last executing test programs: 11m49.362809792s ago: executing program 0 (id=3920): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0xc0, 0x29, 0x4, {0x4, 0x14, '\x00', [@generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7a, 0x8001, [0x5, 0x9, 0x400, 0xb]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0xfd, 0x50, "1535ebfdb99e0d39d28fb7f215a54151de67b9687327f73080bb73c35bad11f299c8b1f644acb1a95df98c8149faff35640b1df83d4aa03c3b99cf5dbe2746a6d54410686a5e46ff586dba7fed5df29d"}, @generic={0x93, 0x8, "e80ee304ecb784ec"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}], 0x108}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf90}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m48.547748636s ago: executing program 2 (id=3923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 11m48.302510623s ago: executing program 0 (id=3924): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000040)=""/13, 0xd}], 0x1, 0x3ff, 0x101) 11m47.382442721s ago: executing program 2 (id=3925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffe5, 0xb}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 11m44.00650368s ago: executing program 0 (id=3930): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x800) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c0009"], 0x3c}, 0x1, 0x11}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x10}) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) 11m41.326137268s ago: executing program 2 (id=3932): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0xc0, 0x29, 0x4, {0x4, 0x14, '\x00', [@generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7a, 0x8001, [0x5, 0x9, 0x400, 0xb]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0xfd, 0x50, "1535ebfdb99e0d39d28fb7f215a54151de67b9687327f73080bb73c35bad11f299c8b1f644acb1a95df98c8149faff35640b1df83d4aa03c3b99cf5dbe2746a6d54410686a5e46ff586dba7fed5df29d"}, @generic={0x93, 0x8, "e80ee304ecb784ec"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}], 0x108}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf90}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m41.220662572s ago: executing program 0 (id=3933): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x152302, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000006c0)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x57ff]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfdd}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x523ceddf01d5b18b}, 0x1, 0x0, 0x0, 0x4080}, 0x20000840) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) keyctl$revoke(0x3, r5) add_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000180), &(0x7f0000000540), 0x0, r5) 11m40.036685957s ago: executing program 0 (id=3936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 11m39.668164848s ago: executing program 2 (id=3937): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x152302, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000006c0)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x57ff]}}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfdd}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x523ceddf01d5b18b}, 0x1, 0x0, 0x0, 0x4080}, 0x20000840) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) keyctl$revoke(0x3, r5) 11m38.803046033s ago: executing program 0 (id=3940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffe5, 0xb}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 11m37.768886734s ago: executing program 2 (id=3941): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 11m37.262161109s ago: executing program 2 (id=3943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x6, 0x4, 0x9, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x5, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x1, 0xfffffcbb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x2200c0c4) ioctl$SIOCSIFHWADDR(r1, 0x8922, 0x0) 11m23.63864827s ago: executing program 32 (id=3940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffe5, 0xb}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 11m21.285937709s ago: executing program 33 (id=3943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x6, 0x4, 0x9, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x5, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x1, 0xfffffcbb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x2200c0c4) ioctl$SIOCSIFHWADDR(r1, 0x8922, 0x0) 15.830173218s ago: executing program 3 (id=5080): socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$system_posix_acl(0x0, &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f007) 12.039354149s ago: executing program 5 (id=5091): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0x10, 0x2, 0x0) 9.877100997s ago: executing program 5 (id=5094): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff970001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 9.79844721s ago: executing program 4 (id=5103): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0x10, 0x2, 0x0) 9.621840335s ago: executing program 5 (id=5096): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x152302, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x20000840) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$revoke(0x3, r4) 8.963834356s ago: executing program 4 (id=5097): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f000068c000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068a000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.95727811s ago: executing program 5 (id=5098): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.810248284s ago: executing program 4 (id=5099): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$tun(r0, 0x0, 0xfdef) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) 6.798117545s ago: executing program 1 (id=5100): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 6.718063937s ago: executing program 5 (id=5101): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x3, 0x1) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f00000000c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x2000000000000) 6.603939811s ago: executing program 4 (id=5102): mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), 0x0, &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) 6.589055021s ago: executing program 1 (id=5104): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046f41, &(0x7f0000000440)=0x1f) 6.588271311s ago: executing program 3 (id=5105): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff970001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.997972502s ago: executing program 5 (id=5106): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0x10, 0x2, 0x0) 4.506328877s ago: executing program 1 (id=5107): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x152302, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x20000840) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$revoke(0x3, r4) 4.506055757s ago: executing program 3 (id=5108): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f000068c000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068a000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.818635559s ago: executing program 4 (id=5109): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x3, 0x1) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f00000000c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x2000000000000) 3.532943299s ago: executing program 3 (id=5110): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.940783999s ago: executing program 4 (id=5111): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$tun(r0, 0x0, 0xfdef) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) 1.866491201s ago: executing program 1 (id=5112): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 1.750168195s ago: executing program 3 (id=5113): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$tun(r0, 0x0, 0xfdef) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13) socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r3, r3, 0x0, 0x9) 1.678010197s ago: executing program 1 (id=5114): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 4.95811ms ago: executing program 1 (id=5115): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046f41, &(0x7f0000000440)=0x1f) 0s ago: executing program 3 (id=5116): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): ted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.617813][T12373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.281852][T18332] loop3: detected capacity change from 0 to 512 [ 799.664121][T18332] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 800.015878][T18338] loop4: detected capacity change from 0 to 512 [ 801.211553][T18332] EXT4-fs: error -4 creating inode table initialization thread [ 801.220380][T18332] EXT4-fs (loop3): mount failed [ 802.271735][T18338] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 802.302014][T18338] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 804.059662][T17540] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 804.981860][T18370] loop3: detected capacity change from 0 to 512 [ 806.353725][T18370] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 806.440292][T18370] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 806.451247][T18370] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 806.461025][T18370] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.4126: Failed to acquire dquot type 0 [ 806.475008][T18370] EXT4-fs (loop3): Remounting filesystem read-only [ 806.481863][T18370] EXT4-fs (loop3): 1 orphan inode deleted [ 806.490335][T18370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.503530][T18370] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.809215][T12811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.057311][T18396] loop4: detected capacity change from 0 to 7 [ 808.319797][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 808.583624][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.592856][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 808.623553][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.632863][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 808.694748][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.704335][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 808.754637][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.763978][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 808.811160][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.820402][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 809.581422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 810.616781][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.655045][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.336354][T18426] ubi: mtd0 is already attached to ubi16 [ 813.906771][T18454] loop4: detected capacity change from 0 to 512 [ 814.002612][T18454] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 815.002441][T18454] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 815.013272][T18454] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 815.022929][T18454] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.4146: Failed to acquire dquot type 0 [ 815.046002][T18454] EXT4-fs (loop4): Remounting filesystem read-only [ 815.052995][T18454] EXT4-fs (loop4): 1 orphan inode deleted [ 815.059631][T18454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.072494][T18454] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.545109][T17538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.726305][T18497] loop3: detected capacity change from 0 to 512 [ 818.735932][T18497] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 819.854312][T18497] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 819.865173][T18497] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 819.874664][T18497] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.4153: Failed to acquire dquot type 0 [ 819.904437][T18497] EXT4-fs (loop3): Remounting filesystem read-only [ 819.911336][T18497] EXT4-fs (loop3): 1 orphan inode deleted [ 819.918579][T18497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.932163][T18497] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 820.235216][T12811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.534093][T18513] loop1: detected capacity change from 0 to 512 [ 820.548433][T18513] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 820.599110][T18513] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 820.609845][T18513] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 820.619504][T18513] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.4157: Failed to acquire dquot type 0 [ 820.641270][T18513] EXT4-fs (loop1): Remounting filesystem read-only [ 820.648124][T18513] EXT4-fs (loop1): 1 orphan inode deleted [ 820.656834][T18513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.669809][T18513] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.753850][T12373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.070744][T18526] loop1: detected capacity change from 0 to 512 [ 824.021508][T18526] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 824.083814][T18526] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 824.095012][T18526] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 824.104622][T18526] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.4160: Failed to acquire dquot type 0 [ 824.126512][T18526] EXT4-fs (loop1): Remounting filesystem read-only [ 824.133463][T18526] EXT4-fs (loop1): 1 orphan inode deleted [ 824.140059][T18526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.152932][T18526] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.443241][T12373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.382584][T18550] ubi: mtd0 is already attached to ubi16 [ 825.969438][T18562] loop5: detected capacity change from 0 to 512 [ 828.065453][T18562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 828.201014][T18562] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 828.211647][T18562] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 828.222011][T18562] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.4169: Failed to acquire dquot type 0 [ 828.245765][T18562] EXT4-fs (loop5): Remounting filesystem read-only [ 828.252509][T18562] EXT4-fs (loop5): 1 orphan inode deleted [ 828.259438][T18562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.272405][T18562] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.584529][T17551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.815773][T18576] loop4: detected capacity change from 0 to 512 [ 828.842147][T18576] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 828.972195][T18576] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 828.982976][T18576] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 828.992608][T18576] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.4170: Failed to acquire dquot type 0 [ 829.008612][T18576] EXT4-fs (loop4): Remounting filesystem read-only [ 829.017531][T18576] EXT4-fs (loop4): 1 orphan inode deleted [ 829.029139][T18576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.043328][T18576] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.847532][T17538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.249700][T18592] loop4: detected capacity change from 0 to 7 [ 831.969100][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 832.218296][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 832.241149][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.250452][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 832.267853][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.277390][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 832.291430][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.300962][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 