last executing test programs: 1m35.738153358s ago: executing program 2 (id=1037): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000003200)=""/94, &(0x7f0000000780)=""/91, 0xdddd0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 1m33.085097011s ago: executing program 2 (id=1039): mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000240)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1m30.979234881s ago: executing program 2 (id=1043): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x880) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r3, r1, 0x1}) 1m29.490758287s ago: executing program 2 (id=1047): setxattr$incfs_metadata(0x0, 0x0, &(0x7f00000031c0), 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) 1m28.018975382s ago: executing program 2 (id=1050): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m27.520931243s ago: executing program 2 (id=1052): openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x880) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) write$P9_ROPEN(r3, &(0x7f0000000380)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x6}, 0xc3}}, 0x18) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20382, 0x0) prlimit64(r0, 0x2, &(0x7f0000000140)={0x2, 0x8}, &(0x7f0000000180)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) 1m11.667810991s ago: executing program 32 (id=1052): openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x880) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) write$P9_ROPEN(r3, &(0x7f0000000380)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x6}, 0xc3}}, 0x18) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20382, 0x0) prlimit64(r0, 0x2, &(0x7f0000000140)={0x2, 0x8}, &(0x7f0000000180)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) 22.139406012s ago: executing program 4 (id=1175): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 19.400749898s ago: executing program 1 (id=1179): syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 19.034656336s ago: executing program 4 (id=1180): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 18.785665992s ago: executing program 4 (id=1182): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xfff]}, 0x8, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0xc248, &(0x7f0000000080)={[{@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x2cd}}, {@init_itable}]}, 0x81, 0x60a, &(0x7f0000000a80)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0xfffffffc}, 0x20}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a0000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f0000000540), &(0x7f0000000700)=r2}, 0x20) 17.143504551s ago: executing program 1 (id=1185): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) openat(0xffffffffffffff9c, 0x0, 0x82403, 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0xa2040, 0x30) io_setup(0x20fe, &(0x7f0000000540)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4, 0x0, 0x15}, 0x10) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 15.278616775s ago: executing program 1 (id=1188): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 12.735930736s ago: executing program 3 (id=1192): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x8) ptrace$pokeuser(0x6, r0, 0x118, 0x8137da) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_usb_connect(0x2, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_audit(0x10, 0x3, 0x9) tkill(0x0, 0x13) tkill(0x0, 0x12) r5 = io_uring_setup(0x3aa5, &(0x7f00000002c0)={0x0, 0x32b6, 0x880, 0x0, 0x35d}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0xd267}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0xfeb1}}, 0x48) close_range(r5, 0xffffffffffffffff, 0x0) waitid(0x1, 0x0, 0x0, 0x8, &(0x7f00000003c0)) sendmsg$AUDIT_SET(r4, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40880) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000140)={0xf08, 0x2d, 0x1, 0x70bd26, 0x25dfdbfd, {0xd}, [@nested={0x2c, 0x1, 0x0, 0x1, [@typed={0x8, 0xb8, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x105}, @nested={0x4, 0xa}, @nested={0x4, 0x68}, @generic, @nested={0x4, 0x86}, @typed={0x8, 0x155, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0xd, 0x0, 0x0, @uid=r8}]}, @nested={0xd6a, 0xa3, 0x0, 0x1, [@generic="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", @generic="2746e3f3730da3c89be260ff6c5cdf7325ebd7692c467b411faf70bf3fd3fd6037641f2af6cee944972d04adbf9ab432daec5024a7906d180c7cc655d883b8", @generic="6f6e97cb826416a7e570a0ee98d81b518743c9d5eb0ec1910139bf7d0fd3eba31f237f911ed19b696af799cafd66fa9a06f0dcf78db4e3f8dae436e87c854165f6b85929d83abfd2fe8a33c6b99d8e16fd72c7", @nested={0x4, 0xfc}, @nested={0x4, 0x74}, @generic="b70b4d1a428200a892ac1afe7909f77faacab1cd2c403072d2ea142a6a7f8cb5e7f852eafeb2f49d0644308791df7674fe724818573d2bcb0fb8a83969ba87812266cc9772bca2341bfc612db79a8559f00f67f7c5e675d3ba9c6e876dfffde2f1e4f0cf0ac9ffbae5859c157cddc6d6b908a5ec9334776a2e84ca8ef639d4fff130af619022e2e512e5a0d1f97709e800abe5312250656561005049761497bdc03ebc0b8d7e942e7a14914e3d88fa38809f2035740dd2f0dcb57609f22baaa7be551415d799a9b969e971b8"]}, @nested={0x159, 0x101, 0x0, 0x1, [@nested={0x4, 0x100}, @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="3c43eb85882f90c1273ebefb4ff33721ba6a233ffcc3bdcd5ec079f760037af1138b88bf1790998181b65631e3a0b30ac369ba2e2078d4f7003e9e749268226035d69c8764e406e15899c86d56aaed3becc0a5d04a493a984430b0a3fa3b7a", @typed={0x8, 0x154, 0x0, 0x0, @fd}, @nested={0x4, 0xc3}, @generic="810b4cbacaeea6179f143672eeb0959e51c5ab15b4644228c61f86944ab1a30865c8ff6502ee81f1a1d242b073af3cf55618f4c50b0cde3a196c1ed52579b16a7da41e8d7935028f78a3ad819ebd239e6cdc87f33bba5af7a51e30538e27caefb100b45a48c042ba63bc96e15835f3023179a039150c999f0c51e41d78fa60f5b61aa4477ae4e4f84870bffd5eabbffb2a3aaae51f8f206db9b5f2a1f329d76d0937f065a4f37b16f736fa39ca5f8eadb7cd2817d51502616c60d8d0cbc14e42728c2d2e0558ca9044ed08ff5595", @typed={0x8, 0xed, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}, @typed={0x8, 0x10f, 0x0, 0x0, @uid}]}]}, 0xf08}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 12.318661006s ago: executing program 1 (id=1194): syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 11.506754305s ago: executing program 4 (id=1196): mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000240)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x880) syz_open_procfs(0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) unshare(0x22020600) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x1, 0x801001a, 0x66d, 0xfffe, 0x6, 0x3, 0x0, 0x0, 0x41, 0x100000}}, 0x50) 10.017715581s ago: executing program 3 (id=1198): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) socket(0x10, 0x80002, 0x4) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x4}, 0x10}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() tkill(r4, 0x2a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) 7.723759416s ago: executing program 4 (id=1199): openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x880) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) write$P9_ROPEN(r3, &(0x7f0000000380)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x6}, 0xc3}}, 0x18) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20382, 0x0) prlimit64(r0, 0x2, &(0x7f0000000140)={0x2, 0x8}, &(0x7f0000000180)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10fffb, 0xfffffffd}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x30002}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x1c, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e21c, r3, 0x0, &(0x7f00000005c0)=[r5], &(0x7f0000000600)}, 0x94) 7.390244553s ago: executing program 0 (id=1200): io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r0, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a9", 0x96}, {&(0x7f0000000ac0)='?', 0x1}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.982893057s ago: executing program 0 (id=1201): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x143040, 0x650ce4b086bd45cb) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000080)={0x1, 0x2, 0x1000, 0x20, 0x0, 0x20, 0x0, 0x0}) 5.982280717s ago: executing program 1 (id=1202): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 5.155522817s ago: executing program 3 (id=1203): io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4", 0x2}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.050624989s ago: executing program 4 (id=1204): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xfff]}, 0x8, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0xc248, &(0x7f0000000080)={[{@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x2cd}}, {@init_itable}]}, 0x81, 0x60a, &(0x7f0000000a80)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0xfffffffc}, 0x20}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a0000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f0000000540), &(0x7f0000000700)=r2}, 0x20) 4.890488443s ago: executing program 0 (id=1205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.348954486s ago: executing program 3 (id=1206): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.252161928s ago: executing program 3 (id=1207): mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000240)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x880) syz_open_procfs(0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) unshare(0x22020600) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x1, 0x801001a, 0x66d, 0xfffe, 0x6, 0x3, 0x0, 0x0, 0x41, 0x100000}}, 0x50) 3.722855291s ago: executing program 0 (id=1208): syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$ttyS3(0xffffff9c, 0x0, 0x208801, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x30}}, 0x20000000) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) 596.627906ms ago: executing program 0 (id=1209): io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a9", 0x96}, {&(0x7f0000000ac0)='?', 0x1}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 547.145517ms ago: executing program 3 (id=1210): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x82403, 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0xa2040, 0x30) io_setup(0x20fe, &(0x7f0000000540)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4, 0x0, 0x15}, 0x10) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 236.006374ms ago: executing program 0 (id=1211): openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x880) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) write$P9_ROPEN(r3, &(0x7f0000000380)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x6}, 0xc3}}, 0x18) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20382, 0x0) prlimit64(r0, 0x2, &(0x7f0000000140)={0x2, 0x8}, &(0x7f0000000180)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10fffb, 0xfffffffd}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, 0x0) 0s ago: executing program 1 (id=1212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) kernel console output (not intermixed with test programs): 7.022636][ T788] usb usb2-port1: attempt power cycle [ 397.118018][ T27] audit: type=1800 audit(1787194037.972:115): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.701" name="addr_trtype" dev="configfs" ino=17540 res=0 errno=0 [ 397.142788][ T8457] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 397.179839][ T8457] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 397.227773][ T27] audit: type=1800 audit(1787194037.982:116): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.701" name="addr_adrfam" dev="configfs" ino=17541 res=0 errno=0 [ 397.282557][ T24] block nbd0: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 300 seconds [ 397.398852][ T27] audit: type=1800 audit(1787194038.042:117): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.701" name="addr_trsvcid" dev="configfs" ino=17542 res=0 errno=0 [ 397.635061][ T8464] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 397.646233][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.676187][ T8466] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 398.029439][ T8473] syzkaller0: entered promiscuous mode [ 398.038933][ T8473] syzkaller0: entered allmulticast mode [ 398.089049][ T10] block nbd9: Possible stuck request ffff888022928000: control (read@0,4096B). Runtime 60 seconds [ 399.270745][ T24] block nbd2: Possible stuck request ffff888022238000: control (read@0,4096B). Runtime 180 seconds [ 399.328039][ T8477] fuse: Bad value for 'fd' [ 399.691659][ T8484] loop0: detected capacity change from 0 to 512 [ 399.722086][ T8484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.743814][ T8484] EXT4-fs warning (device loop0): ext4_begin_enable_verity:135: inode #15: comm syz.0.711: verity is only allowed on extent-based files [ 399.854348][ T788] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 399.942650][ T27] audit: type=1800 audit(1787194040.802:118): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.712" name="addr_trtype" dev="configfs" ino=17597 res=0 errno=0 [ 399.974461][ T8488] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 400.000264][ T8488] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 400.016244][ T27] audit: type=1800 audit(1787194040.862:119): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.712" name="addr_adrfam" dev="configfs" ino=17598 res=0 errno=0 [ 400.045062][ T8488] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 400.054619][ T788] usb 4-1: device descriptor read/64, error -71 [ 400.081747][ T27] audit: type=1800 audit(1787194040.912:120): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.712" name="addr_trsvcid" dev="configfs" ino=17599 res=0 errno=0 [ 400.273536][ T8490] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 400.565346][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.565369][ T788] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 400.612988][ T10] block nbd6: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 120 seconds [ 400.624315][ T10] block nbd6: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 120 seconds [ 400.635912][ T10] block nbd6: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 120 seconds [ 400.647294][ T10] block nbd6: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 120 seconds [ 400.750716][ T8495] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 400.754188][ T788] usb 4-1: device descriptor read/64, error -71 [ 400.873609][ T8497] nbd12: detected capacity change from 0 to 63 [ 400.883206][ T788] usb usb4-port1: attempt power cycle [ 400.892827][ T5792] block nbd12: Receive control failed (result -32) [ 401.292429][ T788] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 401.355303][ T788] usb 4-1: device descriptor read/8, error -71 [ 401.632401][ T788] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 401.663259][ T788] usb 4-1: device descriptor read/8, error -71 [ 401.738911][ T27] audit: type=1800 audit(1787194042.602:121): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.721" name="addr_trtype" dev="configfs" ino=17647 res=0 errno=0 [ 401.773841][ T8512] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 401.791413][ T788] usb usb4-port1: unable to enumerate USB device [ 401.799130][ T27] audit: type=1800 audit(1787194042.672:122): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.721" name="addr_adrfam" dev="configfs" ino=17264 res=0 errno=0 [ 401.801381][ T8512] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 401.839714][ T27] audit: type=1800 audit(1787194042.702:123): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.721" name="addr_trsvcid" dev="configfs" ino=17265 res=0 errno=0 [ 401.840791][ T8512] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 402.107153][ T8520] loop0: detected capacity change from 0 to 512 [ 402.159101][ T8521] loop1: detected capacity change from 0 to 512 [ 402.234603][ T8521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.400704][ T8520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.471933][ T8520] EXT4-fs warning (device loop0): ext4_begin_enable_verity:135: inode #15: comm syz.0.723: verity is only allowed on extent-based files [ 402.997288][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.000843][ T24] block nbd1: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 300 seconds [ 403.035388][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.069536][ T8525] loop3: detected capacity change from 0 to 128 [ 403.208144][ T8525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 403.228040][ T8525] System zones: 1-3, 19-19, 35-36 [ 403.241018][ T8525] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 403.274792][ T8531] nbd13: detected capacity change from 0 to 63 [ 403.288627][ T8525] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 403.305356][ T8535] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 403.362224][ T5792] block nbd13: Receive control failed (result -32) [ 403.424934][ T27] audit: type=1804 audit(1787194044.292:124): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.728" name="/newroot/187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=12 res=1 errno=0 [ 403.491361][ T27] audit: type=1804 audit(1787194044.342:125): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.728" name="/newroot/187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=13 res=1 errno=0 [ 403.529928][ T8539] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 403.573157][ T8539] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 403.592387][ T27] audit: type=1800 audit(1787194044.392:126): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.730" name="addr_trtype" dev="configfs" ino=17673 res=0 errno=0 [ 403.616458][ T8539] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 403.654186][ T27] audit: type=1800 audit(1787194044.432:127): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.730" name="addr_adrfam" dev="configfs" ino=17674 res=0 errno=0 [ 403.694704][ T8545] cgroup: release_agent respecified [ 403.725675][ T27] audit: type=1800 audit(1787194044.492:128): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.730" name="addr_trsvcid" dev="configfs" ino=17341 res=0 errno=0 [ 405.010067][ T8554] loop0: detected capacity change from 0 to 512 [ 405.119356][ T8554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.291337][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.936877][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.979879][ T8562] loop2: detected capacity change from 0 to 512 [ 406.001875][ T8562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.023961][ T8562] EXT4-fs warning (device loop2): ext4_begin_enable_verity:135: inode #15: comm syz.2.737: verity is only allowed on extent-based files [ 406.056867][ T8564] loop1: detected capacity change from 0 to 512 [ 406.106441][ T8564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.122197][ T8564] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.236507][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.383443][ T23] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 406.399246][ T8570] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 409.197829][ T27] audit: type=1800 audit(1787194050.062:129): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.742" name="addr_traddr" dev="configfs" ino=17391 res=0 errno=0 [ 409.222944][ T8576] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 409.273171][ T23] usb 4-1: device descriptor read/64, error -71 [ 409.292858][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.570835][ T8583] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 409.639735][ T8586] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 411.902552][ T8608] loop1: detected capacity change from 0 to 512 [ 413.624470][ T8605] nbd14: detected capacity change from 0 to 63 [ 413.842044][ T8608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.860907][ T8608] EXT4-fs warning (device loop1): ext4_begin_enable_verity:135: inode #15: comm syz.1.751: verity is only allowed on extent-based files [ 413.872793][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 414.066793][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.310681][ T8613] loop0: detected capacity change from 0 to 128 [ 414.812490][ T8613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 414.962820][ T8613] System zones: 1-3, 19-19, 35-36 [ 415.175381][ T8613] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 415.189168][ T8613] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 415.293405][ T5792] block nbd14: Receive control failed (result -32) [ 415.327440][ T27] audit: type=1804 audit(1787194056.192:130): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.752" name="/newroot/192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=12 res=1 errno=0 [ 415.387236][ T27] audit: type=1804 audit(1787194056.212:131): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.752" name="/newroot/192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=13 res=1 errno=0 [ 415.628152][ T8621] loop2: detected capacity change from 0 to 1024 [ 415.783673][ T8621] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 416.058524][ T8621] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 416.321927][ T8621] EXT4-fs (loop2): orphan cleanup on readonly fs [ 416.351033][ T8621] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #3: comm syz.2.755: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 416.383653][ T8621] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.755: Bad quota inode: 3, type: 0 [ 416.401475][ T8621] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 416.432613][ T8621] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 416.441533][ T8621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 416.456068][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 418.284801][ T10] block nbd10: Possible stuck request ffff888022940000: control (read@0,4096B). Runtime 30 seconds [ 418.522010][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.531695][ T40] block nbd5: Possible stuck request ffff8880223b8000: control (read@0,4096B). Runtime 150 seconds [ 418.543463][ T7998] block nbd7: Possible stuck request ffff888022808000: control (read@0,1024B). Runtime 90 seconds [ 418.554515][ T5951] block nbd3: Possible stuck request ffff8880222c8000: control (read@0,4096B). Runtime 180 seconds [ 418.566208][ T7998] block nbd7: Possible stuck request ffff888022808200: control (read@1024,1024B). Runtime 90 seconds [ 418.578463][ T7998] block nbd7: Possible stuck request ffff888022808400: control (read@2048,1024B). Runtime 90 seconds [ 418.625625][ T7998] block nbd7: Possible stuck request ffff888022808600: control (read@3072,1024B). Runtime 90 seconds [ 418.639594][ T8642] nbd15: detected capacity change from 0 to 63 [ 419.823369][ T10] block nbd8: Possible stuck request ffff888022838000: control (read@0,4096B). Runtime 90 seconds [ 420.274280][ T5792] block nbd15: Receive control failed (result -32) [ 421.662496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 422.095961][ T24] block nbd11: Possible stuck request ffff888022978000: control (read@0,1024B). Runtime 30 seconds [ 422.107477][ T24] block nbd11: Possible stuck request ffff888022978200: control (read@1024,1024B). Runtime 30 seconds [ 422.119504][ T24] block nbd11: Possible stuck request ffff888022978400: control (read@2048,1024B). Runtime 30 seconds [ 422.130690][ T24] block nbd11: Possible stuck request ffff888022978600: control (read@3072,1024B). Runtime 30 seconds [ 422.243304][ T8657] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 424.878697][ T24] block nbd4: Possible stuck request ffff888022300000: control (read@0,4096B). Runtime 180 seconds [ 425.156572][ T8672] loop3: detected capacity change from 0 to 128 [ 425.225380][ T8672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 425.233548][ T8672] System zones: 1-3, 19-19, 35-36 [ 425.253659][ T8672] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 425.272149][ T8672] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 425.382504][ T27] audit: type=1804 audit(1787194066.242:132): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.769" name="/newroot/197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=12 res=1 errno=0 [ 425.398216][ T8678] cgroup: release_agent respecified [ 426.039927][ T27] audit: type=1804 audit(1787194066.812:133): pid=8680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.769" name="/newroot/197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=13 res=1 errno=0 [ 427.975155][ T24] block nbd0: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 330 seconds [ 428.133236][ T8693] block nbd9: Possible stuck request ffff888022928000: control (read@0,4096B). Runtime 90 seconds [ 428.296753][ T8694] nbd16: detected capacity change from 0 to 63 [ 428.878840][ T8698] cgroup: release_agent respecified [ 428.903682][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.452737][ T24] block nbd2: Possible stuck request ffff888022238000: control (read@0,4096B). Runtime 210 seconds [ 432.253065][ T8706] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 432.496038][ T8693] block nbd6: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 150 seconds [ 432.507112][ T8693] block nbd6: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 150 seconds [ 432.520085][ T8693] block nbd6: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 150 seconds [ 432.531649][ T8693] block nbd6: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 150 seconds [ 433.472386][ T24] block nbd1: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 330 seconds [ 433.521089][ T5792] block nbd16: Receive control failed (result -32) [ 435.399406][ T8731] cgroup: release_agent respecified [ 437.231307][ T8735] loop2: detected capacity change from 0 to 128 [ 437.276781][ T8735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 437.300419][ T8735] System zones: 1-3, 19-19, 35-36 [ 437.315146][ T8735] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 437.332923][ T8735] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 437.390700][ T27] audit: type=1800 audit(1787194078.252:134): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.786" name="idVendor" dev="configfs" ino=18715 res=0 errno=0 [ 437.517026][ T27] audit: type=1800 audit(1787194078.292:135): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.786" name="idProduct" dev="configfs" ino=18186 res=0 errno=0 [ 438.022978][ T27] audit: type=1800 audit(1787194078.292:136): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.786" name="configuration" dev="configfs" ino=18187 res=0 errno=0 [ 438.356584][ T27] audit: type=1804 audit(1787194078.952:137): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.784" name="/newroot/189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=12 res=1 errno=0 [ 438.432475][ T27] audit: type=1804 audit(1787194079.282:138): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.784" name="/newroot/189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=13 res=1 errno=0 [ 438.681618][ T8757] cgroup: release_agent respecified [ 438.937355][ T8758] nbd17: detected capacity change from 0 to 63 [ 439.615134][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.289309][ T8762] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 440.320872][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.337322][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.624129][ T5792] block nbd17: Receive control failed (result -32) [ 443.335845][ T8775] nbd18: detected capacity change from 0 to 63 [ 444.471786][ T8783] loop3: detected capacity change from 0 to 128 [ 448.804684][ T8783] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 448.805107][ T8783] EXT4-fs: failed to create workqueue [ 448.820934][ T8783] EXT4-fs (loop3): mount failed [ 448.960707][ T5792] block nbd18: Receive control failed (result -32) [ 449.284396][ T5951] block nbd3: Possible stuck request ffff8880222c8000: control (read@0,4096B). Runtime 210 seconds [ 449.295510][ T7998] block nbd7: Possible stuck request ffff888022808000: control (read@0,1024B). Runtime 120 seconds [ 449.306612][ T24] block nbd5: Possible stuck request ffff8880223b8000: control (read@0,4096B). Runtime 180 seconds [ 449.319620][ T7998] block nbd7: Possible stuck request ffff888022808200: control (read@1024,1024B). Runtime 120 seconds [ 449.331227][ T7998] block nbd7: Possible stuck request ffff888022808400: control (read@2048,1024B). Runtime 120 seconds [ 449.343119][ T7998] block nbd7: Possible stuck request ffff888022808600: control (read@3072,1024B). Runtime 120 seconds [ 449.438434][ T1059] block nbd10: Possible stuck request ffff888022940000: control (read@0,4096B). Runtime 60 seconds [ 449.914252][ T1059] block nbd8: Possible stuck request ffff888022838000: control (read@0,4096B). Runtime 120 seconds [ 450.044954][ T8798] loop2: detected capacity change from 0 to 128 [ 450.210417][ T8798] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 450.220020][ T8798] System zones: 1-3, 19-19, 35-36 [ 450.280642][ T8798] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 450.298702][ T8798] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 453.046145][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 453.059987][ T7998] block nbd11: Possible stuck request ffff888022978000: control (read@0,1024B). Runtime 60 seconds [ 453.076313][ T7998] block nbd11: Possible stuck request ffff888022978200: control (read@1024,1024B). Runtime 60 seconds [ 453.096094][ T7998] block nbd11: Possible stuck request ffff888022978400: control (read@2048,1024B). Runtime 60 seconds [ 453.108601][ T7998] block nbd11: Possible stuck request ffff888022978600: control (read@3072,1024B). Runtime 60 seconds [ 454.058753][ T8816] loop1: detected capacity change from 0 to 128 [ 455.283146][ T7998] block nbd4: Possible stuck request ffff888022300000: control (read@0,4096B). Runtime 210 seconds [ 455.589286][ T8816] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 455.599662][ T8816] System zones: 1-3, 19-19, 35-36 [ 455.627071][ T8816] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 455.642515][ T8816] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 458.271664][ T1059] block nbd9: Possible stuck request ffff888022928000: control (read@0,4096B). Runtime 120 seconds [ 458.854248][ T7998] block nbd0: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 360 seconds [ 459.280791][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 459.546809][ T7998] block nbd2: Possible stuck request ffff888022238000: control (read@0,4096B). Runtime 240 seconds [ 460.209647][ T8858] loop0: detected capacity change from 0 to 128 [ 460.394142][ T8858] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 460.402946][ T8858] System zones: 1-3, 19-19, 35-36 [ 460.424921][ T8858] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 460.441381][ T8858] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 463.025978][ T1059] block nbd6: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 180 seconds [ 463.038824][ T1059] block nbd6: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 180 seconds [ 463.050959][ T1059] block nbd6: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 180 seconds [ 463.062464][ T1059] block nbd6: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 180 seconds [ 463.198013][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.181595][ T7998] block nbd1: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 360 seconds [ 465.241714][ T8885] loop1: detected capacity change from 0 to 1024 [ 465.260714][ T8885] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 465.313269][ T8885] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 465.321625][ T8885] EXT4-fs (loop1): orphan cleanup on readonly fs [ 465.350501][ T8885] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #3: comm syz.1.817: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 465.365631][ T8888] cgroup: release_agent respecified [ 465.378188][ T8885] EXT4-fs error (device loop1): ext4_quota_enable:7147: comm syz.1.817: Bad quota inode: 3, type: 0 [ 465.426902][ T8885] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 465.446318][ T8885] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 465.478619][ T8885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 468.105460][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.728406][ T27] audit: type=1800 audit(1787194109.592:139): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.823" name="addr_trtype" dev="configfs" ino=19752 res=0 errno=0 [ 468.752834][ T8905] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 468.787290][ T8905] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 468.798261][ T27] audit: type=1800 audit(1787194109.622:140): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.823" name="addr_adrfam" dev="configfs" ino=19753 res=0 errno=0 [ 468.811199][ T8905] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 468.819960][ T27] audit: type=1800 audit(1787194109.652:141): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.823" name="addr_traddr" dev="configfs" ino=19236 res=0 errno=0 [ 468.853352][ T27] audit: type=1800 audit(1787194109.672:142): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.823" name="addr_trsvcid" dev="configfs" ino=19755 res=0 errno=0 [ 469.916666][ T8914] loop1: detected capacity change from 0 to 512 [ 469.948630][ T8914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.971789][ T8914] EXT4-fs warning (device loop1): ext4_begin_enable_verity:135: inode #15: comm syz.1.826: verity is only allowed on extent-based files [ 470.058342][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.096397][ T8921] cgroup: release_agent respecified [ 470.138749][ T27] audit: type=1800 audit(1787194111.002:143): pid=8920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.827" name="idVendor" dev="configfs" ino=19244 res=0 errno=0 [ 470.328183][ T8923] loop1: detected capacity change from 0 to 1024 [ 470.366459][ T8923] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 470.448767][ T8923] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 470.468250][ T8923] EXT4-fs (loop1): orphan cleanup on readonly fs [ 470.523917][ T8923] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #3: comm syz.1.829: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 470.572964][ T8923] EXT4-fs error (device loop1): ext4_quota_enable:7147: comm syz.1.829: Bad quota inode: 3, type: 0 [ 470.589444][ T8923] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 470.609916][ T8923] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 470.619370][ T8923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 473.251929][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.322572][ T8] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 473.356028][ T8947] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 474.708989][ T8] usb 4-1: device descriptor read/all, error -71 [ 475.126357][ T8960] loop0: detected capacity change from 0 to 512 [ 475.175954][ T8960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.212990][ T8960] EXT4-fs warning (device loop0): ext4_begin_enable_verity:135: inode #15: comm syz.0.837: verity is only allowed on extent-based files [ 475.296141][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.408030][ T27] audit: type=1800 audit(1787194116.272:144): pid=8969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.842" name="idVendor" dev="configfs" ino=19962 res=0 errno=0 [ 475.461163][ T8971] loop2: detected capacity change from 0 to 1024 [ 475.468444][ T27] audit: type=1800 audit(1787194116.272:145): pid=8969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.842" name="idProduct" dev="configfs" ino=19963 res=0 errno=0 [ 475.506399][ T8971] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 475.521619][ T27] audit: type=1800 audit(1787194116.302:146): pid=8969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.842" name="configuration" dev="configfs" ino=19964 res=0 errno=0 [ 475.570552][ T8971] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 475.590687][ T8971] EXT4-fs (loop2): orphan cleanup on readonly fs [ 475.612772][ T8971] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #3: comm syz.2.841: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 475.637808][ T8971] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.841: Bad quota inode: 3, type: 0 [ 475.649284][ T8971] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 475.669631][ T8971] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 475.687697][ T8971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 475.737096][ T2885] nci: nci_rx_work: unknown MT 0x7 [ 476.547698][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.652625][ T8973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.397449][ T5951] block nbd5: Possible stuck request ffff8880223b8000: control (read@0,4096B). Runtime 210 seconds [ 479.411978][ T24] block nbd7: Possible stuck request ffff888022808000: control (read@0,1024B). Runtime 150 seconds [ 479.425976][ T7998] block nbd3: Possible stuck request ffff8880222c8000: control (read@0,4096B). Runtime 240 seconds [ 479.438766][ T24] block nbd7: Possible stuck request ffff888022808200: control (read@1024,1024B). Runtime 150 seconds [ 479.452785][ T24] block nbd7: Possible stuck