last executing test programs: 5.941258429s ago: executing program 0 (id=390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000001000000000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.642698718s ago: executing program 0 (id=392): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) socket$inet6(0xa, 0x80001, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) recvfrom(r7, 0x0, 0x0, 0x8eee2385daec478c, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) 4.480385879s ago: executing program 1 (id=403): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.297848483s ago: executing program 1 (id=405): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.143114993s ago: executing program 1 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, 0x0) 3.773029581s ago: executing program 1 (id=407): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000001000000000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x56d, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 3.364634254s ago: executing program 3 (id=409): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000001000000000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x56d, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 3.31749971s ago: executing program 0 (id=411): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.113400606s ago: executing program 0 (id=412): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x56d, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 2.845300341s ago: executing program 1 (id=413): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x56d, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 1.61301527s ago: executing program 3 (id=416): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc048aeca, 0x0) 1.473022759s ago: executing program 3 (id=417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000001000000000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x56d, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 1.38110318s ago: executing program 2 (id=418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x0, 0x0, 0x3, 0x1000004, "550096060032854654db00", "1575a859", "0725eade", '\'q6M', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1", "000000fc00"]}) 1.105591116s ago: executing program 1 (id=419): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) socket$inet6(0xa, 0x80001, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) recvfrom(r7, 0x0, 0x0, 0x8eee2385daec478c, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) 1.024310947s ago: executing program 2 (id=420): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 818.622883ms ago: executing program 2 (id=421): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 748.425932ms ago: executing program 0 (id=422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000001000000000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x56d, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) 663.802614ms ago: executing program 3 (id=423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 457.0521ms ago: executing program 2 (id=424): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 392.628249ms ago: executing program 2 (id=425): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc048aeca, 0x0) 287.108092ms ago: executing program 3 (id=426): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 108.812495ms ago: executing program 2 (id=427): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x56d, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 9.009768ms ago: executing program 0 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 3 (id=429): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 81.295546][ T5758] cgroup: Unknown subsys name 'net' [ 81.434643][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.158692][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.905023][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.913639][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.921641][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.934759][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.967886][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.986819][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.993610][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.001428][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.007799][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.010385][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.019717][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.030286][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.040023][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.047555][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.057892][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.065438][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.076672][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.084795][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.094391][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.126316][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.149878][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.164977][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.177647][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.187659][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.659503][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 85.702989][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 85.855598][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 85.867758][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 85.890867][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.898393][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.905909][ T5779] bridge_slave_0: entered allmulticast mode [ 85.915545][ T5779] bridge_slave_0: entered promiscuous mode [ 85.931318][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.939084][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.946694][ T5779] bridge_slave_1: entered allmulticast mode [ 85.954092][ T5779] bridge_slave_1: entered promiscuous mode [ 85.989596][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.997068][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.004774][ T5773] bridge_slave_0: entered allmulticast mode [ 86.012168][ T5773] bridge_slave_0: entered promiscuous mode [ 86.031210][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.041863][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.049543][ T5773] bridge_slave_1: entered allmulticast mode [ 86.060041][ T5773] bridge_slave_1: entered promiscuous mode [ 86.148855][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.162436][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.201067][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.218284][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.244501][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.254514][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.262099][ T5770] bridge_slave_0: entered allmulticast mode [ 86.272248][ T5770] bridge_slave_0: entered promiscuous mode [ 86.312537][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.321221][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.328723][ T5770] bridge_slave_1: entered allmulticast mode [ 86.335952][ T5770] bridge_slave_1: entered promiscuous mode [ 86.372563][ T5773] team0: Port device team_slave_0 added [ 86.382795][ T5773] team0: Port device team_slave_1 added [ 86.402440][ T5779] team0: Port device team_slave_0 added [ 86.413388][ T5779] team0: Port device team_slave_1 added [ 86.444226][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.459637][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.502366][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.509895][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.517301][ T5775] bridge_slave_0: entered allmulticast mode [ 86.524730][ T5775] bridge_slave_0: entered promiscuous mode [ 86.561339][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.569219][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.595833][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.609156][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.616952][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.624258][ T5775] bridge_slave_1: entered allmulticast mode [ 86.632347][ T5775] bridge_slave_1: entered promiscuous mode [ 86.657501][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.664519][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.691583][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.703973][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.714020][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.741626][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.765884][ T5770] team0: Port device team_slave_0 added [ 86.774756][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.781931][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.808614][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.854388][ T5770] team0: Port device team_slave_1 added [ 86.894958][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.935624][ T5779] hsr_slave_0: entered promiscuous mode [ 86.943387][ T5779] hsr_slave_1: entered promiscuous mode [ 86.960845][ T5773] hsr_slave_0: entered promiscuous mode [ 86.968110][ T5773] hsr_slave_1: entered promiscuous mode [ 86.974454][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.983810][ T5773] Cannot create hsr debugfs directory [ 86.994187][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.028019][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.035568][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.062701][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.117252][ T5778] Bluetooth: hci3: command tx timeout [ 87.123193][ T5778] Bluetooth: hci0: command tx timeout [ 87.145591][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.153111][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.181360][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.204158][ T5775] team0: Port device team_slave_0 added [ 87.210381][ T5778] Bluetooth: hci1: command tx timeout [ 87.219782][ T5775] team0: Port device team_slave_1 added [ 87.276850][ T5778] Bluetooth: hci2: command tx timeout [ 87.366490][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.374424][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.409384][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.498927][ T5770] hsr_slave_0: entered promiscuous mode [ 87.511715][ T5770] hsr_slave_1: entered promiscuous mode [ 