832.321143][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.330504][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 832.348331][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.357583][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 836.809519][T18630] ubi: mtd0 is already attached to ubi16 [ 836.869381][ T5791] Bluetooth: hci5: command 0x0406 tx timeout [ 839.647758][T18666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4181'. [ 843.856614][T18711] ubi: mtd0 is already attached to ubi16 [ 844.308272][T18720] loop1: detected capacity change from 0 to 512 [ 844.335350][T18720] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 845.339863][T18720] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 845.350612][T18720] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 845.361252][T18720] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.4195: Failed to acquire dquot type 0 [ 845.378827][T18720] EXT4-fs (loop1): Remounting filesystem read-only [ 845.385821][T18720] EXT4-fs (loop1): 1 orphan inode deleted [ 845.393430][T18720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.406163][T18720] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 845.752701][T12373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.666531][T18733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 854.108116][T18809] loop4: detected capacity change from 0 to 7 [ 856.179557][T18813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4202'. [ 856.342991][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 856.354180][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 856.363469][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 856.381749][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 856.391353][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 856.409161][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 856.418463][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 856.432221][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 856.441541][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 856.456199][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 856.465522][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 861.323968][T18825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 863.874515][T18887] loop4: detected capacity change from 0 to 7 [ 864.906115][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 864.924223][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 864.933438][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 864.943515][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 864.952806][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 864.962783][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 864.972131][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 864.990480][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 864.999835][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 865.011262][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 865.020503][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 870.061011][T18910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 870.605332][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.651185][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.483892][T18957] loop4: detected capacity change from 0 to 7 [ 874.462371][T18958] loop4: detected capacity change from 0 to 7 [ 875.881033][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 875.942873][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 875.952179][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 875.971133][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 875.980423][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 875.991143][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 876.000685][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 876.009498][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 876.018810][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 876.141497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 876.543038][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 876.552318][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 879.005143][T18964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 880.762884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.724081][T19014] loop4: detected capacity change from 0 to 7 [ 883.929428][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 883.953646][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 883.962918][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 883.991159][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.000582][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 884.011402][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.020641][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 884.093458][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.102763][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 884.908209][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.917491][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 885.121463][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4253'. [ 885.451004][T19031] loop3: detected capacity change from 0 to 512 [ 885.606444][T19031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 885.744021][T19031] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 885.754957][T19031] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 885.765161][T19031] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.4255: Failed to acquire dquot type 0 [ 885.809406][T19031] EXT4-fs (loop3): Remounting filesystem read-only [ 885.817574][T19031] EXT4-fs (loop3): 1 orphan inode deleted [ 885.835220][T19031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.848402][T19031] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 886.398035][T19023] nbd0: detected capacity change from 0 to 63 [ 886.468584][ T5792] block nbd0: Receive control failed (result -32) [ 886.495950][ T96] block nbd0: Dead connection, failed to find a fallback [ 886.504857][ T96] block nbd0: shutting down sockets [ 886.510776][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 886.522274][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 886.548872][ T96] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 886.558208][ T96] Buffer I/O error on dev nbd0, logical block 1, async page read [ 886.566152][ T96] Buffer I/O error on dev nbd0, logical block 2, async page read [ 886.574111][ T96] Buffer I/O error on dev nbd0, logical block 3, async page read [ 886.584335][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 886.594761][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 886.605498][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 886.621725][T18000] ldm_validate_partition_table(): Disk read failed. [ 886.681392][T18000] Dev nbd0: unable to read RDB block 0 [ 886.690030][T12811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.728506][T18000] nbd0: unable to read partition table [ 886.832805][T18000] ldm_validate_partition_table(): Disk read failed. [ 886.872196][T18000] Dev nbd0: unable to read RDB block 0 [ 886.912676][T18000] nbd0: unable to read partition table [ 890.920984][ T5791] Bluetooth: hci5: command 0x0406 tx timeout [ 891.001690][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4265'. [ 891.024013][T19070] nbd1: detected capacity change from 0 to 63 [ 891.033314][ T5791] block nbd1: Receive control failed (result -32) [ 891.112363][ T55] block nbd1: Dead connection, failed to find a fallback [ 891.119509][ T55] block nbd1: shutting down sockets [ 891.126280][ T55] blk_print_req_error: 53 callbacks suppressed [ 891.126298][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 891.144547][ T55] buffer_io_error: 143 callbacks suppressed [ 891.144564][ T55] Buffer I/O error on dev nbd1, logical block 0, async page read [ 891.158869][ T55] Buffer I/O error on dev nbd1, logical block 1, async page read [ 891.167368][ T55] Buffer I/O error on dev nbd1, logical block 2, async page read [ 891.175303][ T55] Buffer I/O error on dev nbd1, logical block 3, async page read [ 891.184719][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 891.194720][ T55] Buffer I/O error on dev nbd1, logical block 0, async page read [ 891.202662][ T55] Buffer I/O error on dev nbd1, logical block 1, async page read [ 891.210446][ T55] Buffer I/O error on dev nbd1, logical block 2, async page read [ 891.218519][ T55] Buffer I/O error on dev nbd1, logical block 3, async page read [ 891.231443][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 891.240937][ T55] Buffer I/O error on dev nbd1, logical block 0, async page read [ 891.249119][ T55] Buffer I/O error on dev nbd1, logical block 1, async page read [ 891.257616][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 891.267106][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 891.288505][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 891.298902][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 891.308706][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 891.318141][T17620] ldm_validate_partition_table(): Disk read failed. [ 891.325485][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 891.334978][ T55] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 891.378402][T17620] Dev nbd1: unable to read RDB block 0 [ 891.460094][T17620] nbd1: unable to read partition table [ 891.623082][T19084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4266'. [ 891.772289][T19084] nbd2: detected capacity change from 0 to 63 [ 891.817039][T17620] ldm_validate_partition_table(): Disk read failed. [ 891.864832][ T5791] block nbd2: Receive control failed (result -32) [ 891.882872][T17620] Dev nbd1: unable to read RDB block 0 [ 891.921325][ T55] block nbd2: Dead connection, failed to find a fallback [ 891.928502][ T55] block nbd2: shutting down sockets [ 891.936404][T18000] ldm_validate_partition_table(): Disk read failed. [ 891.962218][T17620] nbd1: unable to read partition table [ 892.001375][T18000] Dev nbd2: unable to read RDB block 0 [ 892.055382][T18000] nbd2: unable to read partition table [ 893.074392][T18000] ldm_validate_partition_table(): Disk read failed. [ 893.083145][T19096] loop4: detected capacity change from 0 to 7 [ 893.137161][T18000] Dev nbd2: unable to read RDB block 0 [ 893.309387][T18000] nbd2: unable to read partition table [ 897.279251][T19140] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4276'. [ 897.794843][T19148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4279'. [ 897.824581][T19148] nbd3: detected capacity change from 0 to 63 [ 897.839733][ T5791] block nbd3: Receive control failed (result -32) [ 897.840872][ T96] block nbd3: Send control failed (result -32) [ 897.855927][ T96] block nbd3: Request send failed, requeueing [ 897.867763][T16535] block nbd3: Dead connection, failed to find a fallback [ 897.883407][ T96] block nbd3: Dead connection, failed to find a fallback [ 897.892065][T16535] block nbd3: shutting down sockets [ 897.897644][T16535] blk_print_req_error: 99 callbacks suppressed [ 897.897654][T16535] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 897.915653][ T96] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 897.925087][ T96] buffer_io_error: 286 callbacks suppressed [ 897.925098][ T96] Buffer I/O error on dev nbd3, logical block 1, async page read [ 897.939424][ T96] Buffer I/O error on dev nbd3, logical block 2, async page read [ 897.947962][T16535] Buffer I/O error on dev nbd3, logical block 0, async page read [ 897.959216][ T96] Buffer I/O error on dev nbd3, logical block 3, async page read [ 897.967948][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 897.977819][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 897.985933][ T55] Buffer I/O error on dev nbd3, logical block 1, async page read [ 897.994856][ T55] Buffer I/O error on dev nbd3, logical block 2, async page read [ 898.004177][ T55] Buffer I/O error on dev nbd3, logical block 3, async page read [ 898.013186][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 898.023048][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 898.031033][ T55] Buffer I/O error on dev nbd3, logical block 1, async page read [ 898.040377][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 898.049880][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 898.060802][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 898.070504][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 898.081055][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 898.090766][T17620] ldm_validate_partition_table(): Disk read failed. [ 898.098314][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 898.113355][T17620] Dev nbd3: unable to read RDB block 0 [ 898.123231][T17620] nbd3: unable to read partition table [ 898.144236][T17620] ldm_validate_partition_table(): Disk read failed. [ 898.162696][T17620] Dev nbd3: unable to read RDB block 0 [ 898.173304][T17620] nbd3: unable to read partition table [ 899.148442][T19171] loop4: detected capacity change from 0 to 7 [ 901.089733][T19188] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4290'. [ 902.131458][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4294'. [ 902.146328][T19207] nbd4: detected capacity change from 0 to 63 [ 902.163061][ T5791] block nbd4: Receive control failed (result -104) [ 902.163067][T19159] block nbd4: Send control failed (result -32) [ 902.169638][T19159] block nbd4: Request send failed, requeueing [ 902.169911][T19159] block nbd4: Dead connection, failed to find a fallback [ 902.190073][T19159] block nbd4: shutting down sockets [ 903.435893][T19221] loop4: detected capacity change from 0 to 7 [ 904.115041][ C0] blk_print_req_error: 95 callbacks suppressed [ 904.115066][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 904.171164][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.180530][ C0] buffer_io_error: 139 callbacks suppressed [ 904.180545][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 904.290721][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.300179][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 904.351518][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.360972][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 904.371820][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.381012][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 904.403058][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.412494][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 905.805866][T19250] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4303'. [ 906.604390][T19260] loop1: detected capacity change from 0 to 2048 [ 906.633787][T19260] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 906.654739][T19260] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 907.234693][ T28] audit: type=1800 audit(1778828601.339:21): pid=19260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4305" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 910.452059][T19282] loop4: detected capacity change from 0 to 7 [ 910.729068][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 910.779892][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 910.789134][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 910.805148][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 910.814474][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 910.834649][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 910.843879][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 910.865233][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 910.874653][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 910.887402][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 910.896890][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 