request ffff888022808400: control (read@2048,1024B). Runtime 150 seconds [ 479.906955][ T24] block nbd7: Possible stuck request ffff888022808600: control (read@3072,1024B). Runtime 150 seconds [ 480.430825][ T8708] block nbd8: Possible stuck request ffff888022838000: control (read@0,4096B). Runtime 150 seconds [ 480.446384][ T1059] block nbd10: Possible stuck request ffff888022940000: control (read@0,4096B). Runtime 90 seconds [ 480.516951][ T9011] loop2: detected capacity change from 0 to 512 [ 480.560207][ T9011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.584709][ T9011] EXT4-fs warning (device loop2): ext4_begin_enable_verity:135: inode #15: comm syz.2.850: verity is only allowed on extent-based files [ 480.620282][ T5161] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 480.651260][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.864221][ T5161] usb 4-1: not running at top speed; connect to a high speed hub [ 480.874321][ T5161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 480.902381][ T5161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 480.939665][ T5161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 480.975039][ T5161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 481.045114][ T5161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 481.087947][ T5161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 481.192393][ T5161] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 481.206886][ T5161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.234223][ T5161] usb 4-1: Product: syz [ 481.249499][ T5161] usb 4-1: Manufacturer: syz [ 481.268261][ T5161] usb 4-1: SerialNumber: syz [ 481.309844][ T9003] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.321483][ T9003] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.369732][ T9003] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.387267][ T9003] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.433001][ T9003] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.489398][ T5161] usb 4-1: USB2VGA dongle found at address 23 [ 481.521516][ T5161] usb 4-1: Allocated 8 output buffers [ 481.527706][ T5161] usb 4-1: Not attached to USB 2.0 hub, deferring init [ 483.276745][ T24] block nbd11: Possible stuck request ffff888022978000: control (read@0,1024B). Runtime 90 seconds [ 483.287794][ T24] block nbd11: Possible stuck request ffff888022978200: control (read@1024,1024B). Runtime 90 seconds [ 483.451362][ T24] block nbd11: Possible stuck request ffff888022978400: control (read@2048,1024B). Runtime 90 seconds [ 483.462544][ T24] block nbd11: Possible stuck request ffff888022978600: control (read@3072,1024B). Runtime 90 seconds [ 483.791443][ T5161] usb 4-1: USB disconnect, device number 23 [ 484.145253][ T9038] cgroup: release_agent respecified [ 485.977193][ T24] block nbd4: Possible stuck request ffff888022300000: control (read@0,4096B). Runtime 240 seconds [ 486.446369][ T9053] cgroup: release_agent respecified [ 488.182912][ T9070] loop2: detected capacity change from 0 to 512 [ 488.244569][ T9070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.267283][ T9070] EXT4-fs warning (device loop2): ext4_begin_enable_verity:135: inode #15: comm syz.2.861: verity is only allowed on extent-based files [ 488.303004][ T1059] block nbd9: Possible stuck request ffff888022928000: control (read@0,4096B). Runtime 150 seconds [ 488.345264][ T9074] loop3: detected capacity change from 0 to 1024 [ 488.355604][ T9074] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 488.372362][ T5161] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 488.399576][ T9074] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 488.408366][ T9074] EXT4-fs (loop3): orphan cleanup on readonly fs [ 488.414919][ T9074] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #3: comm syz.3.867: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 488.438021][ T9074] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.867: Bad quota inode: 3, type: 0 [ 488.469818][ T9074] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 488.502278][ T9074] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 488.523723][ T9074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 488.582834][ T5161] usb 2-1: not running at top speed; connect to a high speed hub [ 488.596886][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 488.627138][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 488.640537][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 488.655031][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 488.682319][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 488.718378][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 488.759803][ T5161] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 488.783763][ T5161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.815894][ T5161] usb 2-1: Product: syz [ 488.820157][ T5161] usb 2-1: Manufacturer: syz [ 488.855487][ T5161] usb 2-1: SerialNumber: syz [ 488.933014][ T24] block nbd0: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 390 seconds [ 488.963171][ T9063] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 488.983837][ T9063] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 489.028729][ T9063] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 489.061814][ T9063] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 489.087679][ T9063] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 489.102857][ T5161] usb 2-1: USB2VGA dongle found at address 13 [ 489.124991][ T5161] usb 2-1: Allocated 8 output buffers [ 489.132777][ T5161] usb 2-1: Not attached to USB 2.0 hub, deferring init [ 489.304729][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.362054][ T28] usb 2-1: USB disconnect, device number 13 [ 489.574159][ T24] block nbd2: Possible stuck request ffff888022238000: control (read@0,4096B). Runtime 270 seconds [ 489.878346][ T9089] syzkaller0: entered promiscuous mode [ 489.896695][ T9089] syzkaller0: entered allmulticast mode [ 489.924725][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.114380][ T9092] cgroup: release_agent respecified [ 491.317360][ T9104] cgroup: release_agent respecified [ 493.412500][ T1059] block nbd6: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 210 seconds [ 493.423395][ T1059] block nbd6: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 210 seconds [ 493.434939][ T1059] block nbd6: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 210 seconds [ 493.446923][ T1059] block nbd6: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 210 seconds [ 493.652515][ T788] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 493.667837][ T9136] cgroup: release_agent respecified [ 494.180737][ T788] usb 3-1: not running at top speed; connect to a high speed hub [ 494.310430][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 494.605539][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 494.648107][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 494.706990][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 494.750093][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 494.804146][ T24] block nbd1: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 390 seconds [ 494.822343][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 494.890817][ T788] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 494.927593][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.960806][ T788] usb 3-1: Product: syz [ 494.970315][ T788] usb 3-1: Manufacturer: syz [ 494.978434][ T788] usb 3-1: SerialNumber: syz [ 494.999962][ T9122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.020965][ T9122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.067535][ T9122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.090467][ T9122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.128930][ T9122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.162126][ T788] usb 3-1: USB2VGA dongle found at address 17 [ 495.178121][ T788] usb 3-1: Allocated 8 output buffers [ 495.184631][ T788] usb 3-1: Not attached to USB 2.0 hub, deferring init [ 496.268575][ T23] usb 3-1: USB disconnect, device number 17 [ 496.449184][ T9160] cgroup: release_agent respecified [ 496.950401][ T9170] cgroup: release_agent respecified [ 496.959624][ T27] audit: type=1800 audit(1787194137.812:147): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.895" name="idVendor" dev="configfs" ino=21182 res=0 errno=0 [ 497.108482][ T27] audit: type=1800 audit(1787194137.832:148): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.895" name="idProduct" dev="configfs" ino=21183 res=0 errno=0 [ 497.189400][ T27] audit: type=1800 audit(1787194137.832:149): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.895" name="configuration" dev="configfs" ino=21184 res=0 errno=0 [ 498.004457][ T9181] loop1: detected capacity change from 0 to 512 [ 498.160111][ T9181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.341134][ T9178] EXT4-fs warning (device loop1): ext4_begin_enable_verity:135: inode #15: comm syz.1.898: verity is only allowed on extent-based files [ 498.549607][ T27] audit: type=1800 audit(1787194139.412:150): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.902" name="addr_trtype" dev="configfs" ino=21678 res=0 errno=0 [ 498.574402][ T9190] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 498.593340][ T9190] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 498.604264][ T27] audit: type=1800 audit(1787194139.462:151): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.902" name="addr_traddr" dev="configfs" ino=21679 res=0 errno=0 [ 498.631910][ T9190] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 498.651887][ T27] audit: type=1800 audit(1787194139.502:152): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.902" name="addr_trsvcid" dev="configfs" ino=21680 res=0 errno=0 [ 498.720100][ T9192] cgroup: release_agent respecified [ 500.096166][ T9205] cgroup: release_agent respecified [ 500.125627][ T9208] cgroup: release_agent respecified [ 500.581805][ T5844] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 500.781006][ T5844] usb 1-1: not running at top speed; connect to a high speed hub [ 501.079410][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 501.122352][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 501.136088][ T9214] loop2: detected capacity change from 0 to 128 [ 501.182778][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 501.203498][ T9214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 501.232479][ T9214] System zones: 1-3, 19-19, 35-36 [ 501.239370][ T9214] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 501.252178][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 501.290374][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 501.316676][ T9214] ext4 filesystem being mounted at /215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 501.352356][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 501.363526][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.391710][ T5844] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 501.412908][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.431970][ T5844] usb 1-1: Product: syz [ 501.439964][ T5844] usb 1-1: Manufacturer: syz [ 501.467139][ T5844] usb 1-1: SerialNumber: syz [ 501.491095][ T27] audit: type=1804 audit(1787194142.352:153): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.911" name="/newroot/215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=13 res=1 errno=0 [ 501.551660][ T9202] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 501.582514][ T9202] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 501.593473][ T9202] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 501.600975][ T9202] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 501.634025][ T9202] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 501.664837][ T5844] usb 1-1: USB2VGA dongle found at address 20 [ 501.673483][ T5844] usb 1-1: Allocated 8 output buffers [ 501.678978][ T5844] usb 1-1: Not attached to USB 2.0 hub, deferring init [ 501.737361][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.744462][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.885074][ T5844] usb 1-1: USB disconnect, device number 20 [ 502.120362][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 505.089196][ T9236] cgroup: release_agent respecified [ 506.172597][ T9251] loop0: detected capacity change from 0 to 128 [ 506.269024][ T9251] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 506.277810][ T9251] System zones: 1-3, 19-19, 35-36 [ 506.303128][ T9251] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 506.317610][ T9251] ext4 filesystem being mounted at /235/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 508.897533][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 509.326230][ T9268] nbd19: detected capacity change from 0 to 63 [ 509.479214][ T24] block nbd5: Possible stuck request ffff8880223b8000: control (read@0,4096B). Runtime 240 seconds [ 510.544122][ T9281] cgroup: release_agent respecified [ 511.577040][ T24] block nbd3: Possible stuck request ffff8880222c8000: control (read@0,4096B). Runtime 270 seconds [ 511.603890][ T7998] block nbd7: Possible stuck request ffff888022808000: control (read@0,1024B). Runtime 180 seconds [ 511.668241][ T7998] block nbd7: Possible stuck request ffff888022808200: control (read@1024,1024B). Runtime 180 seconds [ 511.749722][ T7998] block nbd7: Possible stuck request ffff888022808400: control (read@2048,1024B). Runtime 180 seconds [ 511.824785][ T7998] block nbd7: Possible stuck request ffff888022808600: control (read@3072,1024B). Runtime 180 seconds [ 512.649609][ T5792] block nbd19: Receive control failed (result -32) [ 513.039691][ T8693] block nbd10: Possible stuck request ffff888022940000: control (read@0,4096B). Runtime 120 seconds [ 513.050729][ T8708] block nbd8: Possible stuck request ffff888022838000: control (read@0,4096B). Runtime 180 seconds [ 513.392450][ T5145] udevd[5145]: worker [7702] /devices/virtual/block/nbd7 timeout; kill it [ 513.413105][ T5145] udevd[5145]: seq 12062 '/devices/virtual/block/nbd7' killed [ 513.420875][ T5145] udevd[5145]: worker [5794] /devices/virtual/block/nbd0 timeout; kill it [ 513.438839][ T5145] udevd[5145]: seq 10360 '/devices/virtual/block/nbd0' killed [ 513.472360][ T5145] udevd[5145]: worker [5799] /devices/virtual/block/nbd2 timeout; kill it [ 513.548992][ T5145] udevd[5145]: seq 11397 '/devices/virtual/block/nbd2' killed [ 513.571614][ T5145] udevd[5145]: worker [5786] /devices/virtual/block/nbd1 timeout; kill it [ 513.594342][ T5145] udevd[5145]: seq 10487 '/devices/virtual/block/nbd1' killed [ 513.601969][ T5145] udevd[5145]: worker [5793] /devices/virtual/block/nbd3 timeout; kill it [ 513.627051][ T5145] udevd[5145]: seq 11458 '/devices/virtual/block/nbd3' killed [ 513.915702][ T9299] cgroup: release_agent respecified [ 515.016208][ T5951] block nbd11: Possible stuck request ffff888022978000: control (read@0,1024B). Runtime 120 seconds [ 515.032927][ T5951] block nbd11: Possible stuck request ffff888022978200: control (read@1024,1024B). Runtime 120 seconds [ 515.045782][ T5951] block nbd11: Possible stuck request ffff888022978400: control (read@2048,1024B). Runtime 120 seconds [ 515.057870][ T5951] block nbd11: Possible stuck request ffff888022978600: control (read@3072,1024B). Runtime 120 seconds [ 515.115191][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 515.332727][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 515.347002][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 515.375812][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 515.406879][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 515.427228][ T8] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 515.443314][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.457451][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 515.469320][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.521695][ T8] usbtmc 1-1:16.0: bulk endpoints not found [ 516.455232][ T5951] block nbd4: Possible stuck request ffff888022300000: control (read@0,4096B). Runtime 270 seconds [ 518.309105][ T5825] usb 1-1: USB disconnect, device number 21 [ 519.257841][ T5951] block nbd0: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 420 seconds [ 519.265946][ T8693] block nbd9: Possible stuck request ffff888022928000: control (read@0,4096B). Runtime 180 seconds [ 519.712562][ T9344] loop2: detected capacity change from 0 to 128 [ 519.756803][ T5951] block nbd2: Possible stuck request ffff888022238000: control (read@0,4096B). Runtime 300 seconds [ 519.786119][ T9344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 519.844661][ T9349] cgroup: release_agent respecified [ 519.903677][ T9350] loop3: detected capacity change from 0 to 128 [ 519.956507][ T9344] System zones: 1-3, 19-19, 35-36 [ 520.025438][ T9350] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 520.034268][ T9350] System zones: 1-3, 19-19, 35-36 [ 520.115882][ T9350] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 520.138388][ T9350] ext4 filesystem being mounted at /240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 520.250890][ T9344] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 520.632812][ T9344] ext4 filesystem being mounted at /223/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 521.032331][ T27] audit: type=1804 audit(1787194161.832:154): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.945" name="/newroot/223/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=12 res=1 errno=0 [ 521.491291][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 522.075162][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 522.452562][ T5825] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 522.692570][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 522.747905][ T5825] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 523.662931][ T5825] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 524.107519][ T5825] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 524.284849][ T5825] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 524.294975][ T5825] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 524.443540][ T5825] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.564600][ T5825] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 524.635214][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.776594][ T5825] usbtmc: probe of 3-1:16.0 failed with error -22 [ 525.203634][ T8708] block nbd6: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 