87.519912][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.532850][ T5770] Cannot create hsr debugfs directory [ 87.556180][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.564103][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.594172][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.779087][ T5775] hsr_slave_0: entered promiscuous mode [ 87.786308][ T5775] hsr_slave_1: entered promiscuous mode [ 87.792897][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.800787][ T5775] Cannot create hsr debugfs directory [ 88.077928][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.117755][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.131616][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.150839][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.249794][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.266945][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.288635][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.313388][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.395264][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.418444][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.432386][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.443619][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.571926][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.580942][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.593569][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.609326][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.621693][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.680367][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.742457][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.751208][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.791429][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.798946][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.852321][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.874247][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.902960][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.910243][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.932896][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.958503][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.965816][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.005017][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.049163][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.056490][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.131279][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.139294][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.197000][ T5778] Bluetooth: hci0: command tx timeout [ 89.197226][ T5774] Bluetooth: hci3: command tx timeout [ 89.276821][ T5774] Bluetooth: hci1: command tx timeout [ 89.299863][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.357581][ T5774] Bluetooth: hci2: command tx timeout [ 89.367494][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.432814][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.440501][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.493336][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.502317][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.624798][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.791091][ T5779] veth0_vlan: entered promiscuous mode [ 89.840322][ T5779] veth1_vlan: entered promiscuous mode [ 89.925415][ T5779] veth0_macvtap: entered promiscuous mode [ 89.951637][ T5779] veth1_macvtap: entered promiscuous mode [ 90.003231][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.031139][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.051237][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.109412][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.119153][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.129218][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.139583][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.159064][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.272083][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.323827][ T5770] veth0_vlan: entered promiscuous mode [ 90.374606][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.390296][ T5770] veth1_vlan: entered promiscuous mode [ 90.399030][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.432241][ T5773] veth0_vlan: entered promiscuous mode [ 90.494902][ T5773] veth1_vlan: entered promiscuous mode [ 90.531482][ T5770] veth0_macvtap: entered promiscuous mode [ 90.540232][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.561529][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.603394][ T5770] veth1_macvtap: entered promiscuous mode [ 90.631312][ T5775] veth0_vlan: entered promiscuous mode [ 90.641710][ T5773] veth0_macvtap: entered promiscuous mode [ 90.675666][ T5773] veth1_macvtap: entered promiscuous mode [ 90.694161][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.707132][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.720962][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.732191][ T5775] veth1_vlan: entered promiscuous mode [ 90.753816][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.765801][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.779787][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.818194][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.828986][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.839754][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.851214][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.885101][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.916282][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.936149][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.962006][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.975587][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.011732][ T5775] veth0_macvtap: entered promiscuous mode [ 91.100081][ T5775] veth1_macvtap: entered promiscuous mode [ 91.137788][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.149078][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.160153][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.172177][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.188835][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.240111][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.259472][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.269353][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.278246][ T5774] Bluetooth: hci3: command tx timeout [ 91.283754][ T5774] Bluetooth: hci0: command tx timeout [ 91.293577][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.356909][ T5774] Bluetooth: hci1: command tx timeout [ 91.388137][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.413082][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.428907][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.439650][ T5774] Bluetooth: hci2: command tx timeout [ 91.452827][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.463508][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.485078][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.499674][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.549942][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.579492][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.594343][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.622123][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.639473][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.651020][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.681470][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.726309][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.735268][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.749622][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.759702][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.806747][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.814922][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.024225][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.050073][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.104293][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.140512][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.272493][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.284536][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.301125][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.327259][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.435202][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.478337][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.717097][ T5760] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.747145][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.896542][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.932814][ T5760] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.946164][ T5760] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.965277][ T5760] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.979649][ T5872] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 92.989625][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.998744][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.004609][ T5817] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.023430][ T5872] usb 4-1: config 0 descriptor?? [ 93.037689][ T5877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.080223][ T5760] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 93.090449][ T23] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 93.111534][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.203208][ T23] usb 1-1: config 0 descriptor?? [ 93.224446][ T5817] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.286633][ T5817] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.351644][ T5817] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.363019][ T5774] Bluetooth: hci0: command tx timeout [ 93.363096][ T5778] Bluetooth: hci3: command tx timeout [ 93.407557][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.440279][ T5778] Bluetooth: hci1: command tx timeout [ 93.472415][ T5885] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 93.516498][ T5778] Bluetooth: hci2: command tx timeout [ 93.541701][ T5872] usb 4-1: Cannot read MAC address [ 93.551875][ T5872] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 93.561860][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 93.571342][ T23] usb 1-1: Cannot read MAC address [ 93.577720][ T23] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 93.594980][ T5872] usb 4-1: USB disconnect, device number 2 [ 93.607023][ T23] usb 1-1: USB disconnect, device number 2 [ 93.630937][ T5817] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 93.968210][ T5872] usb 2-1: USB disconnect, device number 2 [ 94.553484][ T9] usb 3-1: USB disconnect, device number 2 [ 94.656250][ T43] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 94.850422][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.872234][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 94.896867][ T43] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 94.914632][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.928420][ T43] usb 1-1: config 0 descriptor?? [ 94.938511][ T43] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 94.959292][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 94.991319][ T43] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 95.014340][ T43] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 95.034991][ T43] usb 1-1: media controller created [ 95.053132][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.088193][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 95.100979][ T43] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 95.115669][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 95.179978][ T43] dvb-usb: schedule remote query interval to 150 msecs. [ 95.193092][ T43] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.235902][ T43] usb 1-1: USB disconnect, device number 3 [ 95.386481][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 95.479131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.680762][ T5919] ubi31: attaching mtd0 [ 96.706793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.708514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.761752][ T5917] tty tty2: ldisc open failed (-12), clearing slot 1 [ 96.877512][ T5919] ubi31: scanning is finished [ 96.959139][ T5919] ubi31: empty MTD device detected [ 97.014469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.116678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 97.128207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 97.219043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.230794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.516888][ T5923] syz.0.21[5923]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.522161][ T27] cfg80211: failed to load regulatory.db [ 97.729423][ T5919] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 97.923950][ T5928] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 97.946257][ T5928] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0/file1 [ 98.854245][ T5923] loop0: detected capacity change from 0 to 32768 [ 98.921968][ T5923] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.21 (5923) [ 99.046481][ T5923] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 99.086663][ T5923] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 99.116242][ T5923] BTRFS info (device loop0): force zlib compression, level 3 [ 99.123926][ T5923] BTRFS info (device loop0): turning on flush-on-commit [ 99.157391][ T5932] loop3: detected capacity change from 0 to 32768 [ 99.182116][ T5923] BTRFS info (device loop0): max_inline at 4096 [ 99.196599][ T5932] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.24 (5932) [ 99.207775][ T5923] BTRFS info (device loop0): using free space tree [ 99.217082][ T5817] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.343666][ T5771] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (5771) [ 99.450071][ T5817] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 99.460091][ T5923] BTRFS info (device loop0): enabling ssd optimizations [ 99.466585][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.494587][ T5923] BTRFS info (device loop0): auto enabling async discard [ 99.515480][ T5817] usb 3-1: config 0 descriptor?? [ 99.653051][ T5934] loop1: detected capacity change from 0 to 32768 [ 99.700821][ T5934] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.25 (5934) [ 99.781465][ T5817] usb 3-1: Cannot read MAC address [ 99.801334][ T5817] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 99.867058][ T5817] usb 3-1: USB disconnect, device number 3 [ 99.873112][ T5773] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 100.030994][ T5782] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5782) [ 100.256263][ T5890] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (5890) [ 100.277653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.286698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.163071][ T5967] loop2: detected capacity change from 0 to 512 [ 101.517326][ T5967] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 101.589643][ T5967] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 101.600238][ T5967] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 101.627961][ T5967] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 101.636159][ T5967] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 101.644574][ T5967] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.655750][ T5974] loop3: detected capacity change from 0 to 512 [ 101.693788][ T5974] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 101.704024][ T5974] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 101.720620][ T5974] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 101.735408][ T5974] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 101.743836][ T5974] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 101.752353][ T5974] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.762719][ T5967] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.32: bg 0: block 34: padding at end of block bitmap is not set [ 101.802992][ T5974] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.35: bg 0: block 34: padding at end of block bitmap is not set [ 101.858454][ T5967] Quota error (device loop2): write_blk: dquota write failed [ 101.885472][ T5974] Quota error (device loop3): write_blk: dquota write failed [ 101.903819][ T5974] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 101.915249][ T5967] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 101.936330][ T5974] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.35: Failed to acquire dquot type 1 [ 101.957085][ T5967] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.32: Failed to acquire dquot type 1 [ 101.982574][ T5974] EXT4-fs (loop3): 1 truncate cleaned up [ 101.990497][ T5967] EXT4-fs (loop2): 1 truncate cleaned up [ 102.009937][ T5974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.032378][ T5967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.228711][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.330731][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.801584][ T5972] loop0: detected capacity change from 0 to 32768 [ 102.803495][ T5988] loop1: detected capacity change from 0 to 64 [ 102.870027][ T5972] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 102.870408][ T5972] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 102.870444][ T5972] BTRFS info (device loop0): force zlib compression, level 3 [ 102.870469][ T5972] BTRFS info (device loop0): turning on flush-on-commit [ 102.870532][ T5972] BTRFS info (device loop0): max_inline at 4096 [ 102.870551][ T5972] BTRFS info (device loop0): using free space tree [ 103.058798][ T5999] mmap: syz.1.40 (5999) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.547424][ T5972] BTRFS info (device loop0): enabling ssd optimizations [ 103.547453][ T5972] BTRFS info (device loop0): auto enabling async discard [ 103.663201][ T5773] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 105.294863][ T6020] loop1: detected capacity change from 0 to 512 [ 105.351521][ T6015] loop2: detected capacity change from 0 to 32768 [ 105.363938][ T6015] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.43 (6015) [ 105.387706][ T6020] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 105.454893][ T6024] process 'syz.0.46' launched '/dev/fd/-1' with NULL argv: empty string added [ 105.648554][ T6020] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 105.902398][ T6020] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 106.290058][ T6015] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.292209][ T6020] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 106.308746][ T6020] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 106.317645][ T6020] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.327586][ T6020] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.45: bg 0: block 34: padding at end of block bitmap is not set [ 106.350587][ T6020] Quota error (device loop1): write_blk: dquota write failed [ 106.359119][ T6020] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 106.369485][ T6020] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.45: Failed to acquire dquot type 1 [ 106.381474][ T6015] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 106.422605][ T6020] EXT4-fs (loop1): 1 truncate cleaned up [ 106.430032][ T6015] BTRFS info (device loop2): metadata ratio 2 [ 106.563022][ T6015] BTRFS info (device loop2): turning on flush-on-commit [ 106.616279][ T6015] BTRFS info (device loop2): enabling auto defrag [ 106.622910][ T6015] BTRFS info (device loop2): max_inline at 4096 [ 106.678730][ T6015] BTRFS info (device loop2): using free space tree [ 106.693054][ T6020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.872382][ T6045] loop0: detected capacity change from 0 to 512 [ 106.884388][ T6045] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 106.908553][ T6045] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 106.922055][ T6015] BTRFS info (device loop2): enabling ssd optimizations [ 106.922376][ T6045] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 106.952828][ T6045] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 106.965265][ T6045] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 106.966583][ T6015] BTRFS info (device loop2): auto enabling async discard [ 106.991145][ T6045] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.025317][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.077044][ T6045] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.49: bg 0: block 34: padding at end of block bitmap is not set [ 107.184548][ T6045] Quota error (device loop0): write_blk: dquota write failed [ 107.239557][ T6045] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 107.286846][ T6045] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.49: Failed to acquire dquot type 1 [ 107.339954][ T6045] EXT4-fs (loop0): 1 truncate cleaned up [ 