911.806055][T19298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4313'. [ 912.743882][T19320] loop3: detected capacity change from 0 to 2048 [ 912.754906][T19320] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 912.774605][T19320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 914.541182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 914.892930][ T28] audit: type=1800 audit(1778828607.529:22): pid=19320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4316" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 918.847121][T19344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4323'. [ 923.608078][T19381] netlink: 436 bytes leftover after parsing attributes in process `syz.3.4331'. [ 925.191181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 927.581166][T19415] loop4: detected capacity change from 0 to 2048 [ 927.594064][T19415] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 927.610685][T19415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 928.212443][ T28] audit: type=1800 audit(1778828622.319:23): pid=19415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4337" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 929.127348][T19431] netlink: 436 bytes leftover after parsing attributes in process `syz.1.4340'. [ 931.969470][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.749814][ T24] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 30 seconds [ 932.761621][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.771726][ T24] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 30 seconds [ 932.782993][ T24] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 30 seconds [ 933.228117][T19457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4343'. [ 933.336855][T19460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4352'. [ 935.197689][T19478] loop3: detected capacity change from 0 to 2048 [ 936.095778][T19478] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 936.109636][T19478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 936.487150][ T28] audit: type=1800 audit(1778828630.649:24): pid=19476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4348" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 936.652145][T19480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4358'. [ 947.339674][T19548] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 954.446494][T19586] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 954.447989][T19590] loop4: detected capacity change from 0 to 16 [ 954.464389][T19588] nbd5: detected capacity change from 0 to 63 [ 954.484168][ T5791] block nbd5: Receive control failed (result -104) [ 954.609691][T19590] erofs: (device loop4): mounted with root inode @ nid 36. [ 960.621103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 961.122329][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4398'. [ 961.905983][T19646] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 963.328706][ T24] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 60 seconds [ 963.340092][ T24] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 60 seconds [ 963.351562][ T24] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 60 seconds [ 965.833270][T19660] loop1: detected capacity change from 0 to 16 [ 965.885997][T19660] erofs: (device loop1): mounted with root inode @ nid 36. [ 970.338576][ T5142] udevd[5142]: worker [17620] /devices/virtual/block/nbd4 is taking a long time [ 972.733510][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4403'. [ 973.055441][T19691] nbd6: detected capacity change from 0 to 63 [ 973.074105][ T5791] block nbd6: Receive control failed (result -104) [ 980.410467][T19728] ubi: mtd0 is already attached to ubi16 [ 981.562099][T19725] nbd7: detected capacity change from 0 to 63 [ 981.578026][ T24] block nbd7: Send control failed (result -32) [ 981.589323][ T24] block nbd7: Request send failed, requeueing [ 981.596601][ T5791] block nbd7: Receive control failed (result -32) [ 981.601423][ T24] block nbd7: Dead connection, failed to find a fallback [ 981.612109][ T24] block nbd7: shutting down sockets [ 981.618152][ T24] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 981.627405][ T24] Buffer I/O error on dev nbd7, logical block 0, async page read [ 981.643653][ T24] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 981.653600][ T24] Buffer I/O error on dev nbd7, logical block 1, async page read [ 981.661747][ T24] Buffer I/O error on dev nbd7, logical block 2, async page read [ 981.669677][ T24] Buffer I/O error on dev nbd7, logical block 3, async page read [ 981.688880][ T24] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 981.698309][ T24] Buffer I/O error on dev nbd7, logical block 0, async page read [ 981.706426][ T24] Buffer I/O error on dev nbd7, logical block 1, async page read [ 981.714334][ T24] Buffer I/O error on dev nbd7, logical block 2, async page read [ 981.722775][ T24] Buffer I/O error on dev nbd7, logical block 3, async page read [ 981.731344][ T24] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 981.741171][ T24] Buffer I/O error on dev nbd7, logical block 0, async page read [ 981.749315][ T24] Buffer I/O error on dev nbd7, logical block 1, async page read [ 981.757761][ T24] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 981.771470][ T24] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 981.783367][ T24] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 981.798189][T19467] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 981.808713][T19467] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 981.819157][T19467] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 981.829093][T17519] ldm_validate_partition_table(): Disk read failed. [ 981.853918][T17519] Dev nbd7: unable to read RDB block 0 [ 981.861667][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4416'. [ 981.931455][T17519] nbd7: unable to read partition table [ 981.973203][T17519] ldm_validate_partition_table(): Disk read failed. [ 982.014250][T17519] Dev nbd7: unable to read RDB block 0 [ 982.088841][T17519] nbd7: unable to read partition table [ 984.546441][T19758] loop4: detected capacity change from 0 to 7 [ 985.081425][T16816] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 30 seconds [ 987.048687][ C1] blk_print_req_error: 87 callbacks suppressed [ 987.048706][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 987.073033][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.082525][ C1] buffer_io_error: 138 callbacks suppressed [ 987.082534][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 987.101657][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.110987][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 987.124859][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.134066][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 987.145066][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.154485][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 987.163199][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.172610][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 994.609085][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.615648][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.660587][ T24] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 90 seconds [ 994.672102][ T24] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 90 seconds [ 994.683926][ T24] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 90 seconds [ 995.163338][T19812] loop4: detected capacity change from 0 to 7 [ 996.486714][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 996.514221][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.523702][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 996.548525][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.558042][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 996.569735][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.579131][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 996.591249][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.600904][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 996.621093][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.630387][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 999.431085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1002.027289][T19840] loop4: detected capacity change from 0 to 2048 [ 1002.884528][T19840] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1002.958159][T19840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1003.361284][ T28] audit: type=1800 audit(1778828697.469:25): pid=19839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4433" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 1003.637297][ T24] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 30 seconds [ 1003.648881][ T24] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 30 seconds [ 1003.661330][ T24] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 30 seconds [ 1003.673126][ T24] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 30 seconds [ 1007.978219][T19866] loop3: detected capacity change from 0 to 512 [ 1007.987448][T19866] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1008.447429][T19866] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1008.458408][T19866] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1008.468098][T19866] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.4451: Failed to acquire dquot type 0 [ 1008.480979][T19866] EXT4-fs (loop3): Remounting filesystem read-only [ 1008.487721][T19866] EXT4-fs (loop3): 1 orphan inode deleted [ 1008.494371][T19866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.507363][T19866] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.261223][T12811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.228680][T19895] loop1: detected capacity change from 0 to 2048 [ 1013.144123][T19895] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1013.172212][T19895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1013.538020][ T28] audit: type=1800 audit(1778828707.639:26): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4454" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 1015.436530][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 60 seconds [ 1016.074283][T19900] loop3: detected capacity change from 0 to 16 [ 1016.134185][T19900] erofs: (device loop3): mounted with root inode @ nid 36. [ 1016.726473][T19905] loop5: detected capacity change from 0 to 2048 [ 1017.434703][T19905] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1017.459666][T19905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1017.851224][ T28] audit: type=1800 audit(1778828711.949:27): pid=19904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4459" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 1022.220843][T19919] loop4: detected capacity change from 0 to 7 [ 1022.947707][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1022.981091][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1022.990481][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1023.021128][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1023.030787][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1023.141068][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1023.150589][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1023.251318][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1023.260603][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1023.284544][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1023.294232][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1024.975723][T19159] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 120 seconds [ 1024.987057][T19159] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 120 seconds [ 1024.998750][T19159] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 120 seconds [ 1025.187652][T19933] loop3: detected capacity change from 0 to 2048 [ 1025.243020][T19933] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1025.273623][T19933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1025.907213][ T28] audit: type=1800 audit(1778828719.979:28): pid=19933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4467" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 1028.047227][T19946] loop5: detected capacity change from 0 to 2048 [ 1028.605930][T19946] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1028.624067][T19946] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1028.951237][ T28] audit: type=1800 audit(1778828723.099:29): pid=19945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4470" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 1033.762633][T19159] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 60 seconds [ 1033.774098][T19159] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 60 seconds [ 1033.805383][T19159] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 60 seconds [ 1033.816706][T19159] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 60 seconds [ 1036.953427][T19998] loop3: detected capacity change from 0 to 2048 [ 1036.977022][T19998] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1037.064930][T19998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1037.300760][T20002] loop4: detected capacity change from 0 to 2048 [ 1038.112919][T20002] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1038.128931][T20002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1038.568364][ T28] audit: type=1800 audit(1778828732.629:30): pid=19999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4469" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 1044.348035][T20028] loop1: detected capacity change from 0 to 2048 [ 1045.089854][T20028] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1045.118235][T20028] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1045.552110][ T28] audit: type=1800 audit(1778828739.589:31): pid=20026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4491" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 1045.884716][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 90 seconds [ 1046.132717][T20035] loop5: detected capacity change from 0 to 2048 [ 1046.297273][T20035] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1046.996509][T20043] loop1: detected capacity change from 0 to 2048 [ 1049.218050][T20043] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1049.263466][T20040] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1049.283767][T20043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1049.443989][T20035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1049.674499][ T28] audit: type=1800 audit(1778828743.839:32): pid=20041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4493" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 1051.822241][T20062] loop3: detected capacity change from 0 to 2048 [ 1052.693982][T20062] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1052.725184][T20062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.086936][ T28] audit: type=1800 audit(1778828747.249:33): pid=20060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4502" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 1054.468147][T20077] loop1: detected capacity change from 0 to 2048 [ 1054.508600][T20077] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1054.540824][T20077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1054.922217][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.928718][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.094978][T20079] loop4: detected capacity change from 0 to 16 [ 1055.114442][T20079] erofs: (device loop4): mounted with root inode @ nid 36. [ 1055.627602][T19159] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 150 seconds [ 1055.640456][T19159] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 