240 seconds [ 525.214860][ T8708] block nbd6: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 240 seconds [ 525.271855][ T8708] block nbd6: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 240 seconds [ 525.296492][ T8708] block nbd6: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 240 seconds [ 525.416503][ T5951] block nbd1: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 420 seconds [ 525.795946][ T9379] nbd20: detected capacity change from 0 to 63 [ 526.895283][ T9389] cgroup: release_agent respecified [ 528.371864][ T28] usb 3-1: USB disconnect, device number 18 [ 528.700728][ T5792] block nbd20: Receive control failed (result -32) [ 529.746424][ T9409] loop3: detected capacity change from 0 to 128 [ 532.942037][ T9409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 532.951010][ T9409] System zones: 1-3, 19-19, 35-36 [ 533.000895][ T9409] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 533.024510][ T9409] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 533.956914][ T27] audit: type=1800 audit(1787194174.782:155): pid=9416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.962" name="idVendor" dev="configfs" ino=23728 res=0 errno=0 [ 534.039098][ T27] audit: type=1800 audit(1787194174.792:156): pid=9416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.962" name="configuration" dev="configfs" ino=23729 res=0 errno=0 [ 534.169780][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 534.222081][ T9418] loop0: detected capacity change from 0 to 512 [ 534.282715][ T9420] cgroup: release_agent respecified [ 534.304638][ T9418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.616913][ T9425] nbd21: detected capacity change from 0 to 63 [ 535.171567][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.562421][ T5161] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 536.804125][ T5161] usb 1-1: Using ep0 maxpacket: 8 [ 536.878837][ T5161] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 536.947901][ T5161] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 537.033195][ T5161] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 537.123987][ T5161] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 537.212861][ T5161] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 537.300765][ T5161] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.421215][ T5161] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 537.436300][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.470829][ T5792] block nbd21: Receive control failed (result -32) [ 537.505929][ T5161] usbtmc: probe of 1-1:16.0 failed with error -22 [ 537.618201][ T9435] cgroup: release_agent respecified [ 538.927695][ T9448] cgroup: release_agent respecified [ 539.492650][ T5951] block nbd5: Possible stuck request ffff8880223b8000: control (read@0,4096B). Runtime 270 seconds [ 539.875686][ T8] usb 1-1: USB disconnect, device number 22 [ 540.207565][ T9466] cgroup: release_agent respecified [ 540.573850][ T9468] loop0: detected capacity change from 0 to 128 [ 542.271141][ T7998] block nbd7: Possible stuck request ffff888022808000: control (read@0,1024B). Runtime 210 seconds [ 542.282119][ T5951] block nbd3: Possible stuck request ffff8880222c8000: control (read@0,4096B). Runtime 300 seconds [ 542.294087][ T7998] block nbd7: Possible stuck request ffff888022808200: control (read@1024,1024B). Runtime 210 seconds [ 543.172557][ T7998] block nbd7: Possible stuck request ffff888022808400: control (read@2048,1024B). Runtime 210 seconds [ 543.184050][ T7998] block nbd7: Possible stuck request ffff888022808600: control (read@3072,1024B). Runtime 210 seconds [ 543.267517][ T9468] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 543.267927][ T9468] EXT4-fs: failed to create workqueue [ 543.283206][ T9468] EXT4-fs (loop0): mount failed [ 543.811099][ T27] audit: type=1800 audit(1787194184.672:157): pid=9473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.976" name="addr_trtype" dev="configfs" ino=23937 res=0 errno=0 [ 543.851445][ T8708] block nbd8: Possible stuck request ffff888022838000: control (read@0,4096B). Runtime 210 seconds [ 543.862326][ T8693] block nbd10: Possible stuck request ffff888022940000: control (read@0,4096B). Runtime 150 seconds [ 543.993560][ T9473] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 544.027560][ T9473] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 544.052253][ T27] audit: type=1800 audit(1787194184.892:158): pid=9473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.976" name="addr_adrfam" dev="configfs" ino=23938 res=0 errno=0 [ 544.081445][ T9473] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 544.111834][ T27] audit: type=1800 audit(1787194184.892:159): pid=9473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.976" name="addr_traddr" dev="configfs" ino=23939 res=0 errno=0 [ 544.169507][ T27] audit: type=1800 audit(1787194184.942:160): pid=9473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.976" name="addr_trsvcid" dev="configfs" ino=23940 res=0 errno=0 [ 544.207132][ T9479] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 545.252586][ T28] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 545.261257][ T7998] block nbd11: Possible stuck request ffff888022978000: control (read@0,1024B). Runtime 150 seconds [ 545.273463][ T7998] block nbd11: Possible stuck request ffff888022978200: control (read@1024,1024B). Runtime 150 seconds [ 545.284787][ T7998] block nbd11: Possible stuck request ffff888022978400: control (read@2048,1024B). Runtime 150 seconds [ 545.296139][ T7998] block nbd11: Possible stuck request ffff888022978600: control (read@3072,1024B). Runtime 150 seconds [ 545.506636][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 545.513932][ T28] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 545.542319][ T28] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 545.572377][ T28] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 545.592328][ T28] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 545.612308][ T28] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 545.632256][ T28] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.900443][ T28] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 545.909858][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.934987][ T28] usbtmc: probe of 3-1:16.0 failed with error -22 [ 546.029051][ T9501] loop1: detected capacity change from 0 to 128 [ 546.177953][ T9501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 546.187537][ T9501] System zones: 1-3, 19-19, 35-36 [ 546.215050][ T9501] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 546.235526][ T9501] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 547.262811][ T7998] block nbd4: Possible stuck request ffff888022300000: control (read@0,4096B). Runtime 300 seconds [ 547.288412][ T12] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 548.106248][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 550.025094][ T8693] block nbd9: Possible stuck request ffff888022928000: control (read@0,4096B). Runtime 210 seconds [ 550.026844][ T7998] block nbd0: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 450 seconds [ 550.104394][ T8] usb 3-1: USB disconnect, device number 19 [ 550.147388][ T9513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.374758][ T7998] block nbd2: Possible stuck request ffff888022238000: control (read@0,4096B). Runtime 330 seconds [ 550.660598][ T27] audit: type=1800 audit(1787194191.522:161): pid=9543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.993" name="idProduct" dev="configfs" ino=22988 res=0 errno=0 [ 550.721828][ T27] audit: type=1800 audit(1787194191.552:162): pid=9543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.993" name="configuration" dev="configfs" ino=22989 res=0 errno=0 [ 550.811191][ T9546] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 551.832007][ T9550] cgroup: release_agent respecified [ 553.045024][ T9558] loop1: detected capacity change from 0 to 512 [ 553.200870][ T9558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.330830][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.156527][ T9578] loop2: detected capacity change from 0 to 128 [ 556.252644][ T8693] block nbd6: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 270 seconds [ 556.265325][ T8693] block nbd6: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 270 seconds [ 556.276557][ T8693] block nbd6: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 270 seconds [ 556.287733][ T8693] block nbd6: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 270 seconds [ 557.992460][ T9578] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 557.992842][ T9578] EXT4-fs: failed to create workqueue [ 558.007953][ T9578] EXT4-fs (loop2): mount failed [ 558.437853][ T7998] block nbd1: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 450 seconds [ 558.681582][ T9586] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 558.866846][ T9594] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 561.158351][ T9616] fuse: Unknown parameter 'grou00000000000000000000' [ 561.762734][ T9626] loop2: detected capacity change from 0 to 128 [ 562.398939][ T9628] loop0: detected capacity change from 0 to 128 [ 563.265661][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.273478][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.397967][ T9626] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 564.400009][ T9626] EXT4-fs: failed to create workqueue [ 564.416142][ T9626] EXT4-fs (loop2): mount failed [ 564.508657][ T9628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 564.518137][ T9628] System zones: 1-3, 19-19, 35-36 [ 564.574162][ T9628] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 564.588955][ T9628] ext4 filesystem being mounted at /256/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 567.287761][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 568.755721][ T9650] loop0: detected capacity change from 0 to 128 [ 570.270839][ T7998] block nbd5: Possible stuck request ffff8880223b8000: control (read@0,4096B). Runtime 300 seconds [ 571.437378][ T9650] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 571.445663][ T9650] System zones: 1-3, 19-19, 35-36 [ 571.451258][ T9650] EXT4-fs: error -4 creating inode table initialization thread [ 571.459838][ T9650] EXT4-fs (loop0): mount failed [ 572.177197][ T9670] loop3: detected capacity change from 0 to 128 [ 572.387975][ T9670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 572.397522][ T9670] System zones: 1-3, 19-19, 35-36 [ 572.422077][ T9670] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 572.450867][ T9670] ext4 filesystem being mounted at /260/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 573.271715][ T7998] block nbd7: Possible stuck request ffff888022808000: control (read@0,1024B). Runtime 240 seconds [ 573.292760][ T7998] block nbd7: Possible stuck request ffff888022808200: control (read@1024,1024B). Runtime 240 seconds [ 573.305274][ T7998] block nbd7: Possible stuck request ffff888022808400: control (read@2048,1024B). Runtime 240 seconds [ 573.318802][ T7998] block nbd7: Possible stuck request ffff888022808600: control (read@3072,1024B). Runtime 240 seconds [ 574.475767][ T9679] loop0: detected capacity change from 0 to 128 [ 574.740814][ T9679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 574.750187][ T9679] System zones: 1-3, 19-19, 35-36 [ 574.765804][ T9679] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 574.794404][ T9679] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 575.263332][ T7998] block nbd3: Possible stuck request ffff8880222c8000: control (read@0,4096B). Runtime 330 seconds [ 575.278565][ T8708] block nbd10: Possible stuck request ffff888022940000: control (read@0,4096B). Runtime 180 seconds [ 575.289766][ T8693] block nbd8: Possible stuck request ffff888022838000: control (read@0,4096B). Runtime 240 seconds [ 575.693194][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 577.137417][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 577.373195][ T5951] block nbd11: Possible stuck request ffff888022978000: control (read@0,1024B). Runtime 180 seconds [ 577.386728][ T5951] block nbd11: Possible stuck request ffff888022978200: control (read@1024,1024B). Runtime 180 seconds [ 577.398322][ T5951] block nbd11: Possible stuck request ffff888022978400: control (read@2048,1024B). Runtime 180 seconds [ 577.411188][ T5951] block nbd11: Possible stuck request ffff888022978600: control (read@3072,1024B). Runtime 180 seconds [ 577.888549][ T9695] fuse: Bad value for 'group_id' [ 577.895165][ T5951] block nbd4: Possible stuck request ffff888022300000: control (read@0,4096B). Runtime 330 seconds [ 578.366617][ T9708] loop3: detected capacity change from 0 to 128 [ 578.471506][ T9708] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 578.480398][ T9708] System zones: 1-3, 19-19, 35-36 [ 578.497221][ T9708] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 578.529019][ T9708] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 581.226767][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 581.267662][ T8693] block nbd9: Possible stuck request ffff888022928000: control (read@0,4096B). Runtime 240 seconds [ 581.282493][ T7998] block nbd2: Possible stuck request ffff888022238000: control (read@0,4096B). Runtime 360 seconds [ 581.294110][ T5951] block nbd0: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 480 seconds [ 581.460758][ T9718] cgroup: release_agent respecified [ 583.039823][ T9735] fuse: Bad value for 'group_id' [ 585.814966][ T27] audit: type=1800 audit(1787194226.642:163): pid=9750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1049" name="idProduct" dev="configfs" ino=23278 res=0 errno=0 [ 585.886551][ T27] audit: type=1800 audit(1787194226.722:164): pid=9750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1049" name="configuration" dev="configfs" ino=23282 res=0 errno=0 [ 586.036166][ T9754] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 586.475384][ T9759] loop0: detected capacity change from 0 to 128 [ 586.567400][ T9759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 586.596474][ T9759] System zones: 1-3, 19-19, 35-36 [ 586.646196][ T9759] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 586.716797][ T9759] ext4 filesystem being mounted at /264/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 586.863146][ T8693] block nbd6: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 300 seconds [ 586.878497][ T8693] block nbd6: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 300 seconds [ 586.891119][ T8693] block nbd6: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 300 seconds [ 587.272639][ T8693] block nbd6: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 300 seconds [ 587.528895][ T9767] loop2: detected capacity change from 0 to 128 [ 587.554376][ T9767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 587.562621][ T9767] System zones: 1-3, 19-19, 35-36 [ 587.574218][ T9767] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 587.587701][ T9767] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 588.881961][ T5951] block nbd1: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 480 seconds [ 589.052267][ T27] audit: type=1800 audit(1787194229.902:165): pid=9775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1055" name="addr_trtype" dev="configfs" ino=23333 res=0 errno=0 [ 589.054740][ T9775] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 589.092377][ T27] audit: type=1800 audit(1787194229.912:166): pid=9775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1055" name="addr_adrfam" dev="configfs" ino=23334 res=0 errno=0 [ 589.124166][ T9776] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 589.162845][ T27] audit: type=1800 audit(1787194229.992:167): pid=9776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1055" name="addr_trsvcid" dev="configfs" ino=24591 res=0 errno=0 [ 589.316954][ T9778] fuse: Bad value for 'group_id' [ 589.340246][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 589.350277][ T9780] cgroup: release_agent respecified [ 590.494277][ T9792] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 590.910319][ T9798] loop3: detected capacity change from 0 to 128 [ 594.269731][ T9798] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 594.270661][ T9798] EXT4-fs: failed to create workqueue [ 594.293811][ T9798] EXT4-fs (loop3): mount failed [ 596.124515][ T9805] loop0: detected capacity change from 0 to 128 [ 597.336411][ T9805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 597.344671][ T9805] System zones: 1-3, 19-19, 35-36 [ 597.381639][ T9805] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 597.402793][ T9805] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 599.005693][ T9813] loop1: detected capacity change from 0 to 128 [ 599.420698][ T9813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 599.430205][ T9813] System zones: 1-3, 19-19, 35-36 [ 599.446730][ T9813] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 599.500062][ T9813] ext4 filesystem being mounted at /276/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 600.306285][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 600.639588][ T27] audit: type=1800 audit(1787194241.492:168): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1066" name="addr_trtype" dev="configfs" ino=24659 res=0 errno=0 [ 600.682267][ T9820] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 600.732787][ T9820] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 600.772479][ T27] audit: type=1800 audit(1787194241.542:169): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1066" name="addr_adrfam" dev="configfs" ino=24660 res=0 errno=0 [ 600.896804][ T27] audit: type=1800 audit(1787194241.592:170): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1066" name="addr_trsvcid" dev="configfs" ino=24661 res=0 errno=0 [ 601.141044][ T9828] cgroup: release_agent respecified [ 601.416294][ T5951] block nbd5: Possible stuck request ffff8880223b8000: control (read@0,4096B). Runtime 330 seconds [ 601.738134][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 601.839985][ T9827] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 602.389461][ T9833] loop3: detected capacity change from 0 to 512 [ 602.647866][ T9833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.724791][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.744855][ T5951] block nbd7: Possible stuck request ffff888022808000: control (read@0,1024B). Runtime 270 seconds [ 603.756344][ T5951] block nbd7: Possible stuck request ffff888022808200: control (read@1024,1024B). Runtime 270 seconds [ 603.769569][ T5951] block nbd7: Possible stuck request ffff888022808400: control (read@2048,1024B). Runtime 270 seconds [ 603.781512][ T5951] block nbd7: Possible stuck request ffff888022808600: control (read@3072,1024B). Runtime 270 seconds [ 603.872324][ T27] audit: type=1800 audit(1787194244.732:171): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1077" name="addr_trtype" dev="configfs" ino=25635 res=0 errno=0 [ 603.909899][ T9847] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 603.954311][ T9428] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 603.961585][ T27] audit: type=1800 audit(1787194244.772:172): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1077" name="addr_adrfam" dev="configfs" ino=25639 res=0 errno=0 [ 603.985486][ T9428] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 603.996761][ T27] audit: type=1800 audit(1787194244.862:173): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1077" name="addr_trsvcid" dev="configfs" ino=24726 res=0 errno=0 [ 604.021258][ T9847] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 604.031999][ T9428] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 604.083348][ T9428] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 604.109553][ T9428] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 604.122063][ T9428] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 604.566016][ T9861] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 604.716535][ T9863] loop3: detected capacity change from 0 to 128 [ 604.883599][ T9863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 604.892687][ T9863] System zones: 1-3, 19-19, 35-36 [ 604.916794][ T9863] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 604.936720][ T9863] ext4 filesystem being mounted at /276/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 606.026222][ T9870] cgroup: release_agent respecified [ 606.262359][ T5792] Bluetooth: hci4: command tx timeout [ 607.174660][ T9849] chnl_net:caif_netlink_parms(): no params data found [ 607.216553][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 607.341358][ T5951] block nbd3: Possible stuck request ffff8880222c8000: control (read@0,4096B). Runtime 360 seconds [ 607.414665][ T8708] block nbd8: Possible stuck request ffff888022838000: control (read@0,4096B). Runtime 270 seconds [ 607.426765][ T8693] block nbd10: Possible stuck request ffff888022940000: control (read@0,4096B). Runtime 210 seconds [ 609.270910][ T5792] Bluetooth: hci4: command tx timeout [ 609.282531][ T5951] block nbd11: Possible stuck request ffff888022978000: control (read@0,1024B). Runtime 210 seconds [ 609.294078][ T7998] block nbd4: Possible stuck request ffff888022300000: control (read@0,4096B). Runtime 360 seconds [ 609.306498][ T9886] loop3: detected capacity change from 0 to 128 [ 610.274019][ T5951] block nbd11: Possible stuck request ffff888022978200: control (read@1024,1024B). Runtime 210 seconds [ 610.484495][ T5951] block nbd11: Possible stuck request ffff888022978400: control (read@2048,1024B). Runtime 210 seconds [ 610.497502][ T5951] block nbd11: Possible stuck request ffff888022978600: control (read@3072,1024B). Runtime 210 seconds [ 610.651261][ T9886] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 610.651668][ T9886] EXT4-fs: failed to create workqueue [ 610.666899][ T9886] EXT4-fs (loop3): mount failed [ 611.034131][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.066370][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.099047][ T9849] bridge_slave_0: entered allmulticast mode [ 611.135285][ T9849] bridge_slave_0: entered promiscuous mode [ 611.171088][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.191361][ T27] audit: type=1800 audit(1787194252.052:174): pid=9891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1085" name="addr_trtype" dev="configfs" ino=24800 res=0 errno=0 [ 611.218636][ T9891] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 611.231693][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.240270][ T9849] bridge_slave_1: entered allmulticast mode [ 611.248170][ T9849] bridge_slave_1: entered promiscuous mode [ 611.273603][ T9891] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 611.293720][ T27] audit: type=1800 audit(1787194252.092:175): pid=9891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1085" name="addr_adrfam" dev="configfs" ino=24801 res=0 errno=0 [ 611.327647][ T9849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.337905][ T5792] Bluetooth: hci4: command tx timeout [ 611.345952][ T9761] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 611.357017][ T27] audit: type=1800 audit(1787194252.132:176): pid=9891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1085" name="addr_trsvcid" dev="configfs" ino=24805 res=0 errno=0 [ 611.384683][ T9849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.501509][ T9849] team0: Port device team_slave_0 added [ 611.518593][ T9893] loop0: detected capacity change from 0 to 512 [ 611.526064][ T9849] team0: Port device team_slave_1 added [ 611.604715][ T9893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.624754][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.631908][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.659209][ T9849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.672658][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.679706][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.705998][ T9849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.809875][ T9899] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 611.817989][ T7998] block nbd0: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 510 seconds [ 611.822675][ T8693] block nbd9: Possible stuck request ffff888022928000: control (read@0,4096B). Runtime 270 seconds [ 611.831797][ T5951] block nbd2: Possible stuck request ffff888022238000: control (read@0,4096B). Runtime 390 seconds [ 611.881589][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.906114][ T9849] hsr_slave_0: entered promiscuous mode [ 612.013125][ T9849] hsr_slave_1: entered promiscuous mode [ 612.053294][ T9849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.061015][ T9849] Cannot create hsr debugfs directory [ 612.713232][ T9910] loop0: detected capacity change from 0 to 128 [ 612.885404][ T9910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 612.894204][ T9910] System zones: 1-3, 19-19, 35-36 [ 612.910465][ T9910] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 612.932073][ T9910] ext4 filesystem being mounted at /277/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 613.879844][ T5792] Bluetooth: hci4: command tx timeout [ 614.235237][ T9849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 614.300208][ T9849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 614.396349][ T9849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 614.466822][ T9849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 615.057744][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.129777][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 615.592729][ T9849] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.086723][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.093969][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.165791][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.174609][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.213897][ T27] audit: type=1800 audit(1787194257.082:177): pid=9923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1095" name="addr_trtype" dev="configfs" ino=25846 res=0 errno=0 [ 616.247365][ T9923] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 616.274840][ T9849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 616.285449][ T9849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 616.310150][ T9923] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 616.319439][ T27] audit: type=1800 audit(1787194257.112:178): pid=9923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1095" name="addr_adrfam" dev="configfs" ino=25847 res=0 errno=0 [ 616.319513][ T27] audit: type=1800 audit(1787194257.172:179): pid=9923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1095" name="addr_trsvcid" dev="configfs" ino=25848 res=0 errno=0 [ 616.447027][ T9928] loop3: detected capacity change from 0 to 512 [ 616.549522][ T9928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.575954][ T9934] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 616.726807][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.932837][ T8693] block nbd6: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 330 seconds [ 616.945954][ T8693] block nbd6: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 330 seconds [ 616.957291][ T8693] block nbd6: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 330 seconds [ 617.595504][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.445953][ T9952] loop3: detected capacity change from 0 to 128 [ 619.145440][ T9952] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 619.154475][ T9952] System zones: 1-3, 19-19, 35-36 [ 619.170261][ T9952] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 619.212878][ T9952] ext4 filesystem being mounted at /283/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 619.310485][ T8693] block nbd6: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 330 seconds [ 620.292439][ T5951] block nbd1: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 510 seconds [ 620.878074][ T9849] veth0_vlan: entered promiscuous mode [ 620.938267][ T9849] veth1_vlan: entered promiscuous mode [ 621.108401][ T9849] veth0_macvtap: entered promiscuous mode [ 621.153878][ T9849] veth1_macvtap: entered promiscuous mode [ 621.207175][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.218829][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.229503][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.241007][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.250941][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.261065][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 621.276791][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.302617][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.323380][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.338759][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.397084][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.422249][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.460122][ T9972] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 621.468558][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.493936][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.507165][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.523179][ T27] audit: type=1800 audit(1787194262.392:180): pid=9974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1106" name="addr_trtype" dev="configfs" ino=25381 res=0 errno=0 [ 621.532342][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.575326][ T9974] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 621.583157][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.587528][ T27] audit: type=1800 audit(1787194262.442:181): pid=9974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1106" name="addr_adrfam" dev="configfs" ino=25382 res=0 errno=0 [ 621.610971][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.629536][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.639633][ T9974] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 621.661828][ T9849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.688897][ T9849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.691352][ T27] audit: type=1800 audit(1787194262.502:182): pid=9974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1106" name="addr_trsvcid" dev="configfs" ino=25383 res=0 errno=0 [ 621.711795][ T9849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.734349][ T9849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.752116][ T9976] loop1: detected capacity change from 0 to 512 [ 621.844578][ T9976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.029232][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.129829][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.367831][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.887186][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.968679][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.627380][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.644710][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.430949][ T9999] cgroup: release_agent respecified [ 627.145807][T10009] loop1: detected capacity change from 0 to 128 [ 627.720114][T10009] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 627.729046][T10009] System zones: 1-3, 19-19, 35-36 [ 627.757428][T10009] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 627.788462][T10009] ext4 filesystem being mounted at /290/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 628.380514][T10015] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 628.560304][ T27] audit: type=1800 audit(1787194269.422:183): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1118" name="addr_trtype" dev="configfs" ino=26841 res=0 errno=0 [ 628.614002][T10017] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 628.644157][T10017] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 628.657100][ T27] audit: type=1800 audit(1787194269.472:184): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1118" name="addr_adrfam" dev="configfs" ino=26842 res=0 errno=0 [ 628.741949][ T27] audit: type=1800 audit(1787194269.512:185): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1118" name="addr_trsvcid" dev="configfs" ino=26843 res=0 errno=0 [ 629.587960][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 630.151207][T10039] fuse: Unknown parameter 'grou00000000000000000000' [ 630.288858][ T27] audit: type=1800 audit(1787194271.152:186): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1125" name="addr_trtype" dev="configfs" ino=27018 res=0 errno=0 [ 630.321589][T10041] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 630.355899][T10041] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 630.376484][ T27] audit: type=1800 audit(1787194271.212:187): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1125" name="addr_adrfam" dev="configfs" ino=27019 res=0 errno=0 [ 630.398483][T10041] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 630.436717][ T27] audit: type=1800 audit(1787194271.252:188): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1125" name="addr_trsvcid" dev="configfs" ino=27020 res=0 errno=0 [ 630.590442][T10043] cgroup: release_agent respecified [ 630.805039][T10045] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 630.845736][ T27] audit: type=1800 audit(1787194271.712:189): pid=10047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1128" name="addr_trtype" dev="configfs" ino=25969 res=0 errno=0 [ 630.868011][T10047] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 630.891382][T10047] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 630.933283][ T27] audit: type=1800 audit(1787194271.752:190): pid=10047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1128" name="addr_adrfam" dev="configfs" ino=25970 res=0 errno=0 [ 630.954490][T10047] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 631.002758][ T27] audit: type=1800 audit(1787194271.792:191): pid=10047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1128" name="addr_trsvcid" dev="configfs" ino=25975 res=0 errno=0 [ 631.742449][T10063] fuse: Unknown parameter 'grou00000000000000000000' [ 631.768294][ T5951] block nbd5: Possible stuck request ffff8880223b8000: control (read@0,4096B). Runtime 360 seconds [ 631.913877][T10065] loop1: detected capacity change from 0 to 128 [ 632.181500][T10065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 632.190391][T10065] System zones: 1-3, 19-19, 35-36 [ 632.223930][T10065] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 632.239337][T10065] ext4 filesystem being mounted at /294/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 633.651679][T10074] loop0: detected capacity change from 0 to 512 [ 633.741726][T10074] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1135: inode has both inline data and extents flags [ 633.793511][T10074] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1135: couldn't read orphan inode 15 (err -117) [ 633.840433][T10074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.009460][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 634.163084][T10082] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 634.216859][ T5951] block nbd7: Possible stuck request ffff888022808000: control (read@0,1024B). Runtime 300 seconds [ 634.228124][ T5951] block nbd7: Possible stuck request ffff888022808200: control (read@1024,1024B). Runtime 300 seconds [ 634.240247][ T5951] block nbd7: Possible stuck request ffff888022808400: control (read@2048,1024B). Runtime 300 seconds [ 634.253492][ T5951] block nbd7: Possible stuck request ffff888022808600: control (read@3072,1024B). Runtime 300 seconds [ 634.317452][ T27] audit: type=1800 audit(1787194275.182:192): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1138" name="addr_trtype" dev="configfs" ino=26078 res=0 errno=0 [ 634.349447][T10084] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 634.417444][ T27] audit: type=1800 audit(1787194275.282:193): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1138" name="addr_adrfam" dev="configfs" ino=26079 res=0 errno=0 [ 634.427006][T10084] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 634.626440][T10087] nbd22: detected capacity change from 0 to 63 [ 634.641760][ T27] audit: type=1800 audit(1787194275.492:194): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1138" name="addr_trsvcid" dev="configfs" ino=26147 res=0 errno=0 [ 634.668463][T10084] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 635.335672][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.692583][ T7998] block nbd3: Possible stuck request ffff8880222c8000: control (read@0,4096B). Runtime 390 seconds [ 637.711177][ T9428] block nbd22: Receive control failed (result -32) [ 638.109746][ T8693] block nbd8: Possible stuck request ffff888022838000: control (read@0,4096B). Runtime 300 seconds [ 638.121376][ T8708] block nbd10: Possible stuck request ffff888022940000: control (read@0,4096B). Runtime 240 seconds [ 638.475975][T10101] fuse: Unknown parameter 'grou00000000000000000000' [ 638.612818][T10109] cgroup: release_agent respecified [ 639.084762][T10112] loop3: detected capacity change from 0 to 128 [ 639.120936][T10112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 639.166084][T10112] System zones: 1-3, 19-19, 35-36 [ 639.199148][T10112] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 639.259090][T10112] ext4 filesystem being mounted at /294/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 639.380381][ T27] audit: type=1804 audit(1787194280.242:195): pid=10112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1146" name="/newroot/294/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=12 res=1 errno=0 [ 639.705563][T10119] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 640.211464][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 641.297199][ T5951] block nbd11: Possible stuck request ffff888022978000: control (read@0,1024B). Runtime 240 seconds [ 641.308388][ T7998] block nbd4: Possible stuck request ffff888022300000: control (read@0,4096B). Runtime 390 seconds [ 641.325055][ T5951] block nbd11: Possible stuck request ffff888022978200: control (read@1024,1024B). Runtime 240 seconds [ 641.336423][ T5951] block nbd11: Possible stuck request ffff888022978400: control (read@2048,1024B). Runtime 240 seconds [ 641.347998][ T5951] block nbd11: Possible stuck request ffff888022978600: control (read@3072,1024B). Runtime 240 seconds [ 642.108907][T10137] fuse: Unknown parameter 'group_i00000000000000000000' [ 642.311686][ T8708] block nbd9: Possible stuck request ffff888022928000: control (read@0,4096B). Runtime 300 seconds [ 642.321221][ T7998] block nbd2: Possible stuck request ffff888022238000: control (read@0,4096B). Runtime 420 seconds [ 642.336783][ T5951] block nbd0: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 540 seconds [ 643.622978][T10155] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 645.069895][T10170] cgroup: release_agent respecified [ 645.464463][T10182] fuse: Unknown parameter 'group_i00000000000000000000' [ 645.702444][ T9989] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 646.154189][ T9989] usb 5-1: not running at top speed; connect to a high speed hub [ 646.206602][T10191] loop1: detected capacity change from 0 to 128 [ 646.227920][ T9989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 646.339678][ T9989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 646.487753][T10191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 646.496749][T10191] System zones: 1-3, 19-19, 35-36 [ 646.531183][T10191] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 646.554127][T10191] ext4 filesystem being mounted at /305/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 647.036492][ T9989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 647.300007][ T8708] block nbd6: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 360 seconds [ 647.310925][ T8708] block nbd6: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 360 seconds [ 647.322022][ T8708] block nbd6: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 360 seconds [ 647.388295][ T9989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 647.399492][ T9989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 647.410508][ T9989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 647.472525][ T9989] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 647.502125][ T9989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.510313][ T9989] usb 5-1: Product: syz [ 647.559071][ T9989] usb 5-1: Manufacturer: syz [ 647.582270][ T9989] usb 5-1: SerialNumber: syz [ 647.610045][T10176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 647.622107][T10176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 647.671245][T10176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 647.709338][T10176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 647.741932][T10176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 647.784556][ T9989] usb 5-1: USB2VGA dongle found at address 2 [ 647.826259][ T9989] usb 5-1: Allocated 8 output buffers [ 647.855750][ T9989] usb 5-1: Not attached to USB 2.0 hub, deferring init [ 648.024638][ T9989] usb 5-1: USB disconnect, device number 2 [ 648.630686][T10199] loop0: detected capacity change from 0 to 128 [ 648.763773][T10199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 648.772653][T10199] System zones: 1-3, 19-19, 35-36 [ 648.790656][T10199] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 648.817783][T10199] ext4 filesystem being mounted at /297/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 649.315551][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 651.062731][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 651.178325][T10211] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 651.300433][ T8708] block nbd6: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 360 seconds [ 651.312533][ T5951] block nbd1: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 540 seconds [ 651.474392][T10218] fuse: Unknown parameter 'group_i00000000000000000000' [ 651.749844][T10225] loop0: detected capacity change from 0 to 128 [ 652.010716][T10225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 652.019534][T10225] System zones: 1-3, 19-19, 35-36 [ 652.035765][T10225] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 652.086653][T10225] ext4 filesystem being mounted at /298/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 653.827243][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 654.392343][ T788] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 654.773358][ T788] usb 1-1: not running at top speed; connect to a high speed hub [ 654.799728][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 654.822979][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 654.850264][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 654.863795][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 654.875452][T10251] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 654.882318][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 654.882356][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 654.888896][ T788] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 654.945053][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.968305][ T788] usb 1-1: Product: syz [ 654.987708][ T788] usb 1-1: Manufacturer: syz [ 655.006183][ T788] usb 1-1: SerialNumber: syz [ 655.038332][T10240] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.045962][T10240] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.072458][T10240] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.081123][T10240] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.109679][T10240] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.161307][T10257] loop4: detected capacity change from 0 to 1024 [ 655.175779][ T788] usb 1-1: USB2VGA dongle found at address 23 [ 655.203426][ T788] usb 1-1: Allocated 8 output buffers [ 655.226686][ T788] usb 1-1: Not attached to USB 2.0 hub, deferring init [ 655.325901][T10257] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 655.409932][T10257] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 655.458221][ T788] usb 1-1: USB disconnect, device number 23 [ 655.488565][T10257] EXT4-fs (loop4): orphan cleanup on readonly fs [ 655.551344][T10257] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #3: comm syz.4.1182: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 655.664427][T10257] EXT4-fs error (device loop4): ext4_quota_enable:7147: comm syz.4.1182: Bad quota inode: 3, type: 0 [ 655.702336][T10257] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 655.732448][T10257] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 655.740724][T10257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 656.472716][T10267] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 656.796873][T10269] loop1: detected capacity change from 0 to 128 [ 656.838987][T10269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 656.872577][T10269] System zones: 1-3, 19-19, 35-36 [ 656.884539][T10269] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 656.943893][T10269] ext4 filesystem being mounted at /310/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 657.074762][ T27] audit: type=1804 audit(1787194297.942:196): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1185" name="/newroot/310/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=13 res=1 errno=0 [ 657.829705][T10279] loop3: detected capacity change from 0 to 128 [ 658.026295][T10279] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 658.035012][T10279] System zones: 1-3, 19-19, 35-36 [ 658.050764][T10279] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 658.069128][T10279] ext4 filesystem being mounted at /307/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 658.528945][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 659.863533][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 660.035856][T10286] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 661.542343][ T8] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 661.770679][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 661.781908][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 661.825004][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 661.858553][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 661.901628][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 661.941523][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 661.981815][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 662.028104][ T8] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 662.048052][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.076683][ T8] usb 4-1: Product: syz [ 662.080956][ T8] usb 4-1: Manufacturer: syz [ 662.108450][ T8] usb 4-1: SerialNumber: syz [ 662.132712][T10296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 662.140112][T10296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 662.195719][T10296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 662.224325][T10296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 662.252609][T10296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 662.267094][ T8] usb 4-1: USB2VGA dongle found at address 24 [ 662.284069][ T9849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.300345][ T8] usb 4-1: Allocated 8 output buffers [ 662.312009][ T8] usb 4-1: Not attached to USB 2.0 hub, deferring init [ 662.372787][ T5951] block nbd5: Possible stuck request ffff8880223b8000: control (read@0,4096B). Runtime 390 seconds [ 662.456095][T10312] cgroup: release_agent respecified [ 662.498670][ T8] usb 4-1: USB disconnect, device number 24 [ 664.816081][T10321] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 665.092028][ T5951] block nbd7: Possible stuck request ffff888022808000: control (read@0,1024B). Runtime 330 seconds [ 665.103505][ T5951] block nbd7: Possible stuck request ffff888022808200: control (read@1024,1024B). Runtime 330 seconds [ 665.116801][ T5951] block nbd7: Possible stuck request ffff888022808400: control (read@2048,1024B). Runtime 330 seconds [ 665.129085][ T5951] block nbd7: Possible stuck request ffff888022808600: control (read@3072,1024B). Runtime 330 seconds [ 666.430842][T10326] loop4: detected capacity change from 0 to 128 [ 666.638092][T10326] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 666.646868][T10326] System zones: 1-3, 19-19, 35-36 [ 666.668904][T10326] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 666.686753][T10326] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 668.433412][ T8708] block nbd8: Possible stuck request ffff888022838000: control (read@0,4096B). Runtime 330 seconds [ 668.526410][T10335] loop0: detected capacity change from 0 to 512 [ 668.631958][T10335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.652102][T10335] EXT4-fs warning (device loop0): ext4_begin_enable_verity:135: inode #15: comm syz.0.1201: verity is only allowed on extent-based files [ 668.734735][ T5951] block nbd3: Possible stuck request ffff8880222c8000: control (read@0,4096B). Runtime 420 seconds [ 668.760045][ T9849] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 668.776292][ T8708] block nbd10: Possible stuck request ffff888022940000: control (read@0,4096B). Runtime 270 seconds [ 668.913961][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.007721][T10341] loop4: detected capacity change from 0 to 1024 [ 669.043476][T10341] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 669.100108][T10341] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 669.112894][T10341] EXT4-fs (loop4): orphan cleanup on readonly fs [ 669.119512][T10341] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #3: comm syz.4.1204: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 669.150951][T10341] EXT4-fs error (device loop4): ext4_quota_enable:7147: comm syz.4.1204: Bad quota inode: 3, type: 0 [ 669.171988][T10341] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 669.187544][T10341] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 669.195975][T10341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 669.660173][T10354] cgroup: release_agent respecified [ 671.990684][ T5951] block nbd4: Possible stuck request ffff888022300000: control (read@0,4096B). Runtime 420 seconds [ 672.003215][ T7998] block nbd11: Possible stuck request ffff888022978000: control (read@0,1024B). Runtime 270 seconds [ 672.014395][ T7998] block nbd11: Possible stuck request ffff888022978200: control (read@1024,1024B). Runtime 270 seconds [ 672.048357][ T7998] block nbd11: Possible stuck request ffff888022978400: control (read@2048,1024B). Runtime 270 seconds [ 672.059914][ T7998] block nbd11: Possible stuck request ffff888022978600: control (read@3072,1024B). Runtime 270 seconds [ 672.617956][ T5951] block nbd0: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 570 seconds [ 672.624352][ T8693] block nbd9: Possible stuck request ffff888022928000: control (read@0,4096B). Runtime 330 seconds [ 672.628931][ T7998] block nbd2: Possible stuck request ffff888022238000: control (read@0,4096B). Runtime 450 seconds [ 673.335568][T10363] loop3: detected capacity change from 0 to 128 [ 673.392763][T10363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 673.407989][T10363] System zones: 1-3, 19-19, 35-36 [ 673.443782][T10363] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 673.548043][T10363] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 673.674706][ T27] audit: type=1804 audit(1787194314.542:197): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1210" name="/newroot/314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=12 res=1 errno=0 [ 674.108860][T10373] loop0: detected capacity change from 0 to 128 [ 675.452455][ T29] INFO: task udevd:5786 blocked for more than 144 seconds. [ 675.460221][ T29] Not tainted syzkaller #0 [ 677.692342][T10373] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 677.700442][T10373] System zones: 1-3, 19-19, 35-36 [ 677.706130][T10373] EXT4-fs: error -4 creating inode table initialization thread [ 677.714396][T10373] EXT4-fs (loop0): mount failed [ 677.720990][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 677.767224][ T29] task:udevd state:D stack:25256 pid:5786 ppid:5145 flags:0x00004006 [ 677.812391][ T29] Call Trace: [ 677.820446][ T29] [ 677.835422][ T29] __schedule+0x15ae/0x4660 [ 677.861172][ T29] ? _raw_spin_unlock+0x40/0x40 [ 677.890114][ T29] ? asan.module_dtor+0x20/0x20 [ 677.914655][ T29] ? mark_lock+0x94/0x320 [ 677.929342][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 677.947910][ T29] ? lock_chain_count+0x20/0x20 [ 677.961043][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 677.990436][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 677.998617][ T29] schedule+0xbd/0x170 [ 678.016750][ T29] io_schedule+0x80/0xd0 [ 678.031882][ T29] folio_wait_bit_common+0x881/0xfa0 [ 678.046422][ T29] ? folio_wait_bit+0x30/0x30 [ 678.061263][ T29] ? _compound_head+0x120/0x120 [ 678.079854][ T29] ? filemap_add_folio+0x190/0x3d0 [ 678.093492][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 678.111219][ T29] ? blkdev_writepage+0x30/0x30 [ 678.129695][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 678.146812][ T29] ? blkdev_writepage+0x30/0x30 [ 678.157609][ T29] read_part_sector+0xd2/0x350 [ 678.174740][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 678.193868][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 678.210075][ T29] ? put_partition+0x360/0x360 [ 678.216271][ T8708] block nbd6: Possible stuck request ffff8880223d0000: control (read@0,1024B). Runtime 390 seconds [ 678.227194][ T8708] block nbd6: Possible stuck request ffff8880223d0200: control (read@1024,1024B). Runtime 390 seconds [ 678.238360][ T29] bdev_disk_changed+0x755/0x1450 [ 678.243511][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 678.248853][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 678.254266][ T29] ? iput+0x33f/0x900 [ 678.258325][ T29] blkdev_get_whole+0x30d/0x390 [ 678.263273][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 678.268270][ T29] blkdev_open+0x14e/0x360 [ 678.272842][ T29] do_dentry_open+0x880/0x14b0 [ 678.278558][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 678.283261][ T29] path_openat+0x284f/0x3270 [ 678.287941][ T29] ? do_filp_open+0x430/0x430 [ 678.292700][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 678.298002][ T29] ? asan.module_dtor+0x20/0x20 [ 678.302965][ T29] do_filp_open+0x1f2/0x430 [ 678.307522][ T29] ? vfs_tmpfile+0x620/0x620 [ 678.312432][ T8708] block nbd6: Possible stuck request ffff8880223d0400: control (read@2048,1024B). Runtime 390 seconds [ 678.324547][ T29] ? _raw_spin_unlock+0x3a/0x40 [ 678.329456][ T29] ? alloc_fd+0x590/0x640 [ 678.334098][ T29] do_sys_openat2+0x134/0x1d0 [ 678.339282][ T29] ? do_sys_open+0xe0/0xe0 [ 678.343906][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 678.350203][ T29] ? lock_chain_count+0x20/0x20 [ 678.370414][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 678.381315][ T29] __x64_sys_openat+0x139/0x160 [ 678.391308][ T29] do_syscall_64+0x55/0xb0 [ 678.397312][ T29] ? clear_bhb_loop+0x40/0x90 [ 678.402472][ T29] ? clear_bhb_loop+0x40/0x90 [ 678.407301][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.428097][ T29] RIP: 0033:0x7f39c94a7407 [ 678.437708][ T29] RSP: 002b:00007fff773a5d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 678.460021][ T29] RAX: ffffffffffffffda RBX: 00007f39c9b89880 RCX: 00007f39c94a7407 [ 678.492435][ T29] RDX: 00000000000a0800 RSI: 00005606abded480 RDI: ffffffffffffff9c [ 678.500513][ T29] RBP: 00005606abdec910 R08: 0000000000000000 R09: 0000000000000000 [ 678.514803][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005606abe01830 [ 678.523099][ T29] R13: 00005606abe04410 R14: 0000000000000000 R15: 00005606abe01830 [ 678.531150][ T29] [ 678.534827][ T29] INFO: task udevd:5793 blocked for more than 147 seconds. [ 678.562243][ T29] Not tainted syzkaller #0 [ 678.567348][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 678.588204][ T29] task:udevd state:D stack:23176 pid:5793 ppid:5145 flags:0x00004006 [ 678.599706][ T29] Call Trace: [ 678.608333][ T29] [ 678.611418][ T29] __schedule+0x15ae/0x4660 [ 678.618884][ T29] ? _raw_spin_unlock+0x40/0x40 [ 678.627603][ T29] ? asan.module_dtor+0x20/0x20 [ 678.635337][ T29] ? mark_lock+0x94/0x320 [ 678.639823][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 678.648793][ T29] ? lock_chain_count+0x20/0x20 [ 678.656491][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 678.661646][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 678.670149][ T29] schedule+0xbd/0x170 [ 678.678187][ T29] io_schedule+0x80/0xd0 [ 678.689250][ T29] folio_wait_bit_common+0x881/0xfa0 [ 678.700480][ T29] ? folio_wait_bit+0x30/0x30 [ 678.708313][ T29] ? _compound_head+0x120/0x120 [ 678.719287][ T29] ? filemap_add_folio+0x190/0x3d0 [ 678.726410][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 678.731837][ T29] ? blkdev_writepage+0x30/0x30 [ 678.741922][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 678.747482][ T29] ? blkdev_writepage+0x30/0x30 [ 678.758378][ T29] read_part_sector+0xd2/0x350 [ 678.763553][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 678.769068][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 678.775907][ T29] ? put_partition+0x360/0x360 [ 678.786178][ T29] ? alloc_pages+0x4e1/0x740 [ 678.797003][ T29] bdev_disk_changed+0x755/0x1450 [ 678.802492][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 678.807923][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 678.817383][ T29] ? iput+0x33f/0x900 [ 678.824846][ T29] blkdev_get_whole+0x30d/0x390 [ 678.831837][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 678.839715][ T29] blkdev_open+0x14e/0x360 [ 678.849019][ T29] do_dentry_open+0x880/0x14b0 [ 678.854727][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 678.860665][ T29] path_openat+0x284f/0x3270 [ 678.870027][ T29] ? do_filp_open+0x430/0x430 [ 678.876989][ T29] ? asan.module_dtor+0x20/0x20 [ 678.881987][ T29] ? mark_lock+0x94/0x320 [ 678.890974][ T29] do_filp_open+0x1f2/0x430 [ 678.896253][ T29] ? vfs_tmpfile+0x620/0x620 [ 678.901025][ T29] ? _raw_spin_unlock+0x3a/0x40 [ 678.906594][ T29] ? alloc_fd+0x590/0x640 [ 678.911094][ T29] do_sys_openat2+0x134/0x1d0 [ 678.916397][ T29] ? do_sys_open+0xe0/0xe0 [ 678.921095][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 678.933807][ T29] ? lock_chain_count+0x20/0x20 [ 678.938838][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 678.948418][ T29] __x64_sys_openat+0x139/0x160 [ 678.956554][ T29] do_syscall_64+0x55/0xb0 [ 678.961215][ T29] ? clear_bhb_loop+0x40/0x90 [ 678.968376][ T29] ? clear_bhb_loop+0x40/0x90 [ 678.977411][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.985222][ T29] RIP: 0033:0x7f39c94a7407 [ 678.989843][ T29] RSP: 002b:00007fff773a5d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 679.005665][ T29] RAX: ffffffffffffffda RBX: 00007f39c9b89880 RCX: 00007f39c94a7407 [ 679.018902][ T29] RDX: 00000000000a0800 RSI: 00005606abe14900 RDI: ffffffffffffff9c [ 679.031120][ T29] RBP: 00005606abdec910 R08: 0000000000000000 R09: 0000000000000000 [ 679.045479][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005606abdffe20 [ 679.058646][ T29] R13: 00005606abe04410 R14: 0000000000000000 R15: 00005606abdffe20 [ 679.069451][ T29] [ 679.076450][ T29] INFO: task udevd:5794 blocked for more than 147 seconds. [ 679.092159][ T29] Not tainted syzkaller #0 [ 679.100086][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.114158][ T29] task:udevd state:D stack:25752 pid:5794 ppid:5145 flags:0x00004006 [ 679.127230][ T29] Call Trace: [ 679.130669][ T29] [ 679.136055][ T29] __schedule+0x15ae/0x4660 [ 679.141227][ T29] ? asan.module_dtor+0x20/0x20 [ 679.156330][ T29] ? mark_lock+0x94/0x320 [ 679.162091][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 679.171901][ T29] ? lock_chain_count+0x20/0x20 [ 679.179602][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 679.188432][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 679.196819][ T29] schedule+0xbd/0x170 [ 679.207149][ T29] io_schedule+0x80/0xd0 [ 679.211600][ T29] folio_wait_bit_common+0x881/0xfa0 [ 679.219905][ T29] ? folio_wait_bit+0x30/0x30 [ 679.228325][ T29] ? _compound_head+0x120/0x120 [ 679.236033][ T29] ? filemap_add_folio+0x190/0x3d0 [ 679.241300][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 679.250222][ T29] ? blkdev_writepage+0x30/0x30 [ 679.261086][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 679.274585][ T29] ? blkdev_writepage+0x30/0x30 [ 679.282413][ T29] read_part_sector+0xd2/0x350 [ 679.287347][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 679.298960][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 679.305435][ T29] ? put_partition+0x360/0x360 [ 679.312415][ T29] ? alloc_pages+0x4e1/0x740 [ 679.317183][ T29] bdev_disk_changed+0x755/0x1450 [ 679.328447][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 679.334633][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 679.340085][ T29] ? iput+0x33f/0x900 [ 679.347052][ T29] blkdev_get_whole+0x30d/0x390 [ 679.356530][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 679.363537][ T29] blkdev_open+0x14e/0x360 [ 679.368115][ T29] do_dentry_open+0x880/0x14b0 [ 679.382618][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 679.387394][ T29] path_openat+0x284f/0x3270 [ 679.398639][ T29] ? do_sys_openat2+0xda/0x1d0 [ 679.405998][ T29] ? __x64_sys_openat+0x139/0x160 [ 679.411226][ T29] ? verify_lock_unused+0x140/0x140 [ 679.421921][ T29] ? do_filp_open+0x430/0x430 [ 679.428216][ T29] do_filp_open+0x1f2/0x430 [ 679.437877][ T29] ? vfs_tmpfile+0x620/0x620 [ 679.443984][ T29] ? _raw_spin_unlock+0x28/0x40 [ 679.449339][ T29] ? alloc_fd+0x590/0x640 [ 679.458765][ T29] do_sys_openat2+0x134/0x1d0 [ 679.465050][ T29] ? do_sys_open+0xe0/0xe0 [ 679.469637][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 679.480875][ T29] ? lock_chain_count+0x20/0x20 [ 679.486339][ T29] __x64_sys_openat+0x139/0x160 [ 679.497786][ T29] do_syscall_64+0x55/0xb0 [ 679.511414][ T29] ? clear_bhb_loop+0x40/0x90 [ 679.516727][ T29] ? clear_bhb_loop+0x40/0x90 [ 679.521554][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.527922][ T29] RIP: 0033:0x7f39c94a7407 [ 679.532518][ T29] RSP: 002b:00007fff773a5d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 679.541246][ T29] RAX: ffffffffffffffda RBX: 00007f39c9b89880 RCX: 00007f39c94a7407 [ 679.549433][ T29] RDX: 00000000000a0800 RSI: 00005606abe040f0 RDI: ffffffffffffff9c [ 679.557789][ T29] RBP: 00005606abdec910 R08: 0000000000000000 R09: 0000000000000000 [ 679.566282][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005606abe37f30 [ 679.574638][ T29] R13: 00005606abe04410 R14: 0000000000000000 R15: 00005606abe37f30 [ 679.583087][ T29] [ 679.586308][ T29] INFO: task udevd:5799 blocked for more than 148 seconds. [ 679.594140][ T29] Not tainted syzkaller #0 [ 679.599403][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.611259][ T29] task:udevd state:D stack:25032 pid:5799 ppid:5145 flags:0x00004006 [ 679.624003][ T29] Call Trace: [ 679.627427][ T29] [ 679.630475][ T29] __schedule+0x15ae/0x4660 [ 679.636091][ T29] ? asan.module_dtor+0x20/0x20 [ 679.641110][ T29] ? mark_lock+0x94/0x320 [ 679.645979][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 679.651140][ T29] ? lock_chain_count+0x20/0x20 [ 679.656628][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 679.665154][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 679.673347][ T29] schedule+0xbd/0x170 [ 679.677584][ T29] io_schedule+0x80/0xd0 [ 679.681973][ T29] folio_wait_bit_common+0x881/0xfa0 [ 679.692709][ T29] ? folio_wait_bit+0x30/0x30 [ 679.699122][ T29] ? _compound_head+0x120/0x120 [ 679.709117][ T29] ? filemap_add_folio+0x190/0x3d0 [ 679.721433][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 679.732986][ T29] ? blkdev_writepage+0x30/0x30 [ 679.738016][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 679.749718][ T29] ? blkdev_writepage+0x30/0x30 [ 679.756263][ T29] read_part_sector+0xd2/0x350 [ 679.761184][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 679.771672][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 679.778734][ T29] ? put_partition+0x360/0x360 [ 679.788483][ T29] ? alloc_pages+0x4e1/0x740 [ 679.794680][ T29] bdev_disk_changed+0x755/0x1450 [ 679.799878][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 679.810285][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 679.816854][ T29] ? iput+0x33f/0x900 [ 679.823851][ T29] blkdev_get_whole+0x30d/0x390 [ 679.828860][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 679.839868][ T29] blkdev_open+0x14e/0x360 [ 679.847252][ T29] do_dentry_open+0x880/0x14b0 [ 679.852231][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 679.857081][ T29] path_openat+0x284f/0x3270 [ 679.861832][ T29] ? do_filp_open+0x430/0x430 [ 679.868423][ T29] ? asan.module_dtor+0x20/0x20 [ 679.875683][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 679.883888][ T29] do_filp_open+0x1f2/0x430 [ 679.888541][ T29] ? vfs_tmpfile+0x620/0x620 [ 679.896996][ T29] ? _raw_spin_unlock+0x3a/0x40 [ 679.901996][ T29] ? alloc_fd+0x590/0x640 [ 679.909063][ T29] do_sys_openat2+0x134/0x1d0 [ 679.916671][ T29] ? do_sys_open+0xe0/0xe0 [ 679.921235][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 679.927591][ T29] ? lock_chain_count+0x20/0x20 [ 679.932719][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 679.938844][ T29] __x64_sys_openat+0x139/0x160 [ 679.946158][ T29] do_syscall_64+0x55/0xb0 [ 679.950744][ T29] ? clear_bhb_loop+0x40/0x90 [ 679.955655][ T29] ? clear_bhb_loop+0x40/0x90 [ 679.960640][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.966713][ T29] RIP: 0033:0x7f39c94a7407 [ 679.971362][ T29] RSP: 002b:00007fff773a5d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 679.980070][ T29] RAX: ffffffffffffffda RBX: 00007f39c9b89880 RCX: 00007f39c94a7407 [ 679.988477][ T29] RDX: 00000000000a0800 RSI: 00005606abdfd900 RDI: ffffffffffffff9c [ 679.996892][ T29] RBP: 00005606abdec910 R08: 0000000000000000 R09: 0000000000000000 [ 680.005236][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005606abe00ba0 [ 680.013684][ T29] R13: 00005606abe04410 R14: 0000000000000000 R15: 00005606abe00ba0 [ 680.023231][ T29] [ 680.026451][ T29] INFO: task udevd:6027 blocked for more than 148 seconds. [ 680.034197][ T29] Not tainted syzkaller #0 [ 680.039263][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 680.048496][ T29] task:udevd state:D stack:25032 pid:6027 ppid:5145 flags:0x00004006 [ 680.058308][ T29] Call Trace: [ 680.061709][ T29] [ 680.065157][ T29] __schedule+0x15ae/0x4660 [ 680.069840][ T29] ? _raw_spin_unlock+0x40/0x40 [ 680.085656][ T29] ? asan.module_dtor+0x20/0x20 [ 680.099606][ T29] ? mark_lock+0x94/0x320 [ 680.108565][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 680.114400][ T29] ? lock_chain_count+0x20/0x20 [ 680.121182][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 680.126882][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 680.132941][ T29] schedule+0xbd/0x170 [ 680.137169][ T29] io_schedule+0x80/0xd0 [ 680.141536][ T29] folio_wait_bit_common+0x881/0xfa0 [ 680.147548][ T29] ? folio_wait_bit+0x30/0x30 [ 680.152594][ T29] ? _compound_head+0x120/0x120 [ 680.157576][ T29] ? filemap_add_folio+0x190/0x3d0 [ 680.163291][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 680.168717][ T29] ? blkdev_writepage+0x30/0x30 [ 680.179415][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 680.185088][ T29] ? blkdev_writepage+0x30/0x30 [ 680.190091][ T29] read_part_sector+0xd2/0x350 [ 680.202049][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 680.208018][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 680.213865][ T29] ? put_partition+0x360/0x360 [ 680.218794][ T29] ? alloc_pages+0x4e1/0x740 [ 680.224895][ T29] bdev_disk_changed+0x755/0x1450 [ 680.230276][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 680.236142][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 680.241580][ T29] ? iput+0x33f/0x900 [ 680.246162][ T29] blkdev_get_whole+0x30d/0x390 [ 680.251163][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 680.256656][ T29] blkdev_open+0x14e/0x360 [ 680.261218][ T29] do_dentry_open+0x880/0x14b0 [ 680.266622][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 680.271360][ T29] path_openat+0x284f/0x3270 [ 680.276497][ T29] ? do_sys_openat2+0xda/0x1d0 [ 680.281394][ T29] ? __x64_sys_openat+0x139/0x160 [ 680.289746][ T29] ? verify_lock_unused+0x140/0x140 [ 680.296005][ T29] ? do_filp_open+0x430/0x430 [ 680.300840][ T29] do_filp_open+0x1f2/0x430 [ 680.306842][ T29] ? vfs_tmpfile+0x620/0x620 [ 680.311603][ T29] ? _raw_spin_unlock+0x28/0x40 [ 680.318229][ T29] ? alloc_fd+0x590/0x640 [ 680.322990][ T29] do_sys_openat2+0x134/0x1d0 [ 680.335490][ T29] ? do_sys_open+0xe0/0xe0 [ 680.340107][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 680.346778][ T29] ? lock_chain_count+0x20/0x20 [ 680.351773][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 680.358432][ T29] __x64_sys_openat+0x139/0x160 [ 680.363730][ T29] do_syscall_64+0x55/0xb0 [ 680.368336][ T29] ? clear_bhb_loop+0x40/0x90 [ 680.376563][ T29] ? clear_bhb_loop+0x40/0x90 [ 680.381401][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.387893][ T29] RIP: 0033:0x7f39c94a7407 [ 680.392769][ T29] RSP: 002b:00007fff773a5d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 680.401346][ T29] RAX: ffffffffffffffda RBX: 00007f39c9b89880 RCX: 00007f39c94a7407 [ 680.414528][ T29] RDX: 00000000000a0800 RSI: 00005606abded360 RDI: ffffffffffffff9c [ 680.423172][ T29] RBP: 00005606abdec910 R08: 0000000000000000 R09: 0000000000000000 [ 680.436592][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005606ac038d80 [ 680.448638][ T29] R13: 00005606abe04410 R14: 0000000000000000 R15: 00005606ac038d80 [ 680.457963][ T29] [ 680.463627][ T29] INFO: task udevd:6041 blocked for more than 149 seconds. [ 680.470986][ T29] Not tainted syzkaller #0 [ 680.476585][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 680.485873][ T29] task:udevd state:D stack:25352 pid:6041 ppid:5145 flags:0x00004006 [ 680.495573][ T29] Call Trace: [ 680.499005][ T29] [ 680.502572][ T29] __schedule+0x15ae/0x4660 [ 680.507247][ T29] ? _raw_spin_unlock+0x40/0x40 [ 680.515660][ T29] ? asan.module_dtor+0x20/0x20 [ 680.520672][ T29] ? mark_lock+0x94/0x320 [ 680.526110][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 680.541534][ T29] ? lock_chain_count+0x20/0x20 [ 680.546716][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 680.551823][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 680.558377][ T29] schedule+0xbd/0x170 [ 680.562890][ T29] io_schedule+0x80/0xd0 [ 680.567203][ T29] folio_wait_bit_common+0x881/0xfa0 [ 680.572593][ T29] ? folio_wait_bit+0x30/0x30 [ 680.577318][ T29] ? _compound_head+0x120/0x120 [ 680.582272][ T29] ? filemap_add_folio+0x190/0x3d0 [ 680.587448][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 680.592851][ T29] ? blkdev_writepage+0x30/0x30 [ 680.597759][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 680.603177][ T29] ? blkdev_writepage+0x30/0x30 [ 680.608083][ T29] read_part_sector+0xd2/0x350 [ 680.612947][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 680.618387][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 680.626193][ T29] ? put_partition+0x360/0x360 [ 680.633562][ T29] bdev_disk_changed+0x755/0x1450 [ 680.638690][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 680.644112][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 680.649633][ T29] ? iput+0x33f/0x900 [ 680.654805][ T29] blkdev_get_whole+0x30d/0x390 [ 680.659719][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 680.666187][ T29] blkdev_open+0x14e/0x360 [ 680.670662][ T29] do_dentry_open+0x880/0x14b0 [ 680.675880][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 680.680585][ T29] path_openat+0x284f/0x3270 [ 680.685307][ T29] ? __x64_sys_openat+0x139/0x160 [ 680.690396][ T29] ? verify_lock_unused+0x140/0x140 [ 680.695707][ T29] ? do_filp_open+0x430/0x430 [ 680.700448][ T29] ? asan.module_dtor+0x20/0x20 [ 680.705454][ T29] do_filp_open+0x1f2/0x430 [ 680.710037][ T29] ? vfs_tmpfile+0x620/0x620 [ 680.714862][ T29] ? _raw_spin_unlock+0x28/0x40 [ 680.719773][ T29] ? alloc_fd+0x590/0x640 [ 680.724209][ T29] do_sys_openat2+0x134/0x1d0 [ 680.729457][ T29] ? do_sys_open+0xe0/0xe0 [ 680.737896][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 680.744246][ T29] ? lock_chain_count+0x20/0x20 [ 680.749162][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 680.755316][ T29] __x64_sys_openat+0x139/0x160 [ 680.760277][ T29] do_syscall_64+0x55/0xb0 [ 680.764945][ T29] ? clear_bhb_loop+0x40/0x90 [ 680.769714][ T29] ? clear_bhb_loop+0x40/0x90 [ 680.774585][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.780543][ T29] RIP: 0033:0x7f39c94a7407 [ 680.785165][ T29] RSP: 002b:00007fff773a5d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 680.793863][ T29] RAX: ffffffffffffffda RBX: 00007f39c9b89880 RCX: 00007f39c94a7407 [ 680.801887][ T29] RDX: 00000000000a0800 RSI: 00005606abdfbe40 RDI: ffffffffffffff9c [ 680.810035][ T29] RBP: 00005606abdec910 R08: 0000000000000000 R09: 0000000000000000 [ 680.818175][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005606abe10990 [ 680.826355][ T29] R13: 00005606abe04410 R14: 0000000000000000 R15: 00005606abe10990 [ 680.834454][ T29] [ 680.839101][ T29] INFO: task udevd:6275 blocked for more than 149 seconds. [ 680.847700][ T29] Not tainted syzkaller #0 [ 680.853109][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 680.861928][ T29] task:udevd state:D stack:25896 pid:6275 ppid:5145 flags:0x00004006 [ 680.869619][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 680.872994][ T29] Call Trace: [ 680.883883][ T29] [ 680.886993][ T29] __schedule+0x15ae/0x4660 [ 680.891650][ T29] ? _raw_spin_unlock+0x40/0x40 [ 680.897227][ T29] ? asan.module_dtor+0x20/0x20 [ 680.903313][ T29] ? mark_lock+0x94/0x320 [ 680.907932][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 680.913493][ T29] ? lock_chain_count+0x20/0x20 [ 680.918531][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 