107.388473][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.444542][ T6053] loop1: detected capacity change from 0 to 512 [ 107.446345][ T6052] loop3: detected capacity change from 0 to 512 [ 107.506804][ T6053] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 107.526713][ T6052] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 107.566421][ T6053] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 107.587978][ T6052] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 107.636218][ T6052] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 107.656171][ T6053] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 107.683998][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.695175][ T6053] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 107.706512][ T6052] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 107.727771][ T6052] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 107.780457][ T6053] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 107.797980][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.801733][ T6052] EXT4-fs (loop3): orphan cleanup on readonly fs [ 107.855371][ T6053] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.866951][ T6052] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.51: bg 0: block 34: padding at end of block bitmap is not set [ 107.914891][ T6052] Quota error (device loop3): write_blk: dquota write failed [ 107.927819][ T6053] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.50: bg 0: block 34: padding at end of block bitmap is not set [ 107.930569][ T6052] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 107.963605][ T6052] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.51: Failed to acquire dquot type 1 [ 108.018286][ T6053] Quota error (device loop1): write_blk: dquota write failed [ 108.029725][ T6052] EXT4-fs (loop3): 1 truncate cleaned up [ 108.070450][ T6052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.085771][ T6053] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 108.107479][ T6053] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.50: Failed to acquire dquot type 1 [ 108.180119][ T6053] EXT4-fs (loop1): 1 truncate cleaned up [ 108.227872][ T6053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.348448][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.573025][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.931679][ T6066] loop2: detected capacity change from 0 to 512 [ 108.961418][ T6066] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 108.961449][ T6066] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 108.961465][ T6066] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 108.963170][ T6066] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 108.963194][ T6066] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 108.963526][ T6066] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.967083][ T6066] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.56: bg 0: block 34: padding at end of block bitmap is not set [ 108.969027][ T6066] Quota error (device loop2): write_blk: dquota write failed [ 108.969129][ T6066] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 108.969176][ T6066] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.56: Failed to acquire dquot type 1 [ 108.978629][ T6066] EXT4-fs (loop2): 1 truncate cleaned up [ 108.984058][ T6066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.152870][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.157070][ T6057] loop0: detected capacity change from 0 to 32768 [ 109.166865][ T6057] ======================================================= [ 109.166865][ T6057] WARNING: The mand mount option has been deprecated and [ 109.166865][ T6057] and is ignored by this kernel. Remove the mand [ 109.166865][ T6057] option from the mount to silence this warning. [ 109.166865][ T6057] ======================================================= [ 109.727267][ T6064] loop1: detected capacity change from 0 to 32768 [ 110.722874][ T6064] overlayfs: upper fs needs to support d_type. [ 110.736528][ T6064] overlayfs: upper fs does not support tmpfile. [ 110.759617][ T6064] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 110.777188][ T6064] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 110.777188][ T6064] [ 110.793816][ T6064] ERROR: (device loop1): remounting filesystem as read-only [ 110.802460][ T6064] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 111.211003][ T6072] loop2: detected capacity change from 0 to 32768 [ 111.236248][ T6072] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.59 (6072) [ 111.277225][ T6072] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.311767][ T6072] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 111.357332][ T6072] BTRFS info (device loop2): metadata ratio 2 [ 111.363649][ T6072] BTRFS info (device loop2): turning on flush-on-commit [ 111.426373][ T6072] BTRFS info (device loop2): enabling auto defrag [ 111.432950][ T6072] BTRFS info (device loop2): max_inline at 4096 [ 111.457082][ T6072] BTRFS info (device loop2): using free space tree [ 111.622117][ T6072] BTRFS info (device loop2): enabling ssd optimizations [ 111.636534][ T6072] BTRFS info (device loop2): auto enabling async discard [ 111.961400][ T28] audit: type=1800 audit(1768773664.548:2): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.59" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 112.166145][ T23] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 112.240796][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.364037][ T5890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop2 scanned by udevd (5890) [ 112.400046][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.425008][ T6087] loop3: detected capacity change from 0 to 32768 [ 112.431998][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 112.466282][ T23] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 112.517228][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.559913][ T23] usb 2-1: config 0 descriptor?? [ 112.609625][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 112.620000][ T6087] overlayfs: upper fs needs to support d_type. [ 112.631911][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 112.647399][ T6087] overlayfs: upper fs does not support tmpfile. [ 112.692361][ T6087] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 112.700634][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 112.748772][ T6087] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 112.748772][ T6087] [ 112.759686][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 112.770447][ T23] usb 2-1: media controller created [ 112.777490][ T6087] ERROR: (device loop3): remounting filesystem as read-only [ 112.789987][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.865874][ T6087] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 112.884665][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 112.903871][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 112.942436][ T11] read_mapping_page failed! [ 112.954037][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 112.980152][ T11] ERROR: (device loop3): txCommit: [ 112.980152][ T11] [ 113.019050][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 113.039570][ T11] jfs_write_inode: jfs_commit_inode failed! [ 113.047036][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 113.104357][ T23] usb 2-1: USB disconnect, device number 3 [ 113.242255][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 114.071621][ T6110] loop2: detected capacity change from 0 to 32768 [ 114.141099][ T6110] overlayfs: upper fs needs to support d_type. [ 114.141190][ T6110] overlayfs: upper fs does not support tmpfile. [ 114.161265][ T6110] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 114.170451][ T6110] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 114.170451][ T6110] [ 114.170525][ T6110] ERROR: (device loop2): remounting filesystem as read-only [ 114.170546][ T6110] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 114.734313][ T6114] loop3: detected capacity change from 0 to 32768 [ 114.875483][ T6114] overlayfs: upper fs needs to support d_type. [ 114.897202][ T6114] overlayfs: upper fs does not support tmpfile. [ 114.923704][ T6114] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 114.952545][ T6114] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 114.952545][ T6114] [ 114.986716][ T6114] ERROR: (device loop3): remounting filesystem as read-only [ 115.014877][ T6114] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 115.720422][ T6118] loop1: detected capacity change from 0 to 32768 [ 115.740474][ T6118] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 115.825336][ T5890] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.651331][ T6129] loop3: detected capacity change from 0 to 32768 [ 116.726589][ T6129] overlayfs: upper fs needs to support d_type. [ 116.726658][ T6129] overlayfs: upper fs does not support tmpfile. [ 116.745161][ T6129] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 116.746470][ T6129] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 116.746470][ T6129] [ 116.746510][ T6129] ERROR: (device loop3): remounting filesystem as read-only [ 116.746530][ T6129] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 120.906553][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 121.450146][ T6156] loop2: detected capacity change from 0 to 32768 [ 121.476881][ T6156] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.520259][ T6156] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 121.558486][ T6156] BTRFS info (device loop2): metadata ratio 2 [ 121.579074][ T6156] BTRFS info (device loop2): turning on flush-on-commit [ 121.600622][ T6156] BTRFS info (device loop2): enabling auto defrag [ 121.621375][ T6156] BTRFS info (device loop2): max_inline at 4096 [ 121.647702][ T6156] BTRFS info (device loop2): using free space tree [ 121.785315][ T6159] loop3: detected capacity change from 0 to 32768 [ 121.803765][ T6159] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.84 (6159) [ 121.905929][ T6156] BTRFS info (device loop2): enabling ssd optimizations [ 121.946157][ T6156] BTRFS info (device loop2): auto enabling async discard [ 121.977996][ T6166] loop1: detected capacity change from 0 to 32768 [ 122.026355][ T6166] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.87 (6166) [ 122.120510][ T5771] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (5771) [ 122.252133][ T28] audit: type=1800 audit(1768773674.808:3): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.83" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 