150 seconds [ 1055.653937][T19159] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 150 seconds [ 1055.969124][T20086] loop1: detected capacity change from 0 to 2048 [ 1056.036629][T20086] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1056.120124][T20086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1056.732761][T20099] loop3: detected capacity change from 0 to 2048 [ 1057.119206][T20099] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1057.142979][T20099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1057.471373][ T28] audit: type=1800 audit(1778828751.619:34): pid=20099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4509" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 1058.671264][T20106] ubi: mtd0 is already attached to ubi16 [ 1061.074398][T20130] loop5: detected capacity change from 0 to 16 [ 1061.090891][T20130] erofs: (device loop5): mounted with root inode @ nid 36. [ 1061.623424][T20113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1062.483956][T20146] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4522'. [ 1062.657761][T20147] loop4: detected capacity change from 0 to 2048 [ 1062.691489][T20147] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1062.717718][T20147] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1063.015863][T20146] nbd8: detected capacity change from 0 to 6597069767103 [ 1063.089280][ T5791] block nbd8: Receive control failed (result -32) [ 1063.116430][T19159] block nbd8: Dead connection, failed to find a fallback [ 1063.124429][T19159] block nbd8: shutting down sockets [ 1063.129683][T19159] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1063.139328][T19159] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1063.147252][T19159] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1063.155732][T19159] Buffer I/O error on dev nbd8, logical block 2, async page read [ 1063.163678][T19159] Buffer I/O error on dev nbd8, logical block 3, async page read [ 1063.193869][T19159] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1063.208370][T19159] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1063.216638][T19159] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1063.224950][T19159] Buffer I/O error on dev nbd8, logical block 2, async page read [ 1063.233955][T19159] Buffer I/O error on dev nbd8, logical block 3, async page read [ 1063.242638][T19159] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1063.251993][T19159] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1063.259951][T19159] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1063.270170][T19159] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1063.281434][T19159] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1063.291459][T19159] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1063.301322][T19159] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1063.311740][T19159] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1063.322281][T19159] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1063.332152][T19159] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1063.343287][T19733] ldm_validate_partition_table(): Disk read failed. [ 1063.356630][T19733] Dev nbd8: unable to read RDB block 0 [ 1063.363736][T19733] nbd8: unable to read partition table [ 1063.429125][T19733] ldm_validate_partition_table(): Disk read failed. [ 1063.748819][T19733] Dev nbd8: unable to read RDB block 0 [ 1063.951596][T19159] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 90 seconds [ 1063.971592][T19159] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 90 seconds [ 1063.982811][T19159] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 90 seconds [ 1063.993903][T19159] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 90 seconds [ 1064.051303][T19733] nbd8: unable to read partition table [ 1064.906056][T20166] loop3: detected capacity change from 0 to 2048 [ 1065.749175][T20166] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1065.780669][T20166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1066.449976][T20170] loop4: detected capacity change from 0 to 2048 [ 1067.267557][T20170] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1067.304533][T20170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1068.919033][T20195] loop3: detected capacity change from 0 to 2048 [ 1068.946559][T20195] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1068.971596][T20195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1071.421509][T20180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1074.262397][T20235] ubi: mtd0 is already attached to ubi16 [ 1074.292841][T20229] ubi: mtd0 is already attached to ubi16 [ 1075.017267][T20241] loop1: detected capacity change from 0 to 2048 [ 1075.422819][T20241] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1075.806314][T20241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1075.955596][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 120 seconds [ 1076.083317][T20243] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4546'. [ 1076.147473][T20243] nbd9: detected capacity change from 0 to 6597069767103 [ 1076.184145][ T5791] block nbd9: Receive control failed (result -104) [ 1076.197879][T19467] block nbd9: Dead connection, failed to find a fallback [ 1076.205635][T19467] block nbd9: shutting down sockets [ 1076.211589][T19467] blk_print_req_error: 58 callbacks suppressed [ 1076.211599][T19467] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1076.227525][T19467] buffer_io_error: 122 callbacks suppressed [ 1076.227535][T19467] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1076.243032][T19467] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1076.253255][T19467] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1076.261661][T19467] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1084.436455][T20310] loop1: detected capacity change from 0 to 2048 [ 1084.881492][T20310] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1084.895465][T20310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1086.271792][T19159] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 180 seconds [ 1086.283344][T19159] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 180 seconds [ 1086.295034][T19159] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 180 seconds [ 1087.593302][T20327] ubi: mtd0 is already attached to ubi16 [ 1091.712416][T20336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1092.468658][T20378] loop3: detected capacity change from 0 to 2048 [ 1092.812469][T20378] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1092.843507][T20378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1093.241181][ T28] audit: type=1800 audit(1778828787.329:35): pid=20378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4580" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 1094.511437][T19159] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 120 seconds [ 1094.522728][T19159] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 120 seconds [ 1094.534219][T19159] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 120 seconds [ 1094.546030][T19159] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 120 seconds [ 1094.965960][T20390] loop3: detected capacity change from 0 to 2048 [ 1095.813831][T20390] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1096.004424][T20390] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1096.212921][T20396] loop5: detected capacity change from 0 to 2048 [ 1097.053487][T20396] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1097.074322][T20396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1097.101202][ T28] audit: type=1800 audit(1778828791.159:36): pid=20390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4585" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 1098.125483][T20401] trusted_key: encrypted_key: insufficient parameters specified [ 1099.411543][T20411] overlayfs: missing 'lowerdir' [ 1102.071994][T20404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1102.648792][T20428] ubi: mtd0 is already attached to ubi16 [ 1104.731143][T20430] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1105.513645][T20445] trusted_key: encrypted_key: insufficient parameters specified [ 1105.782732][T20448] loop1: detected capacity change from 0 to 2048 [ 1105.818955][T20448] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1105.887234][T20448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1106.032906][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 150 seconds [ 1107.064510][T20457] trusted_key: encrypted_key: insufficient parameters specified [ 1107.632881][T19467] block nbd9: Possible stuck request ffff888022378000: control (read@0,1024B). Runtime 30 seconds [ 1108.412241][T20456] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1108.963201][T20473] loop5: detected capacity change from 0 to 2048 [ 1109.005960][T20473] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1109.029580][T20473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1109.481080][ T28] audit: type=1800 audit(1778828803.639:37): pid=20473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4598" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 1109.668815][T20476] overlayfs: missing 'lowerdir' [ 1111.376940][T20492] loop5: detected capacity change from 0 to 2048 [ 1112.185161][T20492] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1112.198567][T20492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1112.501319][ T28] audit: type=1800 audit(1778828806.659:38): pid=20491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4604" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 1112.820036][T20495] loop3: detected capacity change from 0 to 512 [ 1113.111208][T20495] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.4609: bg 0: block 473: padding at end of block bitmap is not set [ 1113.231416][T20495] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1113.282046][T20495] EXT4-fs (loop3): 1 orphan inode deleted [ 1113.289375][T20495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1113.362237][T19897] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1113.371568][T20495] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1113.383723][T19897] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 1 [ 1114.013306][T20495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4609'. [ 1114.159650][T20495] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.4609: bad inode number: 7 [ 1114.595212][T20505] trusted_key: encrypted_key: insufficient parameters specified [ 1115.512131][T20507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4610'. [ 1115.786547][T12811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.293817][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.301078][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.318213][T20509] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4612'. [ 1116.924833][T19159] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 210 seconds [ 1116.936643][T19159] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 210 seconds [ 1116.947895][T19159] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 210 seconds [ 1118.929397][T20529] ubi: mtd0 is already attached to ubi16 [ 1120.873990][T20537] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1123.535372][T20558] ubi: mtd0 is already attached to ubi16 [ 1125.461122][T19159] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 150 seconds [ 1125.472852][T19159] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 150 seconds [ 1125.484416][T19159] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 150 seconds [ 1125.496515][T19159] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 150 seconds [ 1126.450441][T20572] trusted_key: encrypted_key: insufficient parameters specified [ 1126.633295][T20571] loop3: detected capacity change from 0 to 2048 [ 1126.642629][T20571] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1126.675029][T20571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1127.266902][T20578] loop1: detected capacity change from 0 to 2048 [ 1128.149000][T20579] loop4: detected capacity change from 0 to 7 [ 1128.151101][T20578] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1128.211132][T20578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1128.521369][ T28] audit: type=1800 audit(1778828822.679:39): pid=20575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4629" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 1129.882853][T20596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4635'. [ 1129.954248][T20595] loop1: detected capacity change from 0 to 512 [ 1130.332540][T20595] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.4634: bg 0: block 473: padding at end of block bitmap is not set [ 1130.463816][T20595] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1130.572910][T20595] EXT4-fs (loop1): 1 orphan inode deleted [ 1130.580933][T20595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.605685][ T11] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1130.649973][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 1130.705548][T20595] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.824008][T20595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4634'. [ 1130.868644][T20595] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.4634: bad inode number: 7 [ 1131.542038][T12373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.787674][T20614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4645'. [ 1134.383802][T20623] loop3: detected capacity change from 0 to 2048 [ 1134.719700][T20623] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1134.769369][T20623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1135.193939][T20629] trusted_key: encrypted_key: insufficient parameters specified [ 1135.994084][T20630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4640'. [ 1136.242169][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 180 seconds [ 1136.715324][T20640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4642'. [ 1139.531179][T19467] block nbd9: Possible stuck request ffff888022378000: control (read@0,1024B). Runtime 60 seconds [ 1139.837590][T20653] overlayfs: missing 'lowerdir' [ 1140.920932][T20656] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4648'. [ 1144.321455][T20665] loop4: detected capacity change from 0 to 2048 [ 1144.818530][T20665] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1144.893504][T20665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1145.242215][ T28] audit: type=1800 audit(1778828839.349:40): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4649" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 1145.388224][T20663] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1145.976215][T20678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4652'. [ 1146.469069][T20677] loop5: detected capacity change from 0 to 512 [ 1146.540844][T20680] loop1: detected capacity change from 0 to 512 [ 1146.542866][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4646'. [ 1146.559552][T20682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4646'. [ 1146.606977][T20677] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1146.799696][T20680] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.4654: bg 0: block 473: padding at end of block bitmap is not set [ 1146.871810][T20680] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1146.885907][T20680] EXT4-fs (loop1): 1 orphan inode deleted [ 1146.911613][ T2957] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1146.922202][ T2957] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1 [ 1146.967979][T20680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.999105][T19159] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 