last executing test programs: 24.650487142s ago: executing program 0 (id=530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x40) 24.529536723s ago: executing program 0 (id=531): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x103982, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730139000000000095"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) close(0x4) 23.315834375s ago: executing program 0 (id=532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001400b59500000000000800000a000000", @ANYRES32=r10, @ANYBLOB="14000200fe8000000000000000000000000000aa140006001400000001f0ffff000000000000000014000100"/57], 0x54}}, 0x0) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000340)=r11) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0xffdd) 19.226286813s ago: executing program 0 (id=540): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed2901020301090212"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 15.747550394s ago: executing program 0 (id=549): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x4004}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) 15.511363776s ago: executing program 0 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) prlimit64(0x0, 0x2, 0x0, 0x0) brk(0x5d555ede6000) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) 3.150786799s ago: executing program 2 (id=597): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480), 0x0, 0x40002003, 0x0) 3.014066572s ago: executing program 2 (id=600): r0 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x3fd) pread64(r4, &(0x7f0000001440)=""/126, 0x7e, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffdbc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.681067473s ago: executing program 2 (id=604): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) lseek(0xffffffffffffffff, 0x3ff, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 1.679257325s ago: executing program 1 (id=614): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f00000000c0)={[0x9]}, 0x8) 1.235634276s ago: executing program 4 (id=618): r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000780)={0x0, 0xe, 0x0, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x30323953}) 1.213569808s ago: executing program 4 (id=619): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, 0x0, 0x0, 0x4c, 0x0) 1.138122675s ago: executing program 4 (id=620): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r1, &(0x7f0000001a40)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d00000001090224000100000000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x8) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 767.52283ms ago: executing program 1 (id=624): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0xfbfd, 0x401d, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 748.059421ms ago: executing program 3 (id=625): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20000014) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 662.641669ms ago: executing program 1 (id=626): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000001c0)=0x80fe, 0x4) 563.636138ms ago: executing program 1 (id=627): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x10000004}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 563.446968ms ago: executing program 2 (id=628): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x28000600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) 537.06204ms ago: executing program 4 (id=629): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private0}, 0x1c, 0x0}}], 0x1, 0x0) 505.634653ms ago: executing program 3 (id=630): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r0, 0xb, 0x0, @void}, 0x10) 455.662668ms ago: executing program 1 (id=631): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x1000000, 0xffff8881a56043d8}}}) 455.457958ms ago: executing program 2 (id=632): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x103982, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000280)) read(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730139000000000095"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) close(0x4) 455.339908ms ago: executing program 4 (id=633): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x5428, &(0x7f00000000c0)={0x0, 0xaae2, 0x2, 0x2, 0x34d}) socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 426.699711ms ago: executing program 3 (id=634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000110001000000000000000000fc020000000000000000000000000000000000000000ff"], 0x28}}, 0x0) 368.786056ms ago: executing program 1 (id=635): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRES32, @ANYRES8, @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX, @ANYBLOB=',iocharset=cp869,errors=continue,\x00'], 0x1, 0x1538, &(0x7f0000003980)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) 307.606972ms ago: executing program 3 (id=636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0xfffffffc, 0x3, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0xc0) 257.337366ms ago: executing program 2 (id=637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}}, 0x0) 245.001567ms ago: executing program 4 (id=638): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000540)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@delqdisc={0x64, 0x25, 0x0, 0x0, 0x0, {}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}]}}]}, 0x64}}, 0x0) 147.565136ms ago: executing program 3 (id=639): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x1f, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0xa0e8, 0x2, 0x9, 0x6}}]}, 0x40}}, 0x4008000) 0s ago: executing program 3 (id=640): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}], 0x200000000000000f, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): =57376, limit=40427 [ 166.224802][ T4880] attempt to access beyond end of device [ 166.224802][ T4880] loop0: rw=524288, want=57384, limit=40427 [ 166.276897][ T4880] attempt to access beyond end of device [ 166.276897][ T4880] loop0: rw=524288, want=57392, limit=40427 [ 166.280047][ T4880] attempt to access beyond end of device [ 166.280047][ T4880] loop0: rw=524288, want=57400, limit=40427 [ 166.282886][ T4880] attempt to access beyond end of device [ 166.282886][ T4880] loop0: rw=524288, want=57408, limit=40427 [ 166.304763][ T4992] loop4: detected capacity change from 0 to 256 [ 166.312558][ T4880] attempt to access beyond end of device [ 166.312558][ T4880] loop0: rw=524288, want=57416, limit=40427 [ 166.315321][ T4880] attempt to access beyond end of device [ 166.315321][ T4880] loop0: rw=524288, want=57424, limit=40427 [ 166.411594][ T4996] loop1: detected capacity change from 0 to 256 [ 167.159272][ T4068] Bluetooth: hci1: command 0x041b tx timeout [ 167.196670][ T4992] exfat: Deprecated parameter 'utf8' [ 167.197975][ T4992] exfat: Deprecated parameter 'namecase' [ 167.199437][ T4992] exfat: Deprecated parameter 'utf8' [ 167.226240][ T4955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.227975][ T4955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.235709][ T4992] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 167.241277][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 167.289146][ T4955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.296677][ T4955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.316909][ T4955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.323416][ T4955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.456204][ T4999] loop1: detected capacity change from 0 to 2048 [ 168.500943][ T4999] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.223: bad orphan inode 8192 [ 168.504064][ T4999] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.747806][ T4955] device hsr_slave_0 entered promiscuous mode [ 168.807134][ T4955] device hsr_slave_1 entered promiscuous mode [ 169.583898][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 169.584923][ T25] Bluetooth: hci4: command 0x0406 tx timeout [ 169.584986][ T25] Bluetooth: hci2: command 0x0406 tx timeout [ 169.585038][ T25] Bluetooth: hci3: command 0x0406 tx timeout [ 169.937148][ T4955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.121250][ T4955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.221094][ T5023] loop1: detected capacity change from 0 to 764 [ 170.270684][ T4880] handle_bad_sector: 6913 callbacks suppressed [ 170.270701][ T4880] attempt to access beyond end of device [ 170.270701][ T4880] loop0: rw=0, want=57656, limit=40427 [ 170.274852][ T4880] attempt to access beyond end of device [ 170.274852][ T4880] loop0: rw=0, want=57664, limit=40427 [ 170.278702][ T4880] attempt to access beyond end of device [ 170.278702][ T4880] loop0: rw=0, want=57672, limit=40427 [ 170.281398][ T4880] attempt to access beyond end of device [ 170.281398][ T4880] loop0: rw=0, want=57680, limit=40427 [ 170.284178][ T4880] attempt to access beyond end of device [ 170.284178][ T4880] loop0: rw=0, want=57688, limit=40427 [ 170.295938][ T4880] attempt to access beyond end of device [ 170.295938][ T4880] loop0: rw=0, want=57696, limit=40427 [ 170.298700][ T4880] attempt to access beyond end of device [ 170.298700][ T4880] loop0: rw=0, want=57704, limit=40427 [ 170.302307][ T4880] attempt to access beyond end of device [ 170.302307][ T4880] loop0: rw=0, want=57712, limit=40427 [ 170.305212][ T4880] attempt to access beyond end of device [ 170.305212][ T4880] loop0: rw=0, want=57720, limit=40427 [ 170.308310][ T4880] attempt to access beyond end of device [ 170.308310][ T4880] loop0: rw=0, want=57728, limit=40427 [ 170.308875][ T4955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.339995][ T5016] chnl_net:caif_netlink_parms(): no params data found [ 170.434564][ T4955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.428562][ T5014] loop4: detected capacity change from 0 to 40427 [ 171.483755][ T5014] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 171.485798][ T5014] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 171.546642][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.556512][ T5016] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.559193][ T5016] device bridge_slave_0 entered promiscuous mode [ 171.597065][ T5016] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.663190][ T5016] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.666477][ T5016] device bridge_slave_1 entered promiscuous mode [ 171.706062][ T5014] F2FS-fs (loop4): Found nat_bits in checkpoint [ 171.746169][ T4068] Bluetooth: hci1: command 0x0419 tx timeout [ 171.755627][ T5016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.761597][ T5016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.081902][ T4034] Bluetooth: hci6: command 0x0409 tx timeout [ 172.675246][ T5042] netlink: 512 bytes leftover after parsing attributes in process `syz.2.230'. [ 172.699088][ T5016] team0: Port device team_slave_0 added [ 172.712728][ T5016] team0: Port device team_slave_1 added [ 172.765928][ T4955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.808676][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.810646][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.833276][ T5045] loop2: detected capacity change from 0 to 512 [ 172.968817][ T5016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.974278][ T4955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.019739][ T4955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.937702][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.939582][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.956552][ T5016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.976003][ T4955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.138344][ T5045] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.232: inode #1: comm syz.2.232: iget: illegal inode # [ 174.157368][ T5045] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.232: error while reading EA inode 1 err=-117 [ 174.167289][ T5045] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.232: inode #1: comm syz.2.232: iget: illegal inode # [ 174.176359][ T5045] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.232: error while reading EA inode 1 err=-117 [ 174.181906][ T5045] EXT4-fs (loop2): 1 orphan inode deleted [ 174.183387][ T5045] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 174.190104][ T4068] Bluetooth: hci6: command 0x041b tx timeout [ 174.208025][ T5016] device hsr_slave_0 entered promiscuous mode [ 175.031026][ T5016] device hsr_slave_1 entered promiscuous mode [ 175.156262][ T5016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.158417][ T5016] Cannot create hsr debugfs directory [ 175.179944][ T5058] loop4: detected capacity change from 0 to 2048 [ 175.243319][ T5058] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.235: bad orphan inode 8192 [ 175.247857][ T5058] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.410069][ T4880] handle_bad_sector: 18702 callbacks suppressed [ 175.411159][ T4880] attempt to access beyond end of device [ 175.411159][ T4880] loop0: rw=524288, want=58432, limit=40427 [ 175.467076][ T4880] attempt to access beyond end of device [ 175.467076][ T4880] loop0: rw=524288, want=58440, limit=40427 [ 175.511654][ T4880] attempt to access beyond end of device [ 175.511654][ T4880] loop0: rw=524288, want=58448, limit=40427 [ 175.614564][ T4880] attempt to access beyond end of device [ 175.614564][ T4880] loop0: rw=524288, want=58456, limit=40427 [ 175.750240][ T4880] attempt to access beyond end of device [ 175.750240][ T4880] loop0: rw=524288, want=58464, limit=40427 [ 175.958110][ T4880] attempt to access beyond end of device [ 175.958110][ T4880] loop0: rw=524288, want=58472, limit=40427 [ 176.005185][ T4880] attempt to access beyond end of device [ 176.005185][ T4880] loop0: rw=524288, want=58480, limit=40427 [ 176.015196][ T4880] attempt to access beyond end of device [ 176.015196][ T4880] loop0: rw=524288, want=58488, limit=40427 [ 176.034641][ T4880] attempt to access beyond end of device [ 176.034641][ T4880] loop0: rw=524288, want=58496, limit=40427 [ 176.064705][ T4880] attempt to access beyond end of device [ 176.064705][ T4880] loop0: rw=524288, want=58504, limit=40427 [ 176.217622][ T5066] udc-core: couldn't find an available UDC or it's busy [ 176.219549][ T5066] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 176.241952][ T5066] udc-core: couldn't find an available UDC or it's busy [ 176.243775][ T5066] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 176.267021][ T4034] Bluetooth: hci6: command 0x040f tx timeout [ 176.352895][ T5016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.378577][ T4955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.393901][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.405295][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.438192][ T5016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.445321][ T4955] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.450946][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.453685][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.477711][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.479587][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.496243][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.498844][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.501493][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.516196][ T4642] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.518005][ T4642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.520260][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.527435][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.539345][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.574672][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.578586][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.594350][ T4955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.615935][ T4955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.628557][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.631405][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.634167][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.666065][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.671586][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.689913][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.703045][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.749977][ T5016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.820547][ T5016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.018369][ T5076] loop4: detected capacity change from 0 to 512 [ 178.029768][ T5076] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.078001][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.080009][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.085459][ T5076] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 178.101928][ T4955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.117353][ T5016] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.170919][ T5016] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.258498][ T5016] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.315474][ T5016] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.346197][ T25] Bluetooth: hci6: command 0x0419 tx timeout [ 178.466749][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.469275][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.506649][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.509239][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.521642][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.529071][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.539467][ T4955] device veth0_vlan entered promiscuous mode [ 179.476837][ T4955] device veth1_vlan entered promiscuous mode [ 179.584567][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.596827][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.599586][ T5088] udc-core: couldn't find an available UDC or it's busy [ 179.601343][ T5088] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 179.610867][ T4955] device veth0_macvtap entered promiscuous mode [ 179.626094][ T5016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.630419][ T4955] device veth1_macvtap entered promiscuous mode [ 179.650526][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.653156][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.656274][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.665216][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.682582][ T5016] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.694060][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.701874][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.704519][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.720730][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.723200][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.735378][ T5090] loop1: detected capacity change from 0 to 512 [ 179.735862][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.739371][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.755949][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.758528][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.761042][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.768165][ T4955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.772454][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.787607][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.801425][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.808543][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.815140][ T4642] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.817031][ T4642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.845375][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.850802][ T5090] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 179.871358][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.919148][ T4642] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.921096][ T4642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.938985][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.032440][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.035562][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.039159][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.046142][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.048566][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.051169][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.074228][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.315647][ T5097] loop2: detected capacity change from 0 to 512 [ 