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 2090.804332][ T29] 1 lock held by syz-executor/23071: [ 2090.809656][ T29] #0: ffffffff8dfbc5c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 2090.819148][ T29] 1 lock held by syz.1.4687/23406: [ 2090.825149][ T29] #0: ffffffff8dfbc5c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 2090.835629][ T29] 1 lock held by syz.3.4691/23414: [ 2090.840821][ T29] [ 2090.844962][ T29] ============================================= [ 2090.844962][ T29] [ 2090.854976][ T29] NMI backtrace for cpu 0 [ 2090.859346][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2090.866581][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2090.876675][ T29] Call Trace: [ 2090.879991][ T29] [ 2090.882963][ T29] dump_stack_lvl+0x16c/0x230 [ 2090.887685][ T29] ? show_regs_print_info+0x20/0x20 [ 2090.892922][ T29] ? load_image+0x3b0/0x3b0 [ 2090.897459][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 2090.902438][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2090.908648][ T29] ? _printk+0xd0/0x110 [ 2090.912862][ T29] ? load_image+0x3b0/0x3b0 [ 2090.917371][ T29] ? load_image+0x3b0/0x3b0 [ 2090.921892][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2090.927966][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2090.933987][ T29] watchdog+0xf41/0xf80 [ 2090.938144][ T29] ? watchdog+0x1e1/0xf80 [ 2090.942490][ T29] kthread+0x2fa/0x390 [ 2090.946558][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2090.951589][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2090.956201][ T29] ret_from_fork+0x48/0x80 [ 2090.960644][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2090.965242][ T29] ret_from_fork_asm+0x11/0x20 [ 2090.970028][ T29] [ 2090.973961][ T29] Sending NMI from CPU 0 to CPUs 1: [ 2090.979753][ C1] NMI backtrace for cpu 1 [ 2090.979762][ C1] CPU: 1 PID: 2904 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 2090.979779][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2090.979790][ C1] Workqueue: bat_events batadv_nc_worker [ 2090.979818][ C1] RIP: 0010:lock_acquire+0x1fa/0x410 [ 2090.979840][ C1] Code: 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 4b c7 04 3c 00 00 00 00 <66> 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 65 48 8b 04 25 28 00 00 [ 2090.979854][ C1] RSP: 0018:ffffc9000b927a40 EFLAGS: 00000206 [ 2090.979867][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 7242df3794345000 [ 2090.979878][ C1] RDX: 0000000000000000 RSI: ffffffff8aaace60 RDI: ffffffff8afc6f40 [ 2090.979890][ C1] RBP: ffffc9000b927b48 R08: dffffc0000000000 R09: 1ffffffff21b52a0 [ 2090.979902][ C1] R10: dffffc0000000000 R11: fffffbfff21b52a1 R12: 1ffff92001724f54 [ 2090.979915][ C1] R13: ffffffff8cd2fee0 R14: 0000000000000246 R15: dffffc0000000000 [ 2090.979927][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2090.979947][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2090.979958][ C1] CR2: 000000110c2d4df7 CR3: 000000000cb30000 CR4: 00000000003526e0 [ 2090.979972][ C1] Call Trace: [ 2090.979979][ C1] [ 2090.979988][ C1] ? batadv_nc_worker+0xd2/0x610 [ 2090.980013][ C1] ? read_lock_is_recursive+0x20/0x20 [ 2090.980050][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2090.980072][ C1] ? batadv_nc_worker+0xd2/0x610 [ 2090.980096][ C1] batadv_nc_worker+0xef/0x610 [ 2090.980120][ C1] ? batadv_nc_worker+0xd2/0x610 [ 2090.980146][ C1] ? process_scheduled_works+0x957/0x15b0 [ 2090.980167][ C1] process_scheduled_works+0xa45/0x15b0 [ 2090.980202][ C1] ? assign_work+0x400/0x400 [ 2090.980225][ C1] ? assign_work+0x39e/0x400 [ 2090.980247][ C1] worker_thread+0xa55/0xfc0 [ 2090.980268][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2090.980288][ C1] ? _raw_spin_unlock+0x40/0x40 [ 2090.980305][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 2090.980334][ C1] kthread+0x2fa/0x390 [ 2090.980348][ C1] ? pr_cont_work+0x560/0x560 [ 2090.980368][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2090.980384][ C1] ret_from_fork+0x48/0x80 [ 2090.980403][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2090.980418][ C1] ret_from_fork_asm+0x11/0x20 [ 2090.980449][ C1] [ 2090.981436][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2091.219018][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2091.226225][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2091.236285][ T29] Call Trace: [ 2091.239568][ T29] [ 2091.242505][ T29] dump_stack_lvl+0x16c/0x230 [ 2091.247209][ T29] ? show_regs_print_info+0x20/0x20 [ 2091.252416][ T29] ? load_image+0x3b0/0x3b0 [ 2091.256956][ T29] panic+0x2c0/0x710 [ 2091.260864][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 2091.266521][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2091.271035][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2091.276595][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2091.282782][ T29] watchdog+0xf80/0xf80 [ 2091.286999][ T29] ? watchdog+0x1e1/0xf80 [ 2091.291394][ T29] kthread+0x2fa/0x390 [ 2091.295475][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2091.300518][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2091.305120][ T29] ret_from_fork+0x48/0x80 [ 2091.309545][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2091.314142][ T29] ret_from_fork_asm+0x11/0x20 [ 2091.318931][ T29] [ 2091.322291][ T29] Kernel Offset: disabled [ 2091.326620][ T29] Rebooting in 86400 seconds..