240 seconds [ 1147.010730][T19159] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 240 seconds [ 1147.022770][T19159] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 240 seconds [ 1147.035527][T20677] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1147.044123][T20680] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1147.075953][T20677] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1147.146635][T20677] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.4653: Failed to acquire dquot type 0 [ 1147.165209][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4654'. [ 1147.286603][T20677] EXT4-fs (loop5): Remounting filesystem read-only [ 1147.319686][T20677] EXT4-fs (loop5): 1 orphan inode deleted [ 1148.436851][T20677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.450833][T20677] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.565953][T20697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4657'. [ 1149.153446][T12373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.813939][T20704] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4661'. [ 1151.242149][T20708] ubi: mtd0 is already attached to ubi16 [ 1152.091965][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4664'. [ 1152.113989][T20713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4664'. [ 1152.129934][T17551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.487379][T20720] overlayfs: missing 'lowerdir' [ 1153.580074][T20726] loop3: detected capacity change from 0 to 512 [ 1154.185010][T20734] loop1: detected capacity change from 0 to 2048 [ 1155.191477][T20734] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1155.216102][T20734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1155.238572][T20726] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.4668: bg 0: block 473: padding at end of block bitmap is not set [ 1155.291789][T20726] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1157.075716][T19159] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 180 seconds [ 1157.090069][T19159] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 180 seconds [ 1157.102042][T19159] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 180 seconds [ 1157.114946][T19159] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 180 seconds [ 1157.127812][T20726] EXT4-fs (loop3): 1 orphan inode deleted [ 1157.143464][ T8986] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1157.181421][ T8986] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:16: Failed to release dquot type 1 [ 1157.182688][T20726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.243198][T20726] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.465538][T12811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.733318][T20754] ubi: mtd0 is already attached to ubi16 [ 1157.898720][T20756] loop3: detected capacity change from 0 to 512 [ 1158.295817][T20756] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1158.424601][T20756] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1158.501547][T20756] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1158.626211][T20756] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.4673: Failed to acquire dquot type 0 [ 1158.637941][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4676'. [ 1158.637966][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4676'. [ 1158.715385][T20756] EXT4-fs (loop3): Remounting filesystem read-only [ 1158.741201][T20756] EXT4-fs (loop3): 1 orphan inode deleted [ 1158.772602][T20756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.862178][T20756] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.918306][T20771] loop4: detected capacity change from 0 to 2048 [ 1159.979706][T20771] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1160.047440][T20771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1160.983089][T20776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4679'. [ 1161.230616][T20775] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4678'. [ 1161.909245][T20784] loop4: detected capacity change from 0 to 512 [ 1161.909261][T20785] loop5: detected capacity change from 0 to 512 [ 1162.032936][T20785] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.4682: bg 0: block 473: padding at end of block bitmap is not set [ 1162.075880][T20784] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1162.159639][T20785] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1162.185577][T20785] EXT4-fs (loop5): 1 orphan inode deleted [ 1162.194135][T20785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.234851][ T8986] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1162.241114][T20785] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.252740][ T8986] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:16: Failed to release dquot type 1 [ 1162.275526][T20784] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1162.314856][T20784] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1162.341261][T20784] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.4681: Failed to acquire dquot type 0 [ 1162.383876][T20784] EXT4-fs (loop4): Remounting filesystem read-only [ 1162.393186][T20784] EXT4-fs (loop4): 1 orphan inode deleted [ 1162.400811][T20784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.415568][T20784] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.418261][T12811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.436497][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4682'. [ 1164.534509][T17551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.263778][T20808] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1166.581523][T20810] ubi: mtd0 is already attached to ubi16 [ 1166.968007][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 210 seconds [ 1167.252906][T20815] loop1: detected capacity change from 0 to 2048 [ 1168.154069][T20815] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1168.168993][T20815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1168.692928][T20820] ubi: mtd0 is already attached to ubi16 [ 1169.429930][T17538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.857909][T19467] block nbd9: Possible stuck request ffff888022378000: control (read@0,1024B). Runtime 90 seconds [ 1173.085041][T20840] ubi: mtd0 is already attached to ubi16 [ 1173.670347][T20842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1173.719694][T20842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1173.751396][T20842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1173.763944][T20842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1173.773169][T20842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1173.780816][T20842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1174.264971][T20850] loop3: detected capacity change from 0 to 2048 [ 1174.378641][T20850] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1174.393699][T20850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1175.188003][T20841] chnl_net:caif_netlink_parms(): no params data found [ 1175.439140][T20841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.446535][T20841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.454022][T20841] bridge_slave_0: entered allmulticast mode [ 1175.462578][T20841] bridge_slave_0: entered promiscuous mode [ 1175.473135][T20841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.480531][T20841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.488159][T20841] bridge_slave_1: entered allmulticast mode [ 1175.495916][T20841] bridge_slave_1: entered promiscuous mode [ 1175.531883][T20841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.545170][T20841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.665305][T20858] ubi: mtd0 is already attached to ubi16 [ 1175.866854][T20841] team0: Port device team_slave_0 added [ 1175.874965][ T5791] Bluetooth: hci0: command tx timeout [ 1175.912270][T20841] team0: Port device team_slave_1 added [ 1176.083937][T20841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.091569][T20841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.121253][T20841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.155825][T20841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.163569][T20841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.193481][T20841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.381870][T20841] hsr_slave_0: entered promiscuous mode [ 1176.389860][T20841] hsr_slave_1: entered promiscuous mode [ 1177.101439][T19159] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 270 seconds [ 1177.115004][T19159] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 270 seconds [ 1177.126268][T19159] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 270 seconds [ 1178.084221][ T5791] Bluetooth: hci0: command tx timeout [ 1178.092528][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.106145][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.743568][T20841] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.757112][T20887] loop4: detected capacity change from 0 to 7 [ 1178.843603][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1178.857614][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1178.866989][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1178.882156][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1178.891700][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1178.943514][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1178.952913][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1178.980811][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1178.990592][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1179.000808][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1179.010212][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1179.165165][T20890] ubi: mtd0 is already attached to ubi16 [ 1179.571681][T20841] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.808396][T20894] loop4: detected capacity change from 0 to 512 [ 1179.821205][T20894] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1179.984349][T20841] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.030011][T20894] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1180.041249][T20894] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1180.050678][T20894] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.4711: Failed to acquire dquot type 0 [ 1180.078959][T20894] EXT4-fs (loop4): Remounting filesystem read-only [ 1180.088180][T20894] EXT4-fs (loop4): 1 orphan inode deleted [ 1180.095584][T20894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.108344][T20894] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.119808][ T5791] Bluetooth: hci0: command tx timeout [ 1180.420933][T17538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.498463][T20841] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.598426][T20904] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4714'. [ 1181.317132][T20841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1181.432631][T20841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1181.479957][T20841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1181.538300][T20841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1182.879644][ T5791] Bluetooth: hci0: command tx timeout [ 1183.024636][T20841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.117646][T20841] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.139289][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.146529][ T8986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.205434][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.212646][ T8986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.704318][T20920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4726'. [ 1183.854304][T20841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1183.896308][T20841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1184.619559][T20841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.722028][T20930] loop4: detected capacity change from 0 to 7 [ 1184.922510][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1184.932812][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1184.942497][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1184.952432][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1184.961645][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1184.971079][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1184.980608][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1184.989289][T20841] veth0_vlan: entered promiscuous mode [ 1184.996804][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1185.006142][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1185.016395][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1185.025654][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1185.035953][T20841] veth1_vlan: entered promiscuous mode [ 1185.168801][T20841] veth0_macvtap: entered promiscuous mode [ 1185.197406][T20841] veth1_macvtap: entered promiscuous mode [ 1185.264502][T20841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.303024][T20841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.331075][T20841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.358721][T20841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.375383][T20841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.390164][T20841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.429031][T20841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.464784][T20939] ubi: mtd0 is already attached to ubi16 [ 1185.537489][T20841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.551726][T20841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.563029][T20841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.585768][T20841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.604449][T20841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.615561][T20841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.630065][T20841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.656661][T20841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.706462][T20841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.736806][T20841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.749962][T20841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.035130][T20949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4727'. [ 1186.483557][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.516847][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.861068][T19159] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 210 seconds [ 1187.872402][T19159] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 210 seconds [ 1187.883758][T19159] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 210 seconds [ 1187.895211][T19159] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 210 seconds [ 1188.020006][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.021193][T20956] ubi: mtd0 is already attached to ubi16 [ 1188.028483][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.223111][T20971] loop5: detected capacity change from 0 to 16 [ 1189.282931][T20971] erofs: (device loop5): mounted with root inode @ nid 36. [ 1189.792286][T20976] ubi: mtd0 is already attached to ubi16 [ 1190.323645][T20980] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4739'. [ 1190.826091][T20981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4738'. [ 1191.528204][T20986] loop4: detected capacity change from 0 to 2048 [ 1191.538848][T20986] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1191.589434][T20986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1193.516863][T20999] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4745'. [ 1193.804577][T21008] ubi: mtd0 is already attached to