123.157937][ T5782] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5782) [ 123.367876][ T6164] loop0: detected capacity change from 0 to 32768 [ 123.469153][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.703045][ T6164] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 123.885070][ T5890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop2 scanned by udevd (5890) [ 123.927951][ T6164] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 124.036922][ T6164] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 124.049687][ T6164] OCFS2: File system is now read-only. [ 124.091044][ T6164] (syz.0.86,6164,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 124.196764][ T6164] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 124.259869][ T6164] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 124.317179][ T6164] (syz.0.86,6164,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 124.356857][ T6164] (syz.0.86,6164,0):ocfs2_mknod:502 ERROR: status = -30 [ 124.364485][ T6164] (syz.0.86,6164,0):ocfs2_create:676 ERROR: status = -30 [ 124.497728][ T6192] loop1: detected capacity change from 0 to 32768 [ 124.609358][ T6192] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 124.638394][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 124.656982][ T6192] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 124.812613][ T6192] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 124.886369][ T6192] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 124.929020][ T6192] OCFS2: File system is now read-only. [ 124.962475][ T6192] (syz.1.89,6192,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 125.002192][ T6192] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 125.056197][ T6192] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 125.087734][ T6192] (syz.1.89,6192,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 125.095671][ T6192] (syz.1.89,6192,1):ocfs2_mknod:502 ERROR: status = -30 [ 125.131458][ T6192] (syz.1.89,6192,1):ocfs2_create:676 ERROR: status = -30 [ 125.260051][ T6199] loop3: detected capacity change from 0 to 32768 [ 125.318720][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 125.362453][ T6199] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 125.397551][ T6199] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 125.469093][ T6204] loop2: detected capacity change from 0 to 32768 [ 125.633430][ T6204] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 125.779104][ T6204] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 125.816117][ T6204] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 125.837422][ T6204] OCFS2: File system is now read-only. [ 125.843033][ T6204] (syz.2.93,6204,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 125.882182][ T6204] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 125.916351][ T6204] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 125.960931][ T6204] (syz.2.93,6204,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 125.974609][ T6209] loop0: detected capacity change from 0 to 32768 [ 125.989991][ T6204] (syz.2.93,6204,0):ocfs2_mknod:502 ERROR: status = -30 [ 126.044381][ T6204] (syz.2.93,6204,0):ocfs2_create:676 ERROR: status = -30 [ 126.145332][ T6209] overlayfs: missing 'workdir' [ 126.265831][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 129.948479][ T6270] loop0: detected capacity change from 0 to 512 [ 129.995470][ T6270] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 130.019850][ T6270] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.308414][ T6270] EXT4-fs (loop0): 1 truncate cleaned up [ 130.480810][ T6270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.482478][ T23] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 131.729619][ T23] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 131.761067][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 131.836846][ T23] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 131.866269][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.897404][ T23] usb 3-1: Product: syz [ 131.917229][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.932393][ T23] usb 3-1: Manufacturer: syz [ 131.949187][ T23] usb 3-1: SerialNumber: syz [ 131.999340][ T23] usb 3-1: config 0 descriptor?? [ 132.036901][ T6292] netlink: 'syz.0.126': attribute type 3 has an invalid length. [ 132.044677][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 132.049688][ T23] hub 3-1:0.0: bad descriptor, ignoring hub [ 132.080026][ T23] hub: probe of 3-1:0.0 failed with error -5 [ 132.132160][ T23] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 132.215626][ T23] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 132.244171][ T23] usbtouchscreen: probe of 3-1:0.0 failed with error -90 [ 132.446554][ T23] usb 3-1: USB disconnect, device number 4 [ 132.664462][ T6304] Zero length message leads to an empty skb [ 132.783117][ T6308] loop3: detected capacity change from 0 to 512 [ 132.823149][ T6308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 132.898949][ T6308] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.134: Unimplemented hash flags: 0x0001 [ 132.970933][ T6308] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.134: Corrupt directory, running e2fsck is recommended [ 133.057268][ T6308] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.134: path /33/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 133.297740][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.387078][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.395060][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.979159][ T6318] loop0: detected capacity change from 0 to 32768 [ 134.004952][ T6316] loop1: detected capacity change from 0 to 32768 [ 134.100747][ T6327] loop2: detected capacity change from 0 to 2048 [ 134.118142][ T6318] overlayfs: upper fs needs to support d_type. [ 134.124956][ T6318] overlayfs: upper fs does not support tmpfile. [ 134.172973][ T6316] overlayfs: upper fs needs to support d_type. [ 134.177948][ T6327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.194471][ T6318] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 134.212544][ T6316] overlayfs: upper fs does not support tmpfile. [ 134.233564][ T6318] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 134.233564][ T6318] [ 134.249457][ T6316] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 134.269967][ T6316] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 134.269967][ T6316] [ 134.312100][ T6316] ERROR: (device loop1): remounting filesystem as read-only [ 134.316249][ T6318] ERROR: (device loop0): remounting filesystem as read-only [ 134.364364][ T6318] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 134.375461][ T6316] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 134.536294][ T6321] loop3: detected capacity change from 0 to 32768 [ 134.560941][ T6321] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 134.780456][ T5771] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 135.015526][ T6332] loop3: detected capacity change from 0 to 2048 [ 135.098741][ T6332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.507832][ T6340] loop0: detected capacity change from 0 to 512 [ 136.108739][ T6340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.165382][ T6337] loop2: detected capacity change from 0 to 8192 [ 136.268274][ T6337] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.288384][ T6340] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.144: Unimplemented hash flags: 0x0001 [ 136.360644][ T6337] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 136.590214][ T6340] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.144: Corrupt directory, running e2fsck is recommended [ 136.821595][ T6337] REISERFS (device loop2): using journaled data mode [ 137.000260][ T6337] reiserfs: using flush barriers [ 137.160102][ T6340] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.144: path /32/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 137.236028][ C0] sched: RT throttling activated [ 137.292885][ T6337] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.330026][ T6337] REISERFS (device loop2): checking transaction log (loop2) [ 137.393599][ T6337] REISERFS (device loop2): Using r5 hash to sort names [ 137.418202][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.471824][ T6337] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 137.510974][ T6337] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 137.646235][ T27] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 137.806549][ T27] usb 2-1: device descriptor read/64, error -71 [ 138.296724][ T27] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 138.646512][ T27] usb 2-1: device descriptor read/64, error -71 [ 138.897506][ T27] usb usb2-port1: attempt power cycle [ 138.954228][ T6368] loop2: detected capacity change from 0 to 512 [ 138.975547][ T6368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 139.064707][ T6368] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.155: Unimplemented hash flags: 0x0001 [ 139.077268][ T6368] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.155: Corrupt directory, running e2fsck is recommended [ 139.091392][ T6368] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.155: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 139.263384][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.316280][ T27] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 139.366832][ T27] usb 2-1: device descriptor read/8, error -71 [ 139.679193][ T27] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 139.834627][ T27] usb 2-1: device descriptor read/8, error -71 [ 140.157541][ T27] usb usb2-port1: unable to enumerate USB device [ 140.173463][ T6387] loop2: detected capacity change from 0 to 512 [ 140.258572][ T6387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 140.442652][ T6387] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.164: Unimplemented hash flags: 0x0001 [ 140.521279][ T6387] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.164: Corrupt directory, running e2fsck is recommended [ 140.563044][ T6387] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.164: path /37/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 141.165466][ T6393] loop3: detected capacity change from 0 to 2048 [ 141.331381][ T6393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.423172][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.786994][ T6401] Sensor B: ================= START STATUS ================= [ 141.801413][ T6401] Sensor B: Test Pattern: 75% Colorbar [ 141.831467][ T6401] Sensor B: Show Information: All [ 141.843344][ T6401] Sensor B: Vertical Flip: false [ 141.853448][ T6401] Sensor B: Horizontal Flip: false [ 141.867519][ T6401] Sensor B: Brightness: 128 [ 141.891810][ T6401] Sensor B: Contrast: 128 [ 141.908775][ T6401] Sensor B: Hue: 0 [ 141.927090][ T6401] Sensor B: Saturation: 128 [ 141.942225][ T6401] Sensor B: ================== END STATUS ================== [ 142.292831][ T6399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.385607][ T6403] loop1: detected capacity change from 0 to 8192 [ 142.423111][ T6403] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 142.456117][ T6403] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 142.467982][ T6403] REISERFS (device loop1): using journaled data mode [ 142.484697][ T6403] reiserfs: using flush barriers [ 142.511333][ T6403] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.530323][ T6403] REISERFS (device loop1): checking transaction log (loop1) [ 142.552248][ T6403] REISERFS (device loop1): Using r5 hash to sort names [ 142.566521][ T6403] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 142.596151][ T6403] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 142.693174][ T6412] netlink: 52 bytes leftover after parsing attributes in process `syz.3.173'. [ 142.766950][ T6410] loop2: detected capacity change from 0 to 8192 [ 142.802364][ T6410] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 142.859058][ T6410] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 142.869789][ T6410] REISERFS (device loop2): using journaled data mode [ 142.876625][ T6410] reiserfs: using flush barriers [ 142.894442][ T6410] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.931551][ T6410] REISERFS (device loop2): checking transaction log (loop2) [ 142.948473][ T6410] REISERFS (device loop2): Using r5 hash to sort names [ 142.989617][ T6410] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 143.015361][ T6410] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 144.039566][ T6424] loop1: detected capacity change from 0 to 2048 [ 144.075870][ T6424] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.326610][ T6428] loop0: detected capacity change from 0 to 2048 [ 144.344542][ T6427] loop3: detected capacity change from 0 to 2048 [ 144.363390][ T6428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.426374][ T6427] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.796163][ T6442] Sensor B: ================= START STATUS ================= [ 145.803935][ T6442] Sensor B: Test Pattern: 75% Colorbar [ 145.810001][ T6442] Sensor B: Show Information: All [ 145.815293][ T6442] Sensor B: Vertical Flip: false [ 145.845210][ T6438] loop0: detected capacity change from 0 to 8192 [ 146.008285][ T6442] Sensor B: Horizontal Flip: false [ 146.040373][ T6442] Sensor B: Brightness: 128 [ 146.045421][ T6442] Sensor B: Contrast: 128 [ 146.047422][ T6438] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.053373][ T6438] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 146.089030][ T6438] REISERFS (device loop0): using journaled data mode [ 146.096156][ T6438] reiserfs: using flush barriers [ 146.112865][ T6438] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.139036][ T6438] REISERFS (device loop0): checking transaction log (loop0) [ 146.151378][ T6442] [ 146.158455][ T6442] Sensor B: Hue: 0 [ 146.188357][ T6438] REISERFS (device loop0): Using r5 hash to sort names [ 146.203532][ T6442] Sensor B: Saturation: 128 [ 146.212250][ T6442] Sensor B: ================== END STATUS ================== [ 146.232663][ T6438] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 146.265703][ T6439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.288771][ T6449] Bluetooth: MGMT ver 1.22 [ 146.318168][ T6438] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 147.044324][ T6456] loop3: detected capacity change from 0 to 512 [ 147.084130][ T6456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 147.147521][ T6456] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.190: Unimplemented hash flags: 0x0001 [ 147.147604][ T6456] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.190: Corrupt directory, running e2fsck is recommended [ 147.191512][ T6456] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.190: path /49/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 147.239866][ T6459] loop0: detected capacity change from 0 to 2048 [ 147.295561][ T6459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.532290][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.725095][ T6463] loop1: detected capacity change from 0 to 512 [ 147.793953][ T6463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 147.798888][ T6465] loop3: detected capacity change from 0 to 2048 [ 147.843928][ T6463] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.194: Unimplemented hash flags: 0x0001 [ 147.856298][ T6463] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.194: Corrupt directory, running e2fsck is recommended [ 147.870615][ T6463] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.194: path /52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 147.945197][ T6465] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.011295][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.074352][ T6470] loop0: detected capacity change from 0 to 512 [ 148.168193][ T6470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 148.191846][ T6470] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.196: Unimplemented hash flags: 0x0001 [ 148.204940][ T6470] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.196: Corrupt directory, running e2fsck is recommended [ 148.226105][ T6470] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.196: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 148.530414][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.746971][ T6479] Sensor B: ================= START STATUS ================= [ 148.754593][ T6479] Sensor B: Test Pattern: 75% Colorbar [ 148.760398][ T6479] Sensor B: Show Information: All [ 148.765511][ T6479] Sensor B: Vertical Flip: false [ 148.771225][ T6479] Sensor B: Horizontal Flip: false [ 148.776600][ T6479] Sensor B: Brightness: 128 [ 148.781239][ T6479] Sensor B: Contrast: 128 [ 148.785776][ T6479] Sensor B: Hue: 0 [ 148.789759][ T6479] Sensor B: Saturation: 128 [ 148.794840][ T6479] Sensor B: ================== END STATUS ================== [ 148.840011][ T6478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.865018][ T6477] loop3: detected capacity change from 0 to 8192 [ 148.926114][ T6477] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 148.956286][ T6477] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 148.980144][ T6477] REISERFS (device loop3): using journaled data mode [ 148.996177][ T6477] reiserfs: using flush barriers [ 149.092215][ T6484] loop1: detected capacity change from 0 to 2048 [ 149.094771][ T6477] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.147006][ T6484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.189367][ T6477] REISERFS (device loop3): checking transaction log (loop3) [ 149.244203][ T6477] REISERFS (device loop3): Using r5 hash to sort names [ 149.275161][ T6477] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 149.343148][ T6477] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 149.463109][ T6489] loop0: detected capacity change from 0 to 512 [ 149.554067][ T6489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 149.622184][ T6492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.205'. [ 149.690707][ T6489] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.203: Unimplemented hash flags: 0x0001 [ 149.740789][ T6489] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.203: Corrupt directory, running e2fsck is recommended [ 149.776271][ T6489] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.203: path /51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 150.191010][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.201755][ T6497] loop2: detected capacity change from 0 to 8192 [ 150.221909][ T6497] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.307819][ T6497] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 150.410216][ T6497] REISERFS (device loop2): using journaled data mode [ 150.470230][ T6497] reiserfs: using flush barriers [ 150.504679][ T6497] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.592851][ T6497] REISERFS (device loop2): checking transaction log (loop2) [ 150.634624][ T6497] REISERFS (device loop2): Using r5 hash to sort names [ 150.677018][ T6503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 150.741360][ T6497] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 150.851416][ T6503] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.208: Unimplemented hash flags: 0x0001 [ 150.869915][ T6497] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 151.033267][ T6503] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.208: Corrupt directory, running e2fsck is recommended [ 151.067369][ T6503] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.208: path /52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 155.585867][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.933659][ T6521] set_capacity_and_notify: 1 callbacks suppressed [ 155.933672][ T6521] loop2: detected capacity change from 0 to 512 [ 155.984143][ T6521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 156.052863][ T6521] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.212: Unimplemented hash flags: 0x0001 [ 156.143393][ T6521] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.212: Corrupt directory, running e2fsck is recommended [ 156.191196][ T6529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.216'. [ 156.195139][ T6521] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.212: path /46/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 156.465967][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.636917][ T6537] loop3: detected capacity change from 0 to 512 [ 156.672899][ T6537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 156.715666][ T6537] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.221: Unimplemented hash flags: 0x0001 [ 156.731515][ T6542] loop0: detected capacity change from 0 to 512 [ 156.803207][ T6542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 156.811613][ T6537] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.221: Corrupt directory, running e2fsck is recommended [ 156.838918][ T6537] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.221: path /56/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 156.990719][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.992437][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.079032][ T6539] loop2: detected capacity change from 0 to 8192 [ 157.093524][ T6539] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 157.093553][ T6539] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 157.094357][ T6539] REISERFS (device loop2): using journaled data mode [ 157.094373][ T6539] reiserfs: using flush barriers [ 157.116289][ T6539] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.116886][ T6539] REISERFS (device loop2): checking transaction log (loop2) [ 157.120098][ T6539] REISERFS (device loop2): Using r5 hash to sort names [ 157.120513][ T6539] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 157.120572][ T6539] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 157.144220][ T6547] loop0: detected capacity change from 0 to 2048 [ 157.243162][ T6547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.704378][ T6556] loop0: detected capacity change from 0 to 512 [ 157.779697][ T6556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 158.093664][ T6552] loop3: detected capacity change from 0 to 8192 [ 158.114936][ T6556] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.226: Unimplemented hash flags: 0x0001 [ 158.145617][ T6556] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.226: Corrupt directory, running e2fsck is recommended [ 158.169869][ T6552] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 158.184687][ T6556] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.226: path /59/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 158.303859][ T6552] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 158.357047][ T6552] REISERFS (device loop3): using journaled data mode [ 158.382976][ T6552] reiserfs: using flush barriers [ 158.394990][ T6561] loop1: detected capacity change from 0 to 512 [ 158.416971][ T6552] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.486876][ T6561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 158.516756][ T6552] REISERFS (device loop3): checking transaction log (loop3) [ 158.630211][ T6552] REISERFS (device loop3): Using r5 hash to sort names [ 158.665609][ T6561] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.227: Unimplemented hash flags: 0x0001 [ 158.695355][ T6561] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.227: Corrupt directory, running e2fsck is recommended [ 158.709464][ T6552] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 158.721372][ T6561] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.227: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 158.752261][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.806284][ T6552] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 159.223829][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.276543][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 159.297491][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.229'. [ 159.313047][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 159.329338][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.229'. [ 159.598921][ T6573] loop0: detected capacity change from 0 to 256 [ 160.871681][ T6580] loop3: detected capacity change from 0 to 2048 [ 160.899867][ T6580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.571006][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 161.846949][ T6585] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.856846][ T6585] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.866305][ T6585] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.875112][ T6585] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.021139][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 162.123840][ T6573] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 162.158248][ T6590] loop3: detected capacity change from 0 to 256 [ 162.194467][ T6573] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 162.631286][ T6596] loop0: detected capacity change from 0 to 256 [ 163.473237][ T6594] loop1: detected capacity change from 0 to 131072 [ 163.531983][ T6594] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 163.539404][ T6594] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 163.559839][ T6594] F2FS-fs (loop1): invalid crc value [ 163.617448][ T6594] F2FS-fs (loop1): Found nat_bits in checkpoint [ 163.691341][ T6594] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 163.699163][ T6594] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 163.762535][ T6594] F2FS-fs (loop1): Unrecognized mount option "./bus" or missing value [ 164.121273][ T6590] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 164.165511][ T6590] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 164.235722][ T6596] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 164.261708][ T6596] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 164.503224][ T6615] loop3: detected capacity change from 0 to 256 [ 166.015879][ T6615] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 166.051950][ T6615] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 166.084040][ T6632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.254'. [ 166.118484][ T6632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.254'. [ 166.861069][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 166.878700][ T6646] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.888176][ T6646] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.897100][ T6646] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.906128][ T6646] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.918098][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 168.359430][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 168.372932][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 168.929471][ T6672] loop0: detected capacity change from 0 to 256 [ 169.094524][ T6678] netlink: 'syz.1.273': attribute type 3 has an invalid length. [ 169.104236][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 169.264397][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 169.321295][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 169.333870][ T6684] loop1: detected capacity change from 0 to 2048 [ 169.442333][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 169.460689][ T6684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.570376][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 169.633053][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 171.019704][ T6714] loop2: detected capacity change from 0 to 2048 [ 171.046213][ T6714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.029328][ T6739] loop2: detected capacity change from 0 to 2048 [ 173.033955][ T6735] Sensor B: ================= START STATUS ================= [ 173.033970][ T6735] Sensor B: Test Pattern: 75% Colorbar [ 173.033990][ T6735] Sensor B: Show Information: All [ 173.034005][ T6735] Sensor B: Vertical Flip: false [ 173.034020][ T6735] Sensor B: Horizontal Flip: false [ 173.034035][ T6735] Sensor B: Brightness: 128 [ 173.034052][ T6735] Sensor B: Contrast: 128 [ 173.034067][ T6735] Sensor B: Hue: 0 [ 173.034081][ T6735] Sensor B: Saturation: 128 [ 173.034100][ T6735] Sensor B: ================== END STATUS ================== [ 173.051898][ T6732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.062150][ T6739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.414280][ T6745] loop2: detected capacity change from 0 to 2048 [ 173.444323][ T6745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.881964][ T6756] Bluetooth: MGMT ver 1.22 [ 174.529788][ T6762] loop0: detected capacity change from 0 to 40427 [ 174.537893][ T6762] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 174.568170][ T6762] F2FS-fs (loop0): invalid crc value [ 174.580597][ T6762] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.637973][ T6762] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 175.121408][ T6773] loop3: detected capacity change from 0 to 2048 [ 175.147251][ T6773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.162609][ T6794] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 176.572695][ T6803] __nla_validate_parse: 3 callbacks suppressed [ 176.572713][ T6803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.326'. [ 179.966135][ T5872] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 180.167120][ T5872] usb 3-1: no configurations [ 180.172011][ T5872] usb 3-1: can't read configurations, error -22 [ 180.346148][ T5872] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 180.546997][ T5872] usb 3-1: no configurations [ 180.551695][ T5872] usb 3-1: can't read configurations, error -22 [ 180.590754][ T5872] usb usb3-port1: attempt power cycle [ 181.866348][ T5872] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 182.119609][ T5872] usb 3-1: no configurations [ 182.134570][ T5872] usb 3-1: can't read configurations, error -22 [ 183.009984][ T5872] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 183.077081][ T5872] usb 3-1: device descriptor read/8, error -71 [ 183.281163][ T5872] usb usb3-port1: unable to enumerate USB device [ 184.243368][ T6927] overlayfs: missing 'lowerdir' [ 186.472021][ T6933] loop1: detected capacity change from 0 to 40427 [ 186.474666][ T6933] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 186.476362][ T5817] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 186.861672][ T6933] F2FS-fs (loop1): invalid crc value [ 187.280002][ T6933] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.370893][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.434159][ T5817] usb 3-1: config 0 has no interfaces? [ 187.454186][ T5817] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 187.496241][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.557775][ T5817] usb 3-1: config 0 descriptor?? [ 188.519885][ T2132] usb 3-1: USB disconnect, device number 9 [ 188.546126][ T6933] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 190.651091][ T6986] loop2: detected capacity change from 0 to 40427 [ 190.686359][ T6986] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 190.736591][ T6986] F2FS-fs (loop2): invalid crc value [ 190.781158][ T6986] F2FS-fs (loop2): Found nat_bits in checkpoint [ 190.991340][ T6986] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 194.572121][ T7056] syz.3.429: attempt to access beyond end of device [ 194.572121][ T7056] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 194.606556][ T7056] syz.3.429: attempt to