680.925163][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 680.930934][ T29] schedule+0xbd/0x170 [ 680.936296][ T29] io_schedule+0x80/0xd0 [ 680.943713][ T29] folio_wait_bit_common+0x881/0xfa0 [ 680.949238][ T29] ? folio_wait_bit+0x30/0x30 [ 680.961132][ T29] ? _compound_head+0x120/0x120 [ 680.966504][ T29] ? filemap_add_folio+0x190/0x3d0 [ 680.971861][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 680.983625][ T29] ? blkdev_writepage+0x30/0x30 [ 680.988732][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 681.000623][ T29] ? blkdev_writepage+0x30/0x30 [ 681.006619][ T29] read_part_sector+0xd2/0x350 [ 681.011519][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 681.017304][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 681.022763][ T29] ? put_partition+0x360/0x360 [ 681.027757][ T29] ? alloc_pages+0x4e1/0x740 [ 681.032879][ T29] bdev_disk_changed+0x755/0x1450 [ 681.038002][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 681.045501][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 681.050883][ T29] ? iput+0x33f/0x900 [ 681.055610][ T29] blkdev_get_whole+0x30d/0x390 [ 681.060521][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 681.067636][ T29] blkdev_open+0x14e/0x360 [ 681.072467][ T29] do_dentry_open+0x880/0x14b0 [ 681.077742][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 681.082500][ T29] path_openat+0x284f/0x3270 [ 681.087195][ T29] ? do_sys_openat2+0xda/0x1d0 [ 681.092012][ T29] ? __x64_sys_openat+0x139/0x160 [ 681.097399][ T29] ? verify_lock_unused+0x140/0x140 [ 681.102749][ T29] ? do_filp_open+0x430/0x430 [ 681.107503][ T29] do_filp_open+0x1f2/0x430 [ 681.112080][ T29] ? vfs_tmpfile+0x620/0x620 [ 681.116923][ T29] ? _raw_spin_unlock+0x28/0x40 [ 681.121834][ T29] ? alloc_fd+0x590/0x640 [ 681.126367][ T29] do_sys_openat2+0x134/0x1d0 [ 681.131107][ T29] ? do_sys_open+0xe0/0xe0 [ 681.135665][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 681.141712][ T29] ? lock_chain_count+0x20/0x20 [ 681.147889][ T29] __x64_sys_openat+0x139/0x160 [ 681.152955][ T29] do_syscall_64+0x55/0xb0 [ 681.157439][ T29] ? clear_bhb_loop+0x40/0x90 [ 681.162285][ T29] ? clear_bhb_loop+0x40/0x90 [ 681.167030][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.173561][ T29] RIP: 0033:0x7f39c94a7407 [ 681.178046][ T29] RSP: 002b:00007fff773a5d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 681.187705][ T29] RAX: ffffffffffffffda RBX: 00007f39c9b89880 RCX: 00007f39c94a7407 [ 681.195872][ T29] RDX: 00000000000a0800 RSI: 00005606abdffb30 RDI: ffffffffffffff9c [ 681.204020][ T29] RBP: 00005606abdec910 R08: 0000000000000000 R09: 0000000000000000 [ 681.212055][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005606abe2a870 [ 681.220189][ T29] R13: 00005606abe04410 R14: 0000000000000000 R15: 00005606abe2a870 [ 681.228299][ T29] [ 681.231501][ T29] INFO: task udevd:6655 blocked for more than 149 seconds. [ 681.238983][ T9849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.259399][ T29] Not tainted syzkaller #0 [ 681.266030][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 681.279229][ T29] task:udevd state:D stack:25032 pid:6655 ppid:5145 flags:0x00004006 [ 681.290199][ T29] Call Trace: [ 681.294194][ T29] [ 681.303488][ T29] __schedule+0x15ae/0x4660 [ 681.310056][ T29] ? _raw_spin_unlock+0x40/0x40 [ 681.316473][ T29] ? asan.module_dtor+0x20/0x20 [ 681.321423][ T29] ? mark_lock+0x94/0x320 [ 681.325936][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 681.331028][ T29] ? lock_chain_count+0x20/0x20 [ 681.336062][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 681.341145][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 681.344040][ T8708] block nbd6: Possible stuck request ffff8880223d0600: control (read@3072,1024B). Runtime 390 seconds [ 681.346962][ T29] schedule+0xbd/0x170 [ 681.364427][ T29] io_schedule+0x80/0xd0 [ 681.368750][ T29] folio_wait_bit_common+0x881/0xfa0 [ 681.375451][ T29] ? folio_wait_bit+0x30/0x30 [ 681.380263][ T29] ? _compound_head+0x120/0x120 [ 681.385420][ T29] ? filemap_add_folio+0x190/0x3d0 [ 681.390591][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 681.396046][ T29] ? blkdev_writepage+0x30/0x30 [ 681.400942][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 681.406250][ T29] ? blkdev_writepage+0x30/0x30 [ 681.411161][ T29] read_part_sector+0xd2/0x350 [ 681.417194][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 681.423747][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 681.429143][ T29] ? put_partition+0x360/0x360 [ 681.434291][ T29] ? alloc_pages+0x4e1/0x740 [ 681.438942][ T29] bdev_disk_changed+0x755/0x1450 [ 681.444433][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 681.449772][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 681.457329][ T29] ? iput+0x33f/0x900 [ 681.461440][ T29] blkdev_get_whole+0x30d/0x390 [ 681.466554][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 681.471560][ T29] blkdev_open+0x14e/0x360 [ 681.476254][ T29] do_dentry_open+0x880/0x14b0 [ 681.481104][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 681.487788][ T29] path_openat+0x284f/0x3270 [ 681.492977][ T29] ? do_sys_openat2+0xda/0x1d0 [ 681.498068][ T29] ? __x64_sys_openat+0x139/0x160 [ 681.503601][ T29] ? verify_lock_unused+0x140/0x140 [ 681.509215][ T29] ? do_filp_open+0x430/0x430 [ 681.514105][ T29] do_filp_open+0x1f2/0x430 [ 681.518703][ T29] ? vfs_tmpfile+0x620/0x620 [ 681.526055][ T29] ? _raw_spin_unlock+0x28/0x40 [ 681.531132][ T29] ? alloc_fd+0x590/0x640 [ 681.535931][ T29] do_sys_openat2+0x134/0x1d0 [ 681.540780][ T29] ? do_sys_open+0xe0/0xe0 [ 681.545421][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 681.551454][ T29] ? lock_chain_count+0x20/0x20 [ 681.557238][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 681.563347][ T29] __x64_sys_openat+0x139/0x160 [ 681.568268][ T29] do_syscall_64+0x55/0xb0 [ 681.580843][ T7998] block nbd1: Possible stuck request ffff8880221d0000: control (read@0,4096B). Runtime 570 seconds [ 681.581055][ T29] ? clear_bhb_loop+0x40/0x90 [ 681.596563][ T29] ? clear_bhb_loop+0x40/0x90 [ 681.601505][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.607544][ T29] RIP: 0033:0x7f39c94a7407 [ 681.612017][ T29] RSP: 002b:00007fff773a5d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 681.620694][ T29] RAX: ffffffffffffffda RBX: 00007f39c9b89880 RCX: 00007f39c94a7407 [ 681.628756][ T29] RDX: 00000000000a0800 RSI: 00005606abdfdaa0 RDI: ffffffffffffff9c [ 681.636952][ T29] RBP: 00005606abdec910 R08: 0000000000000000 R09: 0000000000000000 [ 681.645125][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005606abdf3ee0 [ 681.653226][ T29] R13: 00005606abe04410 R14: 0000000000000000 R15: 00005606abdf3ee0 [ 681.662072][ T29] [ 681.665334][ T29] INFO: task udevd:7702 blocked for more than 150 seconds. [ 681.678891][ T29] Not tainted syzkaller #0 [ 681.688404][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 681.697463][ T29] task:udevd state:D stack:24040 pid:7702 ppid:5145 flags:0x00004006 [ 681.708477][ T29] Call Trace: [ 681.711842][ T29] [ 681.714944][ T29] __schedule+0x15ae/0x4660 [ 681.719593][ T29] ? asan.module_dtor+0x20/0x20 [ 681.724864][ T29] ? mark_lock+0x94/0x320 [ 681.729268][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 681.734481][ T29] ? lock_chain_count+0x20/0x20 [ 681.739393][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 681.745786][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 681.751418][ T29] schedule+0xbd/0x170 [ 681.755647][ T29] io_schedule+0x80/0xd0 [ 681.761996][ T29] folio_wait_bit_common+0x881/0xfa0 [ 681.768233][ T29] ? folio_wait_bit+0x30/0x30 [ 681.773328][ T29] ? _compound_head+0x120/0x120 [ 681.778380][ T29] ? filemap_add_folio+0x190/0x3d0 [ 681.783709][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 681.789046][ T29] ? blkdev_writepage+0x30/0x30 [ 681.794200][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 681.799387][ T29] ? blkdev_writepage+0x30/0x30 [ 681.804365][ T29] read_part_sector+0xd2/0x350 [ 681.809191][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 681.814853][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 681.820217][ T29] ? put_partition+0x360/0x360 [ 681.826309][ T29] ? alloc_pages+0x4e1/0x740 [ 681.830961][ T29] bdev_disk_changed+0x755/0x1450 [ 681.836352][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 681.841712][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 681.847173][ T29] ? iput+0x33f/0x900 [ 681.851228][ T29] blkdev_get_whole+0x30d/0x390 [ 681.856272][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 681.864236][ T29] blkdev_open+0x14e/0x360 [ 681.868804][ T29] do_dentry_open+0x880/0x14b0 [ 681.874569][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 681.879278][ T29] path_openat+0x284f/0x3270 [ 681.884417][ T29] ? do_sys_openat2+0xda/0x1d0 [ 681.889244][ T29] ? __x64_sys_openat+0x139/0x160 [ 681.894768][ T29] ? verify_lock_unused+0x140/0x140 [ 681.900023][ T29] ? do_filp_open+0x430/0x430 [ 681.905244][ T29] do_filp_open+0x1f2/0x430 [ 681.909812][ T29] ? vfs_tmpfile+0x620/0x620 [ 681.914888][ T29] ? _raw_spin_unlock+0x28/0x40 [ 681.919806][ T29] ? alloc_fd+0x590/0x640 [ 681.924859][ T29] do_sys_openat2+0x134/0x1d0 [ 681.929617][ T29] ? do_sys_open+0xe0/0xe0 [ 681.935555][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 681.941610][ T29] ? lock_chain_count+0x20/0x20 [ 681.946839][ T29] __x64_sys_openat+0x139/0x160 [ 681.951890][ T29] do_syscall_64+0x55/0xb0 [ 681.956560][ T29] ? clear_bhb_loop+0x40/0x90 [ 681.961296][ T29] ? clear_bhb_loop+0x40/0x90 [ 681.968387][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.974484][ T29] RIP: 0033:0x7f39c94a7407 [ 681.978958][ T29] RSP: 002b:00007fff773a5d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 681.987563][ T29] RAX: ffffffffffffffda RBX: 00007f39c9b89880 RCX: 00007f39c94a7407 [ 681.995906][ T29] RDX: 00000000000a0800 RSI: 00005606abdfd9c0 RDI: ffffffffffffff9c [ 682.004090][ T29] RBP: 00005606abdec910 R08: 0000000000000000 R09: 0000000000000000 [ 682.012105][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005606abe29600 [ 682.020311][ T29] R13: 00005606abe04410 R14: 0000000000000000 R15: 00005606abe29600 [ 682.028430][ T29] [ 682.031594][ T29] [ 682.031594][ T29] Showing all locks held in the system: [ 682.039738][ T29] 1 lock held by khungtaskd/29: [ 682.044765][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 682.056651][ T29] 2 locks held by kworker/u4:8/2908: [ 682.062057][ T29] #0: ffff8880b8f3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 682.073900][ T29] #1: ffff8880b8f28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 682.083803][ T29] 2 locks held by kworker/u4:9/2916: [ 682.089198][ T29] #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 682.099332][ T29] #1: ffff8880b8e28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 682.108259][ T29] 2 locks held by getty/5537: [ 682.113077][ T29] #0: ffff88802d14d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 682.123072][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 682.133440][ T29] 1 lock held by udevd/5786: [ 682.138081][ T29] #0: ffff88802208b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 682.148283][ T29] 1 lock held by udevd/5793: [ 682.153959][ T29] #0: ffff8880221554c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 682.164303][ T29] 1 lock held by udevd/5794: [ 682.172290][ T29] #0: ffff888140f134c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 682.182562][ T29] 1 lock held by udevd/5799: [ 682.187207][ T29] #0: ffff8880221504c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 682.197405][ T29] 1 lock held by udevd/5898: [ 682.202048][ T29] #0: ffff888140fd84c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 682.212555][ T29] 1 lock held by udevd/6027: [ 682.217191][ T29] #0: ffff8880222bc4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 682.227396][ T29] 1 lock held by udevd/6041: [ 682.232025][ T29] #0: ffff8880222974c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 682.242209][ T29] 1 lock held by udevd/6275: [ 682.246846][ T29] #0: ffff8880222924c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 682.257030][ T29] 1 lock held by udevd/6655: [ 682.261670][ T29] #0: ffff8880223364c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 682.273171][ T29] 1 lock held by udevd/7376: [ 682.277823][ T29] #0: ffff8880228ab4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 682.289635][ T29] 1 lock held by udevd/7702: [ 682.295421][ T29] #0: ffff8880223314c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 682.305908][ T29] 1 lock held by udevd/7765: [ 682.310637][ T29] #0: ffff8880223534c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 682.320976][ T29] [ 682.323596][ T29] ============================================= [ 682.323596][ T29] [ 682.332223][ T29] NMI backtrace for cpu 0 [ 682.336611][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 682.343849][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.353950][ T29] Call Trace: [ 682.357269][ T29] [ 682.360249][ T29] dump_stack_lvl+0x18c/0x250 [ 682.364985][ T29] ? __wake_up_klogd+0xd9/0x100 [ 682.369885][ T29] ? show_regs_print_info+0x20/0x20 [ 682.375129][ T29] ? load_image+0x420/0x420 [ 682.379695][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 682.384687][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 682.390894][ T29] ? load_image+0x420/0x420 [ 682.395440][ T29] ? wq_watchdog_touch+0xef/0x170 [ 682.400506][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 682.406635][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 682.412674][ T29] watchdog+0xf59/0xfa0 [ 682.416906][ T29] ? watchdog+0x1e1/0xfa0 [ 682.421278][ T29] kthread+0x2fa/0x390 [ 682.425378][ T29] ? hungtask_pm_notify+0x50/0x50 [ 682.430458][ T29] ? kthread_blkcg+0xd0/0xd0 [ 682.435078][ T29] ret_from_fork+0x48/0x80 [ 682.439630][ T29] ? kthread_blkcg+0xd0/0xd0 [ 682.444269][ T29] ret_from_fork_asm+0x11/0x20 [ 682.449129][ T29] [ 682.453113][ T29] Sending NMI from CPU 0 to CPUs 1: [ 682.458388][ C1] NMI backtrace for cpu 1 [ 682.458399][ C1] CPU: 1 PID: 3486 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 682.458417][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.458427][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 682.458497][ C1] RIP: 0010:__kasan_check_read+0xa/0x20 [ 682.458525][ C1] Code: 48 c7 c7 66 93 a4 8c 4c 89 e6 eb 0a 48 c7 c7 07 1b 86 8c 48 89 de e8 65 e6 a3 08 31 ed eb d4 cc f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 ff ea ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 [ 682.458594][ C1] RSP: 0018:ffffc9000cb775f8 EFLAGS: 00000006 [ 682.458607][ C1] RAX: 00000000000000e8 RBX: 0000000000000755 RCX: ffffffff81689b07 [ 682.458619][ C1] RDX: 00000000b72deb23 RSI: 0000000000000008 RDI: ffffffff911ee5e8 [ 682.458630][ C1] RBP: ffffc9000cb77848 R08: dffffc0000000000 R09: 1ffffffff223dca0 [ 682.458643][ C1] R10: dffffc0000000000 R11: fffffbfff223dca1 R12: 00000000fa26d9e8 [ 682.458654][ C1] R13: ffff88802e0ada00 R14: 00000000523003f0 R15: ffff88802e0ae5a8 [ 682.458667][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 682.458681][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 682.458692][ C1] CR2: 00005606ac4bd5d8 CR3: 000000007b707000 CR4: 00000000003506e0 [ 682.458712][ C1] Call Trace: [ 682.458718][ C1] [ 682.458723][ C1] __lock_acquire+0x1077/0x7d80 [ 682.458754][ C1] ? ret_from_fork_asm+0x11/0x20 [ 682.458779][ C1] ? verify_lock_unused+0x140/0x140 [ 682.458797][ C1] ? stack_trace_save+0xaa/0x100 [ 682.458818][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 682.458839][ C1] ? __stack_depot_save+0x1f/0x660 [ 682.458861][ C1] ? ret_from_fork+0x48/0x80 [ 682.458880][ C1] ? ret_from_fork_asm+0x11/0x20 [ 682.458904][ C1] ? kasan_set_track+0x5f/0x70 [ 682.458921][ C1] ? kasan_set_track+0x4e/0x70 [ 682.458938][ C1] ? kasan_save_free_info+0x28/0x40 [ 682.458960][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 682.458978][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 682.458996][ C1] ? nsim_dev_trap_report_work+0x723/0xa90 [ 682.459012][ C1] ? process_scheduled_works+0xa60/0x1600 [ 682.459033][ C1] ? worker_thread+0xa5e/0xfe0 [ 682.459054][ C1] lock_acquire+0x19e/0x420 [ 682.459072][ C1] ? ___slab_alloc+0x422/0x12f0 [ 682.459091][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 682.459111][ C1] ? read_lock_is_recursive+0x20/0x20 [ 682.459130][ C1] ? lock_chain_count+0x20/0x20 [ 682.459147][ C1] ? mark_lock+0x94/0x320 [ 682.459168][ C1] ? ___slab_alloc+0x422/0x12f0 [ 682.459183][ C1] ___slab_alloc+0x43a/0x12f0 [ 682.459197][ C1] ? ___slab_alloc+0x422/0x12f0 [ 682.459215][ C1] ? __alloc_skb+0x103/0x2c0 [ 682.459257][ C1] kmem_cache_alloc_node+0x12e/0x310 [ 682.459282][ C1] ? __alloc_skb+0x103/0x2c0 [ 682.459300][ C1] __alloc_skb+0x103/0x2c0 [ 682.459319][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 682.459341][ C1] ? process_scheduled_works+0x975/0x1600 [ 682.459364][ C1] process_scheduled_works+0xa60/0x1600 [ 682.459397][ C1] ? worker_attach_to_pool+0x370/0x370 [ 682.459421][ C1] ? assign_work+0x3cc/0x5d0 [ 682.459444][ C1] worker_thread+0xa5e/0xfe0 [ 682.459475][ C1] kthread+0x2fa/0x390 [ 682.459491][ C1] ? pr_cont_work+0x550/0x550 [ 682.459511][ C1] ? kthread_blkcg+0xd0/0xd0 [ 682.459528][ C1] ret_from_fork+0x48/0x80 [ 682.459547][ C1] ? kthread_blkcg+0xd0/0xd0 [ 682.459563][ C1] ret_from_fork_asm+0x11/0x20 [ 682.459591][ C1] [ 682.520898][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 682.520941][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 682.521002][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.521039][ T29] Call Trace: [ 682.521059][ T29] [ 682.521081][ T29] dump_stack_lvl+0x18c/0x250 [ 682.521171][ T29] ? show_regs_print_info+0x20/0x20 [ 682.521235][ T29] ? load_image+0x420/0x420 [ 682.521317][ T29] panic+0x2ca/0x720 [ 682.521407][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 682.521487][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 682.521585][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 682.521667][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 682.521768][ T29] watchdog+0xf98/0xfa0 [ 682.521848][ T29] ? watchdog+0x1e1/0xfa0 [ 682.521949][ T29] kthread+0x2fa/0x390 [ 682.522001][ T29] ? hungtask_pm_notify+0x50/0x50 [ 682.522081][ T29] ? kthread_blkcg+0xd0/0xd0 [ 682.522135][ T29] ret_from_fork+0x48/0x80 [ 682.522200][ T29] ? kthread_blkcg+0xd0/0xd0 [ 682.522253][ T29] ret_from_fork_asm+0x11/0x20 [ 682.522338][ T29] [ 682.908901][ T29] Kernel Offset: disabled [ 682.913236][ T29] Rebooting in 86400 seconds..