ubi16 [ 1194.864910][T21017] loop5: detected capacity change from 0 to 2048 [ 1194.873348][T21017] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1194.885786][T21017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1197.772591][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 240 seconds [ 1197.890323][T21040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4758'. [ 1198.022018][T21044] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4759'. [ 1198.260144][T21047] loop4: detected capacity change from 0 to 7 [ 1201.393338][T16816] block nbd9: Possible stuck request ffff888022378000: control (read@0,1024B). Runtime 120 seconds [ 1202.013236][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1202.051326][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1202.060620][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.069624][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1202.078974][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.088445][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1202.097726][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.108130][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1202.117417][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.131029][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1202.140537][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.789144][T21060] loop5: detected capacity change from 0 to 2048 [ 1202.852428][T21060] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1202.900142][T21060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1203.799220][T21064] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1205.198350][T21078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4771'. [ 1205.301066][T21080] ubi: mtd0 is already attached to ubi16 [ 1205.741330][T21081] loop3: detected capacity change from 0 to 16 [ 1205.783899][T21081] erofs: (device loop3): mounted with root inode @ nid 36. [ 1207.158726][T19159] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 300 seconds [ 1207.170557][T19159] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 300 seconds [ 1207.185839][T19159] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 300 seconds [ 1207.543170][T21098] loop3: detected capacity change from 0 to 2048 [ 1207.554811][T21098] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1207.589167][T21098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1208.280857][T21110] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4781'. [ 1210.473183][T21119] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4783'. [ 1211.125805][T21129] loop1: detected capacity change from 0 to 512 [ 1212.277087][T21129] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.4784: bg 0: block 473: padding at end of block bitmap is not set [ 1212.314092][T21129] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1212.475644][T21129] EXT4-fs (loop1): 1 orphan inode deleted [ 1212.483007][T21129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.505134][ T8986] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1212.505585][T21129] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.526667][ T8986] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:16: Failed to release dquot type 1 [ 1212.708719][T21129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4784'. [ 1212.827420][T21144] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.4784: bad inode number: 7 [ 1213.131547][T20841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.461028][T21149] ubi: mtd0 is already attached to ubi16 [ 1214.220708][T21152] loop1: detected capacity change from 0 to 2048 [ 1214.235482][T21152] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1214.269869][T21152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1214.543637][T20842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1214.558479][T20842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1214.567368][T20842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1214.577301][T20842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1214.604058][T20842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1214.614698][T20842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1216.681099][T20842] Bluetooth: hci1: command tx timeout [ 1216.897543][T21162] loop4: detected capacity change from 0 to 512 [ 1218.752110][T20842] Bluetooth: hci1: command tx timeout [ 1218.785413][T19159] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 240 seconds [ 1218.797573][T19159] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 240 seconds [ 1218.810257][T19159] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 240 seconds [ 1218.821663][T19159] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 240 seconds [ 1218.841364][T21162] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.4794: bg 0: block 473: padding at end of block bitmap is not set [ 1219.001517][T21162] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1219.080629][T21162] EXT4-fs (loop4): 1 orphan inode deleted [ 1219.093033][ T8986] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1219.157925][ T8986] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:16: Failed to release dquot type 1 [ 1219.182182][T21162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1219.351263][T21162] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.615845][T21189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4800'. [ 1219.735479][T21155] chnl_net:caif_netlink_parms(): no params data found [ 1219.816991][T21162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4794'. [ 1220.214435][T21162] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.4794: bad inode number: 7 [ 1220.450357][T21155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.460335][T21155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.468960][T21155] bridge_slave_0: entered allmulticast mode [ 1220.477902][T21155] bridge_slave_0: entered promiscuous mode [ 1220.489764][T21155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.497485][T21155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.505632][T21155] bridge_slave_1: entered allmulticast mode [ 1220.514454][T21155] bridge_slave_1: entered promiscuous mode [ 1220.590006][T21155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.656383][T21155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.813592][T17538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.831446][T20842] Bluetooth: hci1: command tx timeout [ 1220.850140][T21155] team0: Port device team_slave_0 added [ 1220.902743][T21155] team0: Port device team_slave_1 added [ 1221.065587][T21155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.095529][T21155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.161210][T21155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.206577][T21155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.277770][T21204] loop4: detected capacity change from 0 to 7 [ 1222.228306][T21155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.911368][T20842] Bluetooth: hci1: command tx timeout [ 1223.133854][T21155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.149814][T21215] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1225.252526][T21155] hsr_slave_0: entered promiscuous mode [ 1226.724513][T21155] hsr_slave_1: entered promiscuous mode [ 1226.862069][T21155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1226.870366][T21155] Cannot create hsr debugfs directory [ 1227.765383][T21233] ubi: mtd0 is already attached to ubi16 [ 1228.160046][T21155] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1228.179754][T21155] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1228.195358][T21155] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1228.205371][T21155] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1228.282310][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 270 seconds [ 1228.636085][T21240] loop4: detected capacity change from 0 to 7 [ 1228.842846][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1231.340268][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1231.349788][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1231.365378][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1231.374629][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1231.408427][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1231.418060][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1231.447526][T21155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.461308][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1231.470890][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1231.499459][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1231.508903][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1231.531589][T19467] block nbd9: Possible stuck request ffff888022378000: control (read@0,1024B). Runtime 150 seconds [ 1231.635129][T21155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.703377][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.710636][ T2957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.775779][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.783022][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.204493][T21254] ubi: mtd0 is already attached to ubi16 [ 1235.448497][T21155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.685838][T21155] veth0_vlan: entered promiscuous mode [ 1235.774281][T21155] veth1_vlan: entered promiscuous mode [ 1235.921490][T21155] veth0_macvtap: entered promiscuous mode [ 1235.934275][T21155] veth1_macvtap: entered promiscuous mode [ 1236.053912][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.641788][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.673020][T19159] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 330 seconds [ 1237.684045][T19159] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 330 seconds [ 1237.697094][T19159] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 330 seconds [ 1237.844744][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.051073][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.101294][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.161080][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.227869][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.274552][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.303713][T21155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.353814][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.447835][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.521064][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.561050][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.591381][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.714927][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.792436][T21155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.891026][T21155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.922214][T21155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.024577][T21155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.047250][ T5142] udevd[5142]: worker [17620] /devices/virtual/block/nbd4 timeout; kill it [ 1239.053644][T21155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.081090][T21155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.081178][ T5142] udevd[5142]: seq 22058 '/devices/virtual/block/nbd4' killed [ 1239.090003][T21155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.138921][ T5142] udevd[5142]: worker [19733] /devices/virtual/block/nbd9 is taking a long time [ 1239.177680][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.188562][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.215413][ T5142] udevd[5142]: worker [18000] /devices/virtual/block/nbd5 timeout; kill it [ 1239.291220][ T5142] udevd[5142]: seq 22199 '/devices/virtual/block/nbd5' killed [ 1239.298957][ T5142] udevd[5142]: worker [17540] /devices/virtual/block/nbd6 timeout; kill it [ 1239.341129][ T5142] udevd[5142]: seq 22247 '/devices/virtual/block/nbd6' killed [ 1239.545146][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.575206][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.664282][T19897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.700768][T19897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.867624][T21284] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4820'. [ 1242.129730][T21301] ubi: mtd0 is already attached to ubi16 [ 1244.831794][T21311] loop4: detected capacity change from 0 to 7 [ 1245.909511][T21313] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4832'. [ 1246.052298][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1246.062440][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1246.071793][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1246.080739][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1246.089989][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1246.100975][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1246.110262][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1246.121019][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1246.130423][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1246.140995][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1246.150359][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1247.840127][T21333] loop1: detected capacity change from 0 to 2048 [ 1247.892663][T21333] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1247.960877][T21333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1250.300371][T21349] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 1250.318774][T19159] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 270 seconds [ 1250.403078][T19159] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 270 seconds [ 1250.416056][T19159] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 270 seconds [ 1250.427266][T19159] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 270 seconds [ 1253.904664][T21382] loop3: detected capacity change from 0 to 2048 [ 1254.031361][T21382] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1254.063843][T21382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1255.383399][T21396] loop4: detected capacity change from 0 to 7 [ 1256.237019][T21395] loop3: detected capacity change from 0 to 512 [ 1256.407465][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1256.421461][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1256.430706][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1256.442400][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1256.451736][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1256.472879][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1256.482481][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1256.501336][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1256.510514][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1256.520738][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1256.530351][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1256.647753][T21395] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.4857: bg 0: block 473: padding at end of block bitmap is not set [ 1256.800111][T21395] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1256.828886][T21395] EXT4-fs (loop3): 1 orphan inode deleted [ 1256.891343][ T8986] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1256.892368][T21395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1256.928710][ T8986] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:16: Failed to release dquot type 1 [ 1256.988854][T21395] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.214291][T21395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 1257.864676][T21397] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.4857: bad inode number: 7 [ 