access beyond end of device [ 194.606556][ T7056] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 194.656320][ T7056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 194.685369][ T7060] [ 194.687967][ T7060] ====================================================== [ 194.695207][ T7060] WARNING: possible circular locking dependency detected [ 194.702551][ T7060] syzkaller #0 Not tainted [ 194.707422][ T7060] ------------------------------------------------------ [ 194.714356][ T7056] syz.3.429: attempt to access beyond end of device [ 194.714356][ T7056] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 194.714824][ T7060] syz.3.429/7060 is trying to acquire lock: [ 194.714837][ T7060] ffff88802f5640e0 (&type->s_umount_key#62){++++}-{3:3}, at: super_lock+0x17f/0x3a0 [ 194.744619][ T7060] [ 194.744619][ T7060] but task is already holding lock: [ 194.752006][ T7060] ffff888148e19808 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 194.761879][ T7060] [ 194.761879][ T7060] which lock already depends on the new lock. [ 194.761879][ T7060] [ 194.772415][ T7060] [ 194.772415][ T7060] the existing dependency chain (in reverse order) is: [ 194.782201][ T7060] [ 194.782201][ T7060] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 194.790661][ T7060] __mutex_lock+0x136/0xcc0 [ 194.795910][ T7060] bd_finish_claiming+0x22f/0x3f0 [ 194.801684][ T7060] blkdev_get_by_dev+0x45c/0x600 [ 194.808615][ T7060] bdev_open_by_dev+0x77/0x100 [ 194.810743][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.813961][ T7060] setup_bdev_super+0x59/0x660 [ 194.820966][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.825798][ T7060] mount_bdev+0x1d3/0x2d0 [ 194.825827][ T7060] legacy_get_tree+0xea/0x180 [ 194.843286][ T7060] vfs_get_tree+0x8c/0x280 [ 194.850484][ T7060] do_new_mount+0x24b/0xa40 [ 194.855916][ T7060] init_mount+0xde/0x130 [ 194.860820][ T7060] do_mount_root+0x97/0x230 [ 194.866345][ T7060] mount_root_generic+0x1a6/0x3e0 [ 194.872399][ T7060] prepare_namespace+0xc2/0x100 [ 194.877924][ T7060] kernel_init_freeable+0x42e/0x580 [ 194.883699][ T7060] kernel_init+0x1d/0x1c0 [ 194.888628][ T7060] ret_from_fork+0x48/0x80 [ 194.889787][ T7056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 194.893654][ T7060] ret_from_fork_asm+0x11/0x20 [ 194.893689][ T7060] [ 194.893689][ T7060] -> #3 (bdev_lock){+.+.}-{3:3}: [ 194.893721][ T7060] __mutex_lock+0x136/0xcc0 [ 194.921561][ T7060] bd_prepare_to_claim+0x1c0/0x490 [ 194.927598][ T7060] truncate_bdev_range+0x4e/0x260 [ 194.933490][ T7060] blkdev_fallocate+0x428/0x6a0 [ 194.939592][ T7060] vfs_fallocate+0x58e/0x700 [ 194.945114][ T7060] do_madvise+0x166b/0x3750 [ 194.950236][ T7060] __x64_sys_madvise+0xa6/0xc0 [ 194.955696][ T7060] do_syscall_64+0x55/0xa0 [ 194.960886][ T7060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.967790][ T7060] [ 194.967790][ T7060] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 194.977475][ T7060] down_write+0x97/0x200 [ 194.982708][ T7060] set_blocksize+0x247/0x4b0 [ 194.988096][ T7060] sb_min_blocksize+0xbe/0x190 [ 194.993779][ T7060] ext4_fill_super+0x6f0/0x6790 [ 194.999595][ T7060] get_tree_bdev+0x3f3/0x520 [ 195.004855][ T7060] vfs_get_tree+0x8c/0x280 [ 195.010205][ T7060] do_new_mount+0x24b/0xa40 [ 195.015423][ T7060] init_mount+0xde/0x130 [ 195.020372][ T7060] do_mount_root+0x97/0x230 [ 195.025657][ T7060] mount_root_generic+0x1a6/0x3e0 [ 195.031488][ T7060] prepare_namespace+0xc2/0x100 [ 195.037081][ T7060] kernel_init_freeable+0x42e/0x580 [ 195.042830][ T7060] kernel_init+0x1d/0x1c0 [ 195.047893][ T7060] ret_from_fork+0x48/0x80 [ 195.053076][ T7060] ret_from_fork_asm+0x11/0x20 [ 195.058424][ T7060] [ 195.058424][ T7060] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 195.067520][ T7060] down_write+0x97/0x200 [ 195.072414][ T7060] set_blocksize+0x1ff/0x4b0 [ 195.077574][ T7060] sb_set_blocksize+0x4a/0x100 [ 195.082976][ T7060] udf_load_vrs+0xe3/0xf20 [ 195.088597][ T7060] udf_fill_super+0x69b/0x1790 [ 195.094200][ T7060] mount_bdev+0x221/0x2d0 [ 195.099156][ T7060] legacy_get_tree+0xea/0x180 [ 195.105019][ T7060] vfs_get_tree+0x8c/0x280 [ 195.110191][ T7060] do_new_mount+0x24b/0xa40 [ 195.115641][ T7060] __se_sys_mount+0x2e7/0x3d0 [ 195.120886][ T7060] do_syscall_64+0x55/0xa0 [ 195.126271][ T7060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.132740][ T7060] [ 195.132740][ T7060] -> #0 (&type->s_umount_key#62){++++}-{3:3}: [ 195.141276][ T7060] __lock_acquire+0x2df1/0x7d40 [ 195.146683][ T7060] lock_acquire+0x19e/0x420 [ 195.151744][ T7060] down_read+0x46/0x2e0 [ 195.156544][ T7060] super_lock+0x17f/0x3a0 [ 195.161413][ T7060] fs_bdev_mark_dead+0xad/0x1f0 [ 195.167021][ T7060] bdev_mark_dead+0x83/0x1a0 [ 195.172269][ T7060] disk_force_media_change+0x14e/0x1d0 [ 195.178678][ T7060] nbd_ioctl+0x433/0xf10 [ 195.183910][ T7060] blkdev_ioctl+0x5b2/0x730 [ 195.189039][ T7060] __se_sys_ioctl+0xfd/0x170 [ 195.194554][ T7060] do_syscall_64+0x55/0xa0 [ 195.199524][ T7060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.206172][ T7060] [ 195.206172][ T7060] other info that might help us debug this: [ 195.206172][ T7060] [ 195.218386][ T7060] Chain exists of: [ 195.218386][ T7060] &type->s_umount_key#62 --> bdev_lock --> &bdev->bd_holder_lock [ 195.218386][ T7060] [ 195.233132][ T7060] Possible unsafe locking scenario: [ 195.233132][ T7060] [ 195.240962][ T7060] CPU0 CPU1 [ 195.246729][ T7060] ---- ---- [ 195.252381][ T7060] lock(&bdev->bd_holder_lock); [ 195.257574][ T7060] lock(bdev_lock); [ 195.264043][ T7060] lock(&bdev->bd_holder_lock); [ 195.271784][ T7060] rlock(&type->s_umount_key#62); [ 195.277054][ T7060] [ 195.277054][ T7060] *** DEADLOCK *** [ 195.277054][ T7060] [ 195.285242][ T7060] 2 locks held by syz.3.429/7060: [ 195.290296][ T7060] #0: ffff888022045998 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x134/0xf10 [ 195.300269][ T7060] #1: ffff888148e19808 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 195.311813][ T7060] [ 195.311813][ T7060] stack backtrace: [ 195.318294][ T7060] CPU: 0 PID: 7060 Comm: syz.3.429 Not tainted syzkaller #0 [ 195.326079][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.336380][ T7060] Call Trace: [ 195.339875][ T7060] [ 195.342922][ T7060] dump_stack_lvl+0x18c/0x250 [ 195.348253][ T7060] ? load_image+0x400/0x400 [ 195.352970][ T7060] ? show_regs_print_info+0x20/0x20 [ 195.358397][ T7060] ? print_circular_bug+0x12b/0x1a0 [ 195.363927][ T7060] check_noncircular+0x2fc/0x400 [ 195.369460][ T7060] ? print_deadlock_bug+0x5d0/0x5d0 [ 195.375171][ T7060] ? lockdep_lock+0xf5/0x230 [ 195.380192][ T7060] ? _find_first_zero_bit+0xd3/0x100 [ 195.385842][ T7060] __lock_acquire+0x2df1/0x7d40 [ 195.390758][ T7060] ? __lock_acquire+0x1273/0x7d40 [ 195.395840][ T7060] ? verify_lock_unused+0x140/0x140 [ 195.401713][ T7060] ? verify_lock_unused+0x140/0x140 [ 195.407314][ T7060] lock_acquire+0x19e/0x420 [ 195.411960][ T7060] ? super_lock+0x17f/0x3a0 [ 195.416553][ T7060] ? __might_sleep+0xe0/0xe0 [ 195.421283][ T7060] ? __mutex_trylock_common+0x159/0x260 [ 195.427319][ T7060] ? read_lock_is_recursive+0x20/0x20 [ 195.433023][ T7060] ? trace_raw_output_contention_end+0xd0/0xd0 [ 195.439228][ T7060] down_read+0x46/0x2e0 [ 195.443471][ T7060] ? super_lock+0x17f/0x3a0 [ 195.448115][ T7060] super_lock+0x17f/0x3a0 [ 195.452511][ T7060] ? user_get_super+0x180/0x180 [ 195.457409][ T7060] ? mutex_lock_nested+0x20/0x20 [ 195.462380][ T7060] fs_bdev_mark_dead+0xad/0x1f0 [ 195.467259][ T7060] ? super_s_dev_set+0xa0/0xa0 [ 195.472048][ T7060] bdev_mark_dead+0x83/0x1a0 [ 195.477104][ T7060] disk_force_media_change+0x14e/0x1d0 [ 195.482698][ T7060] ? disk_check_media_change+0x310/0x310 [ 195.488378][ T7060] ? blk_mq_unquiesce_queue+0xbe/0x120 [ 195.494217][ T7060] nbd_ioctl+0x433/0xf10 [ 195.498589][ T7060] ? nbd_release+0x140/0x140 [ 195.503280][ T7060] ? nbd_release+0x140/0x140 [ 195.507920][ T7060] blkdev_ioctl+0x5b2/0x730 [ 195.512470][ T7060] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 195.518076][ T7060] ? bpf_lsm_file_ioctl+0x9/0x10 [ 195.523184][ T7060] ? security_file_ioctl+0x80/0xa0 [ 195.528455][ T7060] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 195.534049][ T7060] __se_sys_ioctl+0xfd/0x170 [ 195.538669][ T7060] do_syscall_64+0x55/0xa0 [ 195.543204][ T7060] ? clear_bhb_loop+0x40/0x90 [ 195.547919][ T7060] ? clear_bhb_loop+0x40/0x90 [ 195.552683][ T7060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.558698][ T7060] RIP: 0033:0x7fc8e839acb9 [ 195.563249][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.582994][ T7060] RSP: 002b:00007fc8e9176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.591525][ T7060] RAX: ffffffffffffffda RBX: 00007fc8e8616090 RCX: 00007fc8e839acb9 [ 195.599535][ T7060] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000004 [ 195.607532][ T7060] RBP: 00007fc8e8408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 195.615527][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.623524][ T7060] R13: 00007fc8e8616128 R14: 00007fc8e8616090 R15: 00007ffffc29f458 [ 195.631708][ T7060] [ 195.730009][ T7056] syz.3.429: attempt to access beyond end of device [ 195.730009][ T7056] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 195.743141][ T7056] syz.3.429: attempt to access beyond end of device [ 195.743141][ T7056] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 195.758418][ T7056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 195.772687][ T7056] syz.3.429: attempt to access beyond end of device [ 195.772687][ T7056] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 195.786517][ T7056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 195.807296][ T7056] syz.3.429: attempt to access beyond end of device [ 195.807296][ T7056] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 195.838973][ T7056] syz.3.429: attempt to access beyond end of device [ 195.838973][ T7056] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 195.878632][ T7056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 195.924461][ T7056] syz.3.429: attempt to access beyond end of device [ 195.924461][ T7056] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 196.005068][ T7056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 196.023690][ T7056] syz.3.429: attempt to access beyond end of device [ 196.023690][ T7056] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 196.038511][ T7056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 196.050239][ T7056] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 196.062394][ T7056] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)