1258.375295][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 300 seconds [ 1258.584078][T21155] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.141807][T21423] loop3: detected capacity change from 0 to 2048 [ 1259.165018][T21423] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1259.192333][T21423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1260.727873][T21439] ubi: mtd0 is already attached to ubi16 [ 1261.539025][T21454] loop3: detected capacity change from 0 to 2048 [ 1261.548406][T21454] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1261.791064][T19467] block nbd9: Possible stuck request ffff888022378000: control (read@0,1024B). Runtime 180 seconds [ 1261.825519][T21453] loop4: detected capacity change from 0 to 512 [ 1261.841154][T21454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1262.282772][T21453] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.4875: bg 0: block 473: padding at end of block bitmap is not set [ 1262.605353][T21453] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1262.642998][T21453] EXT4-fs (loop4): 1 orphan inode deleted [ 1262.650327][T21453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1262.667203][ T2952] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1264.258472][T21453] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1264.273017][ T2952] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1 [ 1264.744740][T17538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.255830][T21486] ubi: mtd0 is already attached to ubi16 [ 1268.581882][T19159] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 360 seconds [ 1268.595774][T19159] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 360 seconds [ 1268.607122][T19159] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 360 seconds [ 1268.886598][T21498] loop5: detected capacity change from 0 to 512 [ 1269.144090][T21505] loop4: detected capacity change from 0 to 7 [ 1270.379413][T21498] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.4890: bg 0: block 473: padding at end of block bitmap is not set [ 1270.598670][T21498] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1270.652268][T21498] EXT4-fs (loop5): 1 orphan inode deleted [ 1270.680363][T21498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1270.684058][T19897] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1270.748202][T19897] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 1 [ 1270.813846][T21498] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1272.147195][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4890'. [ 1272.441304][T21498] EXT4-fs error (device loop5): ext4_lookup:1850: inode #2: comm syz.5.4890: bad inode number: 7 [ 1274.632804][T17551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.944778][T21537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4902'. [ 1276.283025][T21541] ubi: mtd0 is already attached to ubi16 [ 1276.382368][T21552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4906'. [ 1279.250210][T21566] ubi: mtd0 is already attached to ubi16 [ 1281.944513][T19159] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 300 seconds [ 1281.956258][T19159] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 300 seconds [ 1281.967404][T19159] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 300 seconds [ 1281.979553][T19159] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 300 seconds [ 1282.435107][T21589] ubi: mtd0 is already attached to ubi16 [ 1282.908476][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4918'. [ 1283.460233][T21609] loop4: detected capacity change from 0 to 7 [ 1288.190049][T21629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4931'. [ 1288.431535][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 330 seconds [ 1288.493914][T21639] ubi: mtd0 is already attached to ubi16 [ 1289.134519][T21649] loop4: detected capacity change from 0 to 7 [ 1291.321785][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1291.331751][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.341825][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1291.350964][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.360195][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1291.372514][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.381779][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1291.402028][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.411256][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1291.419929][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1291.429297][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1292.271506][T16816] block nbd9: Possible stuck request ffff888022378000: control (read@0,1024B). Runtime 210 seconds [ 1294.274783][T21676] loop1: detected capacity change from 0 to 512 [ 1295.537539][T21681] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1296.025935][T21676] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.4945: bg 0: block 473: padding at end of block bitmap is not set [ 1296.065167][T21676] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1296.143268][T21676] EXT4-fs (loop1): 1 orphan inode deleted [ 1296.486993][ T2957] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1298.741180][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 1298.764945][T21676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1298.778072][T19159] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 390 seconds [ 1298.789581][ T2957] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1 [ 1298.789810][T19159] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 390 seconds [ 1298.814024][T19159] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 390 seconds [ 1298.825599][T21676] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1298.964681][T20841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.394875][T21710] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1301.431745][T21706] ubi: mtd0 is already attached to ubi16 [ 1301.462750][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.469182][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.884734][T21725] loop4: detected capacity change from 0 to 7 [ 1305.448488][T21747] ubi: mtd0 is already attached to ubi16 [ 1306.390241][T21758] loop4: detected capacity change from 0 to 7 [ 1308.299705][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1308.321264][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.330539][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1308.350135][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.359755][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1308.857635][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.867029][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1308.907667][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.916981][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1308.929492][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.938842][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1312.264972][T21784] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1312.389424][T19159] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 330 seconds [ 1312.411168][T19159] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 330 seconds [ 1312.422377][T19159] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 330 seconds [ 1312.433734][T19159] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 330 seconds [ 1318.612172][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 360 seconds [ 1318.784295][T21822] loop5: detected capacity change from 0 to 2048 [ 1318.811679][T21822] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1318.842403][T21822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1322.494801][T19467] block nbd9: Possible stuck request ffff888022378000: control (read@0,1024B). Runtime 240 seconds [ 1326.172944][T21853] ubi: mtd0 is already attached to ubi16 [ 1330.683251][T19159] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 420 seconds [ 1331.831009][T19159] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 420 seconds [ 1331.842944][T19159] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 420 seconds [ 1331.996307][ T5142] udevd[5142]: worker [19733] /devices/virtual/block/nbd9 timeout; kill it [ 1332.071401][ T5142] udevd[5142]: seq 22520 '/devices/virtual/block/nbd9' killed [ 1336.874607][T21910] ubi: mtd0 is already attached to ubi16 [ 1339.887857][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1342.921108][T19159] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 360 seconds [ 1342.932297][T19159] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 360 seconds [ 1342.943662][T19159] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 360 seconds [ 1342.955260][T19159] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 360 seconds [ 1349.242298][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 390 seconds [ 1349.567116][T21975] ubi: mtd0 is already attached to ubi16 [ 1350.181992][T21989] loop4: detected capacity change from 0 to 512 [ 1350.192935][T21989] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1351.690651][T21989] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1351.701334][T21989] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1351.711283][T21989] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.5030: Failed to acquire dquot type 0 [ 1351.743731][T21989] EXT4-fs (loop4): Remounting filesystem read-only [ 1351.751159][T21989] EXT4-fs (loop4): 1 orphan inode deleted [ 1351.757888][T21989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1351.771031][T21989] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1353.092598][T16816] block nbd9: Possible stuck request ffff888022378000: control (read@0,1024B). Runtime 270 seconds [ 1353.893888][T17538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.039350][T22020] ubi: mtd0 is already attached to ubi16 [ 1357.757357][T22026] loop4: detected capacity change from 0 to 7 [ 1362.182949][T21073] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 450 seconds [ 1362.194663][T21073] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 450 seconds [ 1362.206507][T21073] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 450 seconds [ 1362.206853][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.232122][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.207901][T22063] ubi: mtd0 is already attached to ubi16 [ 1363.234143][T22065] loop1: detected capacity change from 0 to 2048 [ 1363.365960][T22065] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1363.471784][T22065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1363.991295][T22068] loop4: detected capacity change from 0 to 7 [ 1365.949348][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1365.961375][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1365.970826][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1365.979565][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1365.989088][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1366.001852][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1366.011481][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1366.022083][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1366.031578][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1366.043309][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1366.052711][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1367.152467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1367.422109][T22084] loop4: detected capacity change from 0 to 512 [ 1369.984234][T22084] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.5062: bg 0: block 473: padding at end of block bitmap is not set [ 1370.011746][T22084] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1370.024921][T22084] EXT4-fs (loop4): 1 orphan inode deleted [ 1370.033865][T22084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1370.053645][ T2952] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1370.053651][T22084] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.077032][T22084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5062'. [ 1370.148454][T22096] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.5062: bad inode number: 7 [ 1370.181099][ T2952] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1 [ 1370.452039][T17538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.534354][T22101] ubi: mtd0 is already attached to ubi16 [ 1373.555656][T21073] block nbd6: Possible stuck request ffff888022250000: control (read@0,1024B). Runtime 390 seconds [ 1373.567611][T21073] block nbd6: Possible stuck request ffff888022250200: control (read@1024,1024B). Runtime 390 seconds [ 1373.579459][T21073] block nbd6: Possible stuck request ffff888022250400: control (read@2048,1024B). Runtime 390 seconds [ 1373.600990][T21073] block nbd6: Possible stuck request ffff888022250600: control (read@3072,1024B). Runtime 390 seconds [ 1375.421892][T22127] loop1: detected capacity change from 0 to 512 [ 1375.508832][T22127] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.5075: bg 0: block 473: padding at end of block bitmap is not set [ 1375.560192][T22127] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1375.579194][T22127] EXT4-fs (loop1): 1 orphan inode deleted [ 1375.588468][T22127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1375.608906][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1375.630019][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 1375.650312][T22127] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1375.754374][T22141] ubi: mtd0 is already attached to ubi16 [ 1375.784922][T22127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5075'. [ 1376.309327][T22145] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.5075: bad inode number: 7 [ 1377.302918][T20841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.134146][T22164] loop3: detected capacity change from 0 to 2048 [ 1379.200965][T22164] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1379.341050][T19467] block nbd5: Possible stuck request ffff888022220000: control (read@0,4096B). Runtime 420 seconds [ 1379.388549][T22164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1380.773075][T22179] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1383.415275][T16816] block nbd9: Possible stuck request ffff888022378000: control (read@0,1024B). Runtime 300 seconds [ 1391.979898][T22246] ubi: mtd0 is already attached to ubi16 [ 1392.121724][ T29] INFO: task udevd:17540 blocked for more than 144 seconds. [ 1392.260999][ T29] Not tainted syzkaller #0 [ 1392.266033][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1392.280975][ T29] task:udevd state:D stack:23592 pid:17540 ppid:5142 flags:0x00004006 [ 1392.290530][ T29] Call Trace: [ 1392.341153][ T29] [ 1392.360956][ T29] __schedule+0x1553/0x45a0 [ 1392.381137][ T29] ? asan.module_dtor+0x20/0x20 [ 1392.401113][ T29] ? mark_lock+0x94/0x320 [ 1392.405618][ T29] ? lock_chain_count+0x20/0x20 [ 1392.410596][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1392.451002][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1392.468537][ T29] schedule+0xbd/0x170 [ 1392.473959][ T29] io_schedule+0x80/0xd0 [ 1392.484842][ T29] folio_wait_bit_common+0x714/0xfa0 [ 1392.490608][ T29] ? folio_wait_bit+0x30/0x30 [ 1392.507949][ T29] ? _compound_head+0x120/0x120 [ 1392.544791][ T29] ? filemap_add_folio+0x192/0x3c0 [ 1392.550264][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 1392.589199][ T29] ? blkdev_writepage+0x30/0x30 [ 1392.601171][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 1392.606675][ T29] ? blkdev_writepage+0x30/0x30 [ 1392.641193][ T29] read_part_sector+0xd2/0x340 [ 1392.646796][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 1392.676367][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 1392.691994][ T29] ? put_partition+0x370/0x370 [ 1392.766069][T21073] block nbd4: Possible stuck request ffff8880221b0000: control (read@0,1024B). Runtime 480 seconds [ 1392.772245][ T29] ? alloc_pages+0x4dc/0x740 [ 1392.777329][T21073] block nbd4: Possible stuck request ffff8880221b0200: control (read@1024,1024B). Runtime 480 seconds [ 1392.793909][T21073] block nbd4: Possible stuck request ffff8880221b0400: control (read@2048,1024B). Runtime 480 seconds [ 1392.865134][ T29] bdev_disk_changed+0x740/0x1420 [ 1392.923269][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 1393.004691][ T29] ? iput+0x343/0x920 [ 1393.091241][ T29] blkdev_get_whole+0x30d/0x390 [ 1393.096404][ T29] blkdev_get_by_dev+0x279/0x600 [ 1393.101885][ T29] blkdev_open+0x152/0x360 [ 1393.106563][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 1393.111571][ T29] do_dentry_open+0x8c6/0x1500 [ 1393.116923][ T29] path_openat+0x27f1/0x3230 [ 1393.122205][ T29] ? do_sys_openat2+0xda/0x1d0 [ 1393.127465][ T29] ? verify_lock_unused+0x140/0x140 [ 1393.132886][ T29] ? do_filp_open+0x430/0x430 [ 1393.137955][ T29] ? __virt_addr_valid+0x18c/0x540 [ 1393.143525][ T29] do_filp_open+0x1f5/0x430 [ 1393.148520][ T29] ? vfs_tmpfile+0x490/0x490 [ 1393.153840][ T29] ? _raw_spin_unlock+0x28/0x40 [ 1393.159754][ T29] ? alloc_fd+0x58f/0x630 [ 1393.164517][ T29] do_sys_openat2+0x134/0x1d0 [ 1393.169516][ T29] ? do_sys_open+0xe0/0xe0 [ 1393.174441][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1393.180752][ T29] ? lock_chain_count+0x20/0x20 [ 1393.186288][ T29] __x64_sys_openat+0x139/0x160 [ 1393.191464][ T29] do_syscall_64+0x55/0xa0 [ 1393.196430][ T29] ? clear_bhb_loop+0x40/0x90 [ 1393.201360][ T29] ? clear_bhb_loop+0x40/0x90 [ 1393.206276][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1393.212911][ T29] RIP: 0033:0x7fac555c5407 [ 1393.217845][ T29] RSP: 002b:00007ffe28fa4930 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1393.226696][ T29] RAX: ffffffffffffffda RBX: 00007fac54f99880 RCX: 00007fac555c5407 [ 1393.236193][ T29] RDX: 00000000000a0800 RSI: 000055ad4f7124d0 RDI: ffffffffffffff9c [ 1393.244701][ T29] RBP: 000055ad4f711910 R08: 0000000000000000 R09: 0000000000000000 [ 1393.253165][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ad4f726830 [ 1393.270563][ T29] R13: 000055ad4f729410 R14: 0000000000000000 R15: 000055ad4f726830 [ 1393.279247][ T29] [ 1393.282618][ T29] INFO: task udevd:17620 blocked for more than 145 seconds. [ 1393.291051][ T29] Not tainted syzkaller #0 [ 1393.296761][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1393.306365][ T29] task:udevd state:D stack:24776 pid:17620 ppid:5142 flags:0x00004006 [ 1393.316760][ T29] Call Trace: [ 1393.320273][ T29] [ 1393.323706][ T29] __schedule+0x1553/0x45a0 [ 1393.328857][ T29] ? asan.module_dtor+0x20/0x20 [ 1393.335451][ T29] ? mark_lock+0x94/0x320 [ 1393.340357][ T29] ? lock_chain_count+0x20/0x20 [ 1393.348124][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1393.353647][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1393.359367][ T29] schedule+0xbd/0x170 [ 1393.541447][ T29] io_schedule+0x80/0xd0 [ 1393.582725][ T29] folio_wait_bit_common+0x714/0xfa0 [ 1393.588388][ T29] ? folio_wait_bit+0x30/0x30 [ 1393.593688][ T29] ? _compound_head+0x120/0x120 [ 1393.598690][ T29] ? filemap_add_folio+0x192/0x3c0 [ 1393.604383][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 1393.609821][ T29] ? blkdev_writepage+0x30/0x30 [ 1393.615327][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 1393.620696][ T29] ? blkdev_writepage+0x30/0x30 [ 1393.632609][ T29] read_part_sector+0xd2/0x340 [ 1393.647247][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 1393.674663][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 1393.680316][ T29] ? put_partition+0x370/0x370 [ 1393.730991][ T29] ? alloc_pages+0x4dc/0x740 [ 1393.735841][ T29] bdev_disk_changed+0x740/0x1420 [ 1393.750474][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 1393.766608][ T29] ? iput+0x343/0x920 [ 1393.781011][ T29] blkdev_get_whole+0x30d/0x390 [ 1393.789396][ T29] blkdev_get_by_dev+0x279/0x600 [ 1393.807674][ T29] blkdev_open+0x152/0x360 [ 1393.817387][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 1393.828258][ T29] do_dentry_open+0x8c6/0x1500 [ 1393.839264][ T29] path_openat+0x27f1/0x3230 [ 1393.857123][ T29] ? do_sys_openat2+0xda/0x1d0 [ 1393.872207][ T29] ? verify_lock_unused+0x140/0x140 [ 1393.893225][ T29] ? do_filp_open+0x430/0x430 [ 1393.903813][ T29] ? __virt_addr_valid+0x18c/0x540 [ 1393.914764][ T29] do_filp_open+0x1f5/0x430 [ 1393.924018][ T29] ? vfs_tmpfile+0x490/0x490 [ 1393.929949][ T29] ? _raw_spin_unlock+0x28/0x40 [ 1393.940957][ T29] ? alloc_fd+0x58f/0x630 [ 1393.945419][ T29] do_sys_openat2+0x134/0x1d0 [ 1393.959841][ T29] ? do_sys_open+0xe0/0xe0 [ 1393.964989][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1393.979923][ T29] ? lock_chain_count+0x20/0x20 [ 1393.985111][ T29] __x64_sys_openat+0x139/0x160 [ 1393.990106][ T29] do_syscall_64+0x55/0xa0 [ 1393.994894][ T29] ? clear_bhb_loop+0x40/0x90 [ 1393.999704][ T29] ? clear_bhb_loop+0x40/0x90 [ 1394.004691][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1394.011011][ T29] RIP: 0033:0x7fac555c5407 [ 1394.015651][ T29] RSP: 002b:00007ffe28fa4930 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1394.025466][ T29] RAX: ffffffffffffffda RBX: 00007fac54f99880 RCX: 00007fac555c5407 [ 1394.037622][ T29] RDX: 00000000000a0800 RSI: 000055ad4f71e4a0 RDI: ffffffffffffff9c [ 1394.056022][ T29] RBP: 000055ad4f711910 R08: 0000000000000000 R09: 0000000000000000 [ 1394.065527][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ad4f7349d0 [ 1394.073992][ T29] R13: 000055ad4f729410 R14: 0000000000000000 R15: 000055ad4f7349d0 [ 1394.090621][ T29] [ 1394.118228][ T29] INFO: task udevd:18000 blocked for more than 146 seconds. [ 1394.135670][ T29] Not tainted syzkaller #0 [ 1394.159909][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1394.180951][ T29] task:udevd state:D stack:23592 pid:18000 ppid:5142 flags:0x00004006 [ 1394.200291][ T29] Call Trace: [ 1394.205811][ T29] [ 1394.209006][ T29] __schedule+0x1553/0x45a0 [ 1394.215106][ T29] ? asan.module_dtor+0x20/0x20 [ 1394.220418][ T29] ? mark_lock+0x94/0x320 [ 1394.225421][ T29] ? lock_chain_count+0x20/0x20 [ 1394.230382][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1394.238653][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1394.247290][ T29] schedule+0xbd/0x170 [ 1394.255693][ T29] io_schedule+0x80/0xd0 [ 1394.266231][ T29] folio_wait_bit_common+0x714/0xfa0 [ 1394.275439][ T29] ? folio_wait_bit+0x30/0x30 [ 1394.280662][ T29] ? _compound_head+0x120/0x120 [ 1394.286335][ T29] ? filemap_add_folio+0x192/0x3c0 [ 1394.292211][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 1394.297548][ T29] ? blkdev_writepage+0x30/0x30 [ 1394.303102][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 1394.308451][ T29] ? blkdev_writepage+0x30/0x30 [ 1394.313829][ T29] read_part_sector+0xd2/0x340 [ 1394.318731][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 1394.324400][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 1394.329736][ T29] ? put_partition+0x370/0x370 [ 1394.335038][ T29] ? alloc_pages+0x4dc/0x740 [ 1394.339717][ T29] bdev_disk_changed+0x740/0x1420 [ 1394.344988][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 1394.350595][ T29] ? iput+0x343/0x920 [ 1394.354713][ T29] blkdev_get_whole+0x30d/0x390 [ 1394.359796][ T29] blkdev_get_by_dev+0x279/0x600 [ 1394.365276][ T29] blkdev_open+0x152/0x360 [ 1394.369750][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 1394.374937][ T29] do_dentry_open+0x8c6/0x1500 [ 1394.380116][ T29] path_openat+0x27f1/0x3230 [ 1394.385392][ T29] ? do_sys_openat2+0xda/0x1d0 [ 1394.391027][ T29] ? verify_lock_unused+0x140/0x140 [ 1394.396303][ T29] ? do_filp_open+0x430/0x430 [ 1394.401196][ T29] ? __virt_addr_valid+0x18c/0x540 [ 1394.406449][ T29] do_filp_open+0x1f5/0x430 [ 1394.411063][ T29] ? vfs_tmpfile+0x490/0x490 [ 1394.415725][ T29] ? _raw_spin_unlock+0x28/0x40 [ 1394.420713][ T29] ? alloc_fd+0x58f/0x630 [ 1394.425452][ T29] do_sys_openat2+0x134/0x1d0 [ 1394.430319][ T29] ? do_sys_open+0xe0/0xe0 [ 1394.435446][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1394.441730][ T29] ? lock_chain_count+0x20/0x20 [ 1394.446981][ T29] __x64_sys_openat+0x139/0x160 [ 1394.452063][ T29] do_syscall_64+0x55/0xa0 [ 1394.456594][ T29] ? clear_bhb_loop+0x40/0x90 [ 1394.461468][ T29] ? clear_bhb_loop+0x40/0x90 [ 1394.466283][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1394.472456][ T29] RIP: 0033:0x7fac555c5407 [ 1394.477347][ T29] RSP: 002b:00007ffe28fa4930 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1394.486065][ T29] RAX: ffffffffffffffda RBX: 00007fac54f99880 RCX: 00007fac555c5407 [ 1394.494686][ T29] RDX: 00000000000a0800 RSI: 000055ad4f71b3d0 RDI: ffffffffffffff9c [ 1394.502842][ T29] RBP: 000055ad4f711910 R08: 0000000000000000 R09: 0000000000000000 [ 1394.511485][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ad4f726830 [ 1394.519755][ T29] R13: 000055ad4f729410 R14: 0000000000000000 R15: 000055ad4f726830 [ 1394.529910][ T29] [ 1394.533272][ T29] [ 1394.533272][ T29] Showing all locks held in the system: [ 1394.541914][ T29] 1 lock held by khungtaskd/29: [ 1394.547115][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1394.557769][ T29] 2 locks held by getty/5531: [ 1394.563723][ T29] #0: ffff88823bdf88a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1394.579264][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1394.589891][ T29] 1 lock held by udevd/17540: [ 1394.596625][ T29] #0: ffff8880221d54c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1394.612383][ T29] 1 lock held by udevd/17620: [ 1394.617226][ T29] #0: ffff888021fdd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1394.627860][ T29] 1 lock held by udevd/18000: [ 1394.632636][ T29] #0: ffff8880221d04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1394.643055][ T29] 1 lock held by udevd/19733: [ 1394.647882][ T29] #0: ffff88802228c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1394.658792][ T29] [ 1394.662736][ T29] ============================================= [ 1394.662736][ T29] [ 1394.681064][ T29] NMI backtrace for cpu 1 [ 1394.685555][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1394.693038][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1394.703304][ T29] Call Trace: [ 1394.706709][ T29] [ 1394.709655][ T29] dump_stack_lvl+0x18c/0x250 [ 1394.714489][ T29] ? show_regs_print_info+0x20/0x20 [ 1394.719894][ T29] ? load_image+0x420/0x420 [ 1394.724602][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1394.729575][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1394.735833][ T29] ? _printk+0xde/0x130 [ 1394.740022][ T29] ? load_image+0x420/0x420 [ 1394.744768][ T29] ? load_image+0x420/0x420 [ 1394.749423][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1394.755883][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1394.762037][ T29] watchdog+0xf3d/0xf80 [ 1394.766457][ T29] ? watchdog+0x1e1/0xf80 [ 1394.771019][ T29] kthread+0x2fa/0x390 [ 1394.775311][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1394.780368][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1394.785123][ T29] ret_from_fork+0x48/0x80 [ 1394.789734][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1394.794550][ T29] ret_from_fork_asm+0x11/0x20 [ 1394.799640][ T29] [ 1394.803647][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1394.809166][ C0] NMI backtrace for cpu 0 [ 1394.809180][ C0] CPU: 0 PID: 2994 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 1394.809195][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1394.809204][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1394.809277][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 1394.809299][ C0] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d dc f9 03 0d 48 89 de 5b e9 d3 67 57 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d b0 93 7c 7e 65 8b 15 b1 93 7c [ 1394.809321][ C0] RSP: 0018:ffffc9000c2a75f8 EFLAGS: 00000283 [ 1394.809333][ C0] RAX: dffffc0000000000 RBX: ffff88823bc52000 RCX: 1ffff11047ff37f5 [ 1394.809344][ C0] RDX: 0000000000000000 RSI: ffff88823bc52f00 RDI: ffff88823bc52000 [ 1394.809354][ C0] RBP: ffffc9000c2a7730 R08: ffffea0008ef1487 R09: 1ffffd40011de290 [ 1394.809370][ C0] R10: dffffc0000000000 R11: fffff940011de291 R12: adacafaea9a8abaa [ 1394.809380][ C0] R13: ffff88823ff9bfa8 R14: ffff88823bc52f00 R15: ffff88823bc52840 [ 1394.809391][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1394.809411][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1394.809421][ C0] CR2: 0000200000000440 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 1394.809442][ C0] Call Trace: [ 1394.809456][ C0] [ 1394.809461][ C0] kfence_guarded_alloc+0x854/0xe30 [ 1394.809495][ C0] ? alloc_covered_contains+0xe0/0xe0 [ 1394.809516][ C0] ? stack_trace_save+0xaa/0x100 [ 1394.809539][ C0] __kfence_alloc+0x39a/0x3d0 [ 1394.809559][ C0] ? kfence_guarded_free+0x4b0/0x4b0 [ 1394.809577][ C0] ? __kfence_alloc+0x2d7/0x3d0 [ 1394.809595][ C0] ? kmem_cache_alloc_node+0x2b4/0x320 [ 1394.809613][ C0] ? __alloc_skb+0x103/0x2c0 [ 1394.809663][ C0] ? nsim_dev_trap_report_work+0x293/0xb00 [ 1394.809677][ C0] ? process_scheduled_works+0xa5d/0x15d0 [ 1394.809695][ C0] ? worker_thread+0xa55/0xfc0 [ 1394.809710][ C0] ? kthread+0x2fa/0x390 [ 1394.809723][ C0] ? ret_from_fork+0x48/0x80 [ 1394.809740][ C0] ? ret_from_fork_asm+0x11/0x20 [ 1394.809781][ C0] ? should_failslab+0x9/0x20 [ 1394.809799][ C0] ? slab_pre_alloc_hook+0x59/0x310 [ 1394.809822][ C0] kmem_cache_alloc_node+0x2b4/0x320 [ 1394.809841][ C0] ? __alloc_skb+0x103/0x2c0 [ 1394.809857][ C0] __alloc_skb+0x103/0x2c0 [ 1394.809872][ C0] nsim_dev_trap_report_work+0x293/0xb00 [ 1394.809890][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1394.809910][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1394.809930][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 1394.809947][ C0] process_scheduled_works+0xa5d/0x15d0 [ 1394.809978][ C0] ? worker_attach_to_pool+0x380/0x380 [ 1394.809999][ C0] ? assign_work+0x3d2/0x5d0 [ 1394.810019][ C0] worker_thread+0xa55/0xfc0 [ 1394.810048][ C0] kthread+0x2fa/0x390 [ 1394.810062][ C0] ? pr_cont_work+0x560/0x560 [ 1394.810079][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1394.810093][ C0] ret_from_fork+0x48/0x80 [ 1394.810109][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1394.810123][ C0] ret_from_fork_asm+0x11/0x20 [ 1394.810148][ C0] [ 1394.812033][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1394.812048][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1394.812066][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1394.812076][ T29] Call Trace: [ 1394.812083][ T29] [ 1394.812091][ T29] dump_stack_lvl+0x18c/0x250 [ 1394.812124][ T29] ? show_regs_print_info+0x20/0x20 [ 1394.812158][ T29] ? load_image+0x420/0x420 [ 1394.812192][ T29] panic+0x2dc/0x730 [ 1394.812212][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1394.812232][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1394.812252][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1394.812302][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1394.812328][ T29] watchdog+0xf7c/0xf80 [ 1394.812352][ T29] ? watchdog+0x1e1/0xf80 [ 1394.812381][ T29] kthread+0x2fa/0x390 [ 1394.812398][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1394.812421][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1394.812439][ T29] ret_from_fork+0x48/0x80 [ 1394.812460][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1394.812479][ T29] ret_from_fork_asm+0x11/0x20 [ 1394.812513][ T29] [ 1394.815567][ T29] Kernel Offset: disabled [ 1395.233094][ T29] Rebooting in 86400 seconds..