180.318687][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.329794][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.332667][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.425704][ T4880] handle_bad_sector: 18776 callbacks suppressed [ 180.515864][ T5097] EXT4-fs (loop2): Test dummy encryption mode enabled [ 180.518244][ T5097] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 180.524041][ T5097] EXT4-fs (loop2): Test dummy encryption mode enabled [ 180.558400][ T4880] attempt to access beyond end of device [ 180.558400][ T4880] loop0: rw=524288, want=57760, limit=40427 [ 180.719239][ T5097] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 1: comm syz.2.242: invalid block [ 180.724288][ T5097] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.242: couldn't read orphan inode 11 (err -117) [ 180.729310][ T5097] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,mblk_io_submit,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 180.896757][ T4880] attempt to access beyond end of device [ 180.896757][ T4880] loop0: rw=524288, want=57768, limit=40427 [ 180.900319][ T4955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.910342][ T4880] attempt to access beyond end of device [ 180.910342][ T4880] loop0: rw=524288, want=57776, limit=40427 [ 180.914188][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.917717][ T4880] attempt to access beyond end of device [ 180.917717][ T4880] loop0: rw=524288, want=57784, limit=40427 [ 180.925784][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.929521][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.936283][ T4880] attempt to access beyond end of device [ 180.936283][ T4880] loop0: rw=524288, want=57792, limit=40427 [ 180.939194][ T4880] attempt to access beyond end of device [ 180.939194][ T4880] loop0: rw=524288, want=57800, limit=40427 [ 180.941964][ T4880] attempt to access beyond end of device [ 180.941964][ T4880] loop0: rw=524288, want=57808, limit=40427 [ 180.989367][ T4955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.991614][ T4955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.993735][ T4955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.006175][ T4955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.026066][ T4880] attempt to access beyond end of device [ 181.026066][ T4880] loop0: rw=524288, want=57816, limit=40427 [ 181.031955][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.034718][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.047419][ T4880] attempt to access beyond end of device [ 181.047419][ T4880] loop0: rw=524288, want=57824, limit=40427 [ 181.050476][ T4880] attempt to access beyond end of device [ 181.050476][ T4880] loop0: rw=524288, want=57832, limit=40427 [ 181.067369][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.075963][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.233957][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.237166][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.239745][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.242184][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.204833][ T5106] process 'syz.4.244' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 182.245770][ T5016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.257455][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.663066][ T5016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.679232][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.681997][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.684546][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.687411][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.798064][ T4157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.800229][ T4157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.818987][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.830359][ T4193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.831001][ T5120] device pim6reg1 entered promiscuous mode [ 182.832560][ T4193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.853163][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.856447][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.859122][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.934819][ T1847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.938348][ T1847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.947067][ T1847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.949784][ T1847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.966643][ T5016] device veth0_vlan entered promiscuous mode [ 182.998514][ T5016] device veth1_vlan entered promiscuous mode [ 183.023409][ T5124] loop4: detected capacity change from 0 to 512 [ 183.049390][ T1847] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.058635][ T1847] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.084035][ T1847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.087639][ T1847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.099050][ T5016] device veth0_macvtap entered promiscuous mode [ 183.103578][ T5016] device veth1_macvtap entered promiscuous mode [ 183.139630][ T5124] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.250: casefold flag without casefold feature [ 183.143166][ T5124] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.250: couldn't read orphan inode 15 (err -117) [ 183.158796][ T5124] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.178650][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.181294][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.183797][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.246100][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.248511][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.251084][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.253531][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.289781][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.292348][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.294945][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.311741][ T5132] udc-core: couldn't find an available UDC or it's busy [ 183.313630][ T5132] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 183.333846][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.425970][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.430268][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.436880][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.439482][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.472591][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.475470][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.487829][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.492430][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.505410][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.515529][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.525675][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.533933][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.545339][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.806948][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.426836][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.436468][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.438999][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.441521][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.444039][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.467089][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.469938][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.488315][ T5016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.490573][ T5016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.492752][ T5016] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.494957][ T5016] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.648301][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.650471][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.654575][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.694541][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.703309][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.711591][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.753480][ T5140] loop2: detected capacity change from 0 to 1024 [ 185.666942][ T4880] handle_bad_sector: 14729 callbacks suppressed [ 185.666960][ T4880] attempt to access beyond end of device [ 185.666960][ T4880] loop0: rw=524288, want=57352, limit=40427 [ 185.671460][ T4880] attempt to access beyond end of device [ 185.671460][ T4880] loop0: rw=524288, want=57360, limit=40427 [ 185.674532][ T5140] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c02c, mo2=0003] [ 185.684730][ T5140] System zones: 0-1, 3-36 [ 185.700039][ T5146] loop3: detected capacity change from 0 to 512 [ 185.702933][ T5140] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,data_err=ignore,discard,max_batch_time=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000006,delalloc,nodelalloc,errors=remount-ro,bsddf,debug,. Quota mode: writeback. [ 185.712359][ T4880] attempt to access beyond end of device [ 185.712359][ T4880] loop0: rw=524288, want=57368, limit=40427 [ 185.715188][ T4880] attempt to access beyond end of device [ 185.715188][ T4880] loop0: rw=524288, want=57376, limit=40427 [ 185.737181][ T4880] attempt to access beyond end of device [ 185.737181][ T4880] loop0: rw=524288, want=57384, limit=40427 [ 185.740142][ T4880] attempt to access beyond end of device [ 185.740142][ T4880] loop0: rw=524288, want=57392, limit=40427 [ 185.743085][ T4880] attempt to access beyond end of device [ 185.743085][ T4880] loop0: rw=524288, want=57400, limit=40427 [ 185.747203][ T4880] attempt to access beyond end of device [ 185.747203][ T4880] loop0: rw=524288, want=57408, limit=40427 [ 185.750305][ T4880] attempt to access beyond end of device [ 185.750305][ T4880] loop0: rw=524288, want=57416, limit=40427 [ 185.753125][ T4880] attempt to access beyond end of device [ 185.753125][ T4880] loop0: rw=524288, want=57424, limit=40427 [ 185.766305][ T5146] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.778224][ T5146] EXT4-fs (loop3): 1 truncate cleaned up [ 185.779810][ T5146] EXT4-fs (loop3): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 186.063388][ T5155] loop1: detected capacity change from 0 to 2048 [ 187.027909][ T5155] EXT4-fs (loop1): Ignoring removed orlov option [ 187.062551][ T5159] loop4: detected capacity change from 0 to 512 [ 187.117541][ T5159] EXT4-fs (loop4): Test dummy encryption mode enabled [ 187.122401][ T5155] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 187.169104][ T5159] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 1: comm syz.4.258: invalid block [ 187.172249][ T5159] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.258: couldn't read orphan inode 11 (err -117) [ 187.194397][ T5159] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,resuid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,user_xattr,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 190.481126][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 190.687586][ T4880] handle_bad_sector: 8117 callbacks suppressed [ 190.687605][ T4880] attempt to access beyond end of device [ 190.687605][ T4880] loop0: rw=0, want=59128, limit=40427 [ 190.691949][ T4880] attempt to access beyond end of device [ 190.691949][ T4880] loop0: rw=0, want=59136, limit=40427 [ 190.694803][ T4880] attempt to access beyond end of device [ 190.694803][ T4880] loop0: rw=0, want=59144, limit=40427 [ 190.706474][ T4880] attempt to access beyond end of device [ 190.706474][ T4880] loop0: rw=0, want=59152, limit=40427 [ 190.710468][ T4880] attempt to access beyond end of device [ 190.710468][ T4880] loop0: rw=0, want=59160, limit=40427 [ 190.713345][ T4880] attempt to access beyond end of device [ 190.713345][ T4880] loop0: rw=0, want=59168, limit=40427 [ 192.510453][ T5186] loop2: detected capacity change from 0 to 512 [ 192.619704][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.621369][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.690758][ T4880] attempt to access beyond end of device [ 192.690758][ T4880] loop0: rw=0, want=59176, limit=40427 [ 192.693638][ T4880] attempt to access beyond end of device [ 192.693638][ T4880] loop0: rw=0, want=59184, limit=40427 [ 192.704593][ T4880] attempt to access beyond end of device [ 192.704593][ T4880] loop0: rw=0, want=59192, limit=40427 [ 192.714712][ T4880] attempt to access beyond end of device [ 192.714712][ T4880] loop0: rw=0, want=59200, limit=40427 [ 194.426882][ T5186] EXT4-fs: failed to create workqueue [ 194.428447][ T5186] EXT4-fs (loop2): mount failed [ 194.451829][ T5212] capability: warning: `syz.4.272' uses 32-bit capabilities (legacy support in use) [ 196.022711][ T4880] handle_bad_sector: 1728 callbacks suppressed [ 196.022728][ T4880] attempt to access beyond end of device [ 196.022728][ T4880] loop0: rw=524288, want=58752, limit=40427 [ 196.028211][ T4880] attempt to access beyond end of device [ 196.028211][ T4880] loop0: rw=524288, want=58760, limit=40427 [ 196.032472][ T4880] attempt to access beyond end of device [ 196.032472][ T4880] loop0: rw=524288, want=58768, limit=40427 [ 196.035461][ T4880] attempt to access beyond end of device [ 196.035461][ T4880] loop0: rw=524288, want=58776, limit=40427 [ 196.047510][ T4880] attempt to access beyond end of device [ 196.047510][ T4880] loop0: rw=524288, want=58784, limit=40427 [ 196.056263][ T4880] attempt to access beyond end of device [ 196.056263][ T4880] loop0: rw=524288, want=58792, limit=40427 [ 196.059211][ T4880] attempt to access beyond end of device [ 196.059211][ T4880] loop0: rw=524288, want=58800, limit=40427 [ 196.106111][ T4880] attempt to access beyond end of device [ 196.106111][ T4880] loop0: rw=524288, want=58808, limit=40427 [ 196.109415][ T4880] attempt to access beyond end of device [ 196.109415][ T4880] loop0: rw=524288, want=58816, limit=40427 [ 196.136825][ T4880] attempt to access beyond end of device [ 196.136825][ T4880] loop0: rw=524288, want=58824, limit=40427 [ 199.808265][ T5260] loop1: detected capacity change from 0 to 2048 [ 201.031431][ T4880] handle_bad_sector: 8002 callbacks suppressed [ 201.031449][ T4880] attempt to access beyond end of device [ 201.031449][ T4880] loop0: rw=524288, want=57568, limit=40427 [ 201.073890][ T4880] attempt to access beyond end of device [ 201.073890][ T4880] loop0: rw=524288, want=57576, limit=40427 [ 201.094159][ T4880] attempt to access beyond end of device [ 201.094159][ T4880] loop0: rw=524288, want=57584, limit=40427 [ 201.114442][ T4880] attempt to access beyond end of device [ 201.114442][ T4880] loop0: rw=524288, want=57592, limit=40427 [ 201.128995][ T4880] attempt to access beyond end of device [ 201.128995][ T4880] loop0: rw=524288, want=57600, limit=40427 [ 201.131902][ T4880] attempt to access beyond end of device [ 201.131902][ T4880] loop0: rw=524288, want=57608, limit=40427 [ 201.169502][ T4880] attempt to access beyond end of device [ 201.169502][ T4880] loop0: rw=524288, want=57616, limit=40427 [ 201.172502][ T4880] attempt to access beyond end of device [ 201.172502][ T4880] loop0: rw=524288, want=57624, limit=40427 [ 201.197517][ T5271] syz.2.293 uses obsolete (PF_INET,SOCK_PACKET) [ 201.209696][ T4880] attempt to access beyond end of device [ 201.209696][ T4880] loop0: rw=524288, want=57632, limit=40427 [ 201.222977][ T4880] attempt to access beyond end of device [ 201.222977][ T4880] loop0: rw=524288, want=57640, limit=40427 [ 201.347992][ T5260] EXT4-fs (loop1): Ignoring removed orlov option [ 201.480653][ T5260] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 203.387642][ T1534] Bluetooth: hci7: command 0x0409 tx timeout [ 203.635557][ T5272] chnl_net:caif_netlink_parms(): no params data found [ 203.819218][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.826241][ T5272] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.846136][ T5272] device bridge_slave_0 entered promiscuous mode [ 203.877459][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.886198][ T5272] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.896733][ T5272] device bridge_slave_1 entered promiscuous mode [ 203.996429][ T5272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.040500][ T5272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.147476][ T5272] team0: Port device team_slave_0 added [ 204.172580][ T5272] team0: Port device team_slave_1 added [ 204.248500][ T5272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.250296][ T5272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.307759][ T5272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.338297][ T5272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.340167][ T5272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.387097][ T5272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.851377][ T5289] loop3: detected capacity change from 0 to 40427 [ 205.884212][ T3604] Bluetooth: hci7: command 0x041b tx timeout [ 205.897963][ T5272] device hsr_slave_0 entered promiscuous mode [ 205.966323][ T5272] device hsr_slave_1 entered promiscuous mode [ 205.996201][ T5272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.998095][ T5272] Cannot create hsr debugfs directory [ 206.449921][ T4880] handle_bad_sector: 9151 callbacks suppressed [ 206.490079][ T4880] attempt to access beyond end of device [ 206.490079][ T4880] loop0: rw=524288, want=57416, limit=40427 [ 206.710791][ T4880] attempt to access beyond end of device [ 206.710791][ T4880] loop0: rw=524288, want=57424, limit=40427 [ 206.838726][ T4880] attempt to access beyond end of device [ 206.838726][ T4880] loop0: rw=524288, want=57432, limit=40427 [ 206.841704][ T4880] attempt to access beyond end of device [ 206.841704][ T4880] loop0: rw=524288, want=57440, limit=40427 [ 206.844613][ T4880] attempt to access beyond end of device [ 206.844613][ T4880] loop0: rw=524288, want=57448, limit=40427 [ 206.916230][ T4880] attempt to access beyond end of device [ 206.916230][ T4880] loop0: rw=524288, want=57456, limit=40427 [ 206.919334][ T4880] attempt to access beyond end of device [ 206.919334][ T4880] loop0: rw=524288, want=57464, limit=40427 [ 206.922222][ T4880] attempt to access beyond end of device [ 206.922222][ T4880] loop0: rw=524288, want=57472, limit=40427 [ 206.925123][ T4880] attempt to access beyond end of device [ 206.925123][ T4880] loop0: rw=524288, want=57480, limit=40427 [ 206.935273][ T4880] attempt to access beyond end of device [ 206.935273][ T4880] loop0: rw=524288, want=57488, limit=40427 [ 207.141846][ T5320] loop3: detected capacity change from 0 to 512 [ 208.239183][ T4068] Bluetooth: hci7: command 0x040f tx timeout [ 208.391103][ T5272] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.729996][ T5320] EXT4-fs (loop3): 1 orphan inode deleted [ 208.731494][ T5320] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc=0x0000000000000002,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 209.883134][ T5272] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.401278][ T5346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.319'. [ 210.489700][ T25] Bluetooth: hci7: command 0x0419 tx timeout [ 211.100784][ T13] Bluetooth: hci8: command 0x0409 tx timeout [ 211.123201][ T5272] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.163295][ T5351] loop2: detected capacity change from 0 to 512 [ 211.250520][ T5351] EXT4-fs (loop2): Unrecognized mount option "fsmagic=0x0000000800000009" or missing value [ 211.277195][ T5358] loop3: detected capacity change from 0 to 256 [ 211.322471][ T5327] loop1: detected capacity change from 0 to 40427 [ 211.437588][ T5327] F2FS-fs (loop1): invalid crc value [ 211.439119][ T5327] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 211.489147][ T4880] handle_bad_sector: 7632 callbacks suppressed [ 211.489164][ T4880] attempt to access beyond end of device [ 211.489164][ T4880] loop0: rw=524288, want=57352, limit=40427 [ 211.494598][ T4880] attempt to access beyond end of device [ 211.494598][ T4880] loop0: rw=524288, want=57360, limit=40427 [ 211.497690][ T4880] attempt to access beyond end of device [ 211.497690][ T4880] loop0: rw=524288, want=57368, limit=40427 [ 211.500627][ T4880] attempt to access beyond end of device [ 211.500627][ T4880] loop0: rw=524288, want=57376, limit=40427 [ 211.503345][ T4880] attempt to access beyond end of device [ 211.503345][ T4880] loop0: rw=524288, want=57384, limit=40427 [ 211.506260][ T4880] attempt to access beyond end of device [ 211.506260][ T4880] loop0: rw=524288, want=57392, limit=40427 [ 211.509022][ T4880] attempt to access beyond end of device [ 211.509022][ T4880] loop0: rw=524288, want=57400, limit=40427 [ 211.511794][ T4880] attempt to access beyond end of device [ 211.511794][ T4880] loop0: rw=524288, want=57408, limit=40427 [ 211.514458][ T4880] attempt to access beyond end of device [ 211.514458][ T4880] loop0: rw=524288, want=57416, limit=40427 [ 211.517564][ T4880] attempt to access beyond end of device [ 211.517564][ T4880] loop0: rw=524288, want=57424, limit=40427 [ 213.521038][ T25] Bluetooth: hci8: command 0x041b tx timeout [ 213.529551][ T5365] input: syz1 as /devices/virtual/input/input5 [ 214.891164][ T5272] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.899267][ T5371] device bridge0 entered promiscuous mode [ 214.932775][ T487] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.995992][ T5378] loop1: detected capacity change from 0 to 256 [ 215.909189][ T5381] loop2: detected capacity change from 0 to 4096 [ 215.916388][ T3604] Bluetooth: hci8: command 0x040f tx timeout [ 215.920845][ T5380] loop3: detected capacity change from 0 to 512 [ 215.938068][ T5381] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 215.938068][ T5381] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 215.938068][ T5381] [ 215.942625][ T5381] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 215.955633][ T487] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.960913][ T5380] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 215.966879][ T5381] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,noauto_da_alloc,i_version,noacl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 216.011594][ T5380] EXT4-fs (loop3): 1 truncate cleaned up [ 216.013134][ T5380] EXT4-fs (loop3): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 216.024979][ T5378] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 216.072350][ T487] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.155564][ T5334] chnl_net:caif_netlink_parms(): no params data found [ 216.267805][ T487] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.965954][ T4880] handle_bad_sector: 7051 callbacks suppressed [ 216.965971][ T4880] attempt to access beyond end of device [ 216.965971][ T4880] loop0: rw=0, want=58760, limit=40427 [ 217.006502][ T4880] attempt to access beyond end of device [ 217.006502][ T4880] loop0: rw=0, want=58768, limit=40427 [ 217.009369][ T4880] attempt to access beyond end of device [ 217.009369][ T4880] loop0: rw=0, want=58776, limit=40427 [ 217.044471][ T4880] attempt to access beyond end of device [ 217.044471][ T4880] loop0: rw=0, want=58784, limit=40427 [ 217.053615][ T5397] loop1: detected capacity change from 0 to 512 [ 217.069052][ T4880] attempt to access beyond end of device [ 217.069052][ T4880] loop0: rw=0, want=58792, limit=40427 [ 217.071718][ T4880] attempt to access beyond end of device [ 217.071718][ T4880] loop0: rw=0, want=58800, limit=40427 [ 217.074478][ T4880] attempt to access beyond end of device [ 217.074478][ T4880] loop0: rw=0, want=58808, limit=40427 [ 217.106146][ T5397] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 217.115996][ T5397] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 217.117707][ T5397] EXT4-fs (loop1): Unrecognized mount option "dont_appraise" or missing value [ 217.125748][ T4880] attempt to access beyond end of device [ 217.125748][ T4880] loop0: rw=0, want=58816, limit=40427 [ 217.131507][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.137867][ T5334] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.160638][ T4880] attempt to access beyond end of device [ 217.160638][ T4880] loop0: rw=0, want=58824, limit=40427 [ 217.168887][ T4880] attempt to access beyond end of device [ 217.168887][ T4880] loop0: rw=0, want=58832, limit=40427 [ 217.296474][ T5334] device bridge_slave_0 entered promiscuous mode [ 217.307783][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.316000][ T5334] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.336782][ T5334] device bridge_slave_1 entered promiscuous mode [ 217.636596][ T5401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.324'. [ 218.211583][ T21] Bluetooth: hci8: command 0x0419 tx timeout [ 218.447029][ T5405] udc-core: couldn't find an available UDC or it's busy [ 218.448915][ T5405] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 218.486117][ T5334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.444181][ T5334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.507528][ T5334] team0: Port device team_slave_0 added [ 219.555679][ T5334] team0: Port device team_slave_1 added [ 219.658967][ T5399] loop2: detected capacity change from 0 to 40427 [ 219.691934][ T5334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.693782][ T5334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.696798][ T5399] F2FS-fs (loop2): invalid crc value [ 219.717857][ T5399] F2FS-fs (loop2): Found nat_bits in checkpoint [ 219.727196][ T5334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.755942][ T5399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 219.785427][ T5334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.789244][ T5334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.826577][ T5334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.838691][ T5272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.967843][ T5421] overlayfs: missing 'workdir' [ 220.997619][ T5272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.038346][ T5272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.186851][ T5272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.297968][ T5334] device hsr_slave_0 entered promiscuous mode [ 221.336335][ T5334] device hsr_slave_1 entered promiscuous mode [ 221.356069][ T5334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.358089][ T5334] Cannot create hsr debugfs directory [ 221.603472][ T5436] loop2: detected capacity change from 0 to 512 [ 222.534419][ T4880] handle_bad_sector: 12766 callbacks suppressed [ 222.534438][ T4880] attempt to access beyond end of device [ 222.534438][ T4880] loop0: rw=0, want=58960, limit=40427 [ 222.537428][ T5439] loop3: detected capacity change from 0 to 4096 [ 222.538975][ T4880] attempt to access beyond end of device [ 222.538975][ T4880] loop0: rw=0, want=58968, limit=40427 [ 222.574912][ T4880] attempt to access beyond end of device [ 222.574912][ T4880] loop0: rw=0, want=58976, limit=40427 [ 222.588703][ T4880] attempt to access beyond end of device [ 222.588703][ T4880] loop0: rw=0, want=58984, limit=40427 [ 222.591582][ T4880] attempt to access beyond end of device [ 222.591582][ T4880] loop0: rw=0, want=58992, limit=40427 [ 222.616034][ T5439] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 222.616034][ T5439] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 222.616034][ T5439] [ 222.620594][ T5439] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 222.621858][ T4880] attempt to access beyond end of device [ 222.621858][ T4880] loop0: rw=0, want=59000, limit=40427 [ 222.634268][ T5436] EXT4-fs (loop2): 1 orphan inode deleted [ 222.643459][ T5436] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc=0x0000000000000002,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 222.656833][ T5272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.659784][ T4880] attempt to access beyond end of device [ 222.659784][ T4880] loop0: rw=0, want=59008, limit=40427 [ 222.662656][ T4880] attempt to access beyond end of device [ 222.662656][ T4880] loop0: rw=0, want=59016, limit=40427 [ 222.670264][ T4880] attempt to access beyond end of device [ 222.670264][ T4880] loop0: rw=0, want=59024, limit=40427 [ 222.673148][ T4880] attempt to access beyond end of device [ 222.673148][ T4880] loop0: rw=0, want=59032, limit=40427 [ 222.678462][ T5439] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,noauto_da_alloc,i_version,noacl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 222.828223][ T5446] device syz_tun entered promiscuous mode [ 222.855994][ T5446] device syz_tun left promiscuous mode [ 223.888232][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.890818][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.898171][ T5272] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.906409][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.908820][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.924691][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.926555][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.939826][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.983661][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.008775][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.010579][ T5459] loop3: detected capacity change from 0 to 512 [ 224.010699][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.077625][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.080091][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.082899][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.091611][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.097761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.102627][ T5459] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.436637][ T5472] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.333: Directory hole found for htree leaf block 0 [ 225.710590][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.713294][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.747240][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.752648][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.763881][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.805523][ T5479] loop2: detected capacity change from 0 to 256 [ 225.871499][ T5272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.874810][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.941967][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.944733][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.310791][ T5334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.367948][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.369998][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.379437][ T5334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.427788][ T5334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.469938][ T5334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.521800][ T5272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.547120][ T5502] loop2: detected capacity change from 0 to 512 [ 226.600660][ T5502] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 226.604917][ T5502] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 226.610355][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.614167][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.621846][ T5502] EXT4-fs (loop2): Unrecognized mount option "dont_appraise" or missing value [ 226.873180][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.876602][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.841299][ T4880] handle_bad_sector: 13840 callbacks suppressed [ 227.841316][ T4880] attempt to access beyond end of device [ 227.841316][ T4880] loop0: rw=524288, want=57560, limit=40427 [ 227.846438][ T5507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.340'. [ 227.857922][ T4880] attempt to access beyond end of device [ 227.857922][ T4880] loop0: rw=524288, want=57568, limit=40427 [ 227.863012][ T4880] attempt to access beyond end of device [ 227.863012][ T4880] loop0: rw=524288, want=57576, limit=40427 [ 227.867702][ T4880] attempt to access beyond end of device [ 227.867702][ T4880] loop0: rw=524288, want=57584, limit=40427 [ 227.870454][ T4880] attempt to access beyond end of device [ 227.870454][ T4880] loop0: rw=524288, want=57592, limit=40427 [ 227.873741][ T4880] attempt to access beyond end of device [ 227.873741][ T4880] loop0: rw=524288, want=57600, limit=40427 [ 227.878375][ T4880] attempt to access beyond end of device [ 227.878375][ T4880] loop0: rw=524288, want=57608, limit=40427 [ 227.882132][ T4880] attempt to access beyond end of device [ 227.882132][ T4880] loop0: rw=524288, want=57616, limit=40427 [ 227.886450][ T4880] attempt to access beyond end of device [ 227.886450][ T4880] loop0: rw=524288, want=57624, limit=40427 [ 227.889369][ T4880] attempt to access beyond end of device [ 227.889369][ T4880] loop0: rw=524288, want=57632, limit=40427 [ 227.927473][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.930425][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.018828][ T5512] loop1: detected capacity change from 0 to 512 [ 228.256681][ T5512] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 228.331547][ T5272] device veth0_vlan entered promiscuous mode [ 228.522562][ T5512] EXT4-fs (loop1): 1 orphan inode deleted [ 228.524095][ T5512] EXT4-fs (loop1): 1 truncate cleaned up [ 228.525698][ T5512] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none. [ 228.813831][ T5487] loop3: detected capacity change from 0 to 40427 [ 228.819563][ T5272] device veth1_vlan entered promiscuous mode [ 228.877313][ T487] device hsr_slave_0 left promiscuous mode [ 228.883571][ T5517] loop2: detected capacity change from 0 to 512 [ 228.897727][ T5487] F2FS-fs (loop3): invalid crc value [ 228.919173][ T5487] F2FS-fs (loop3): Found nat_bits in checkpoint [ 228.948219][ T5517] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 228.967132][ T5517] EXT4-fs (loop2): 1 truncate cleaned up [ 228.968861][ T487] device hsr_slave_1 left promiscuous mode [ 228.971292][ T5517] EXT4-fs (loop2): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 229.437129][ T487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.460921][ T487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.326782][ T487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.328870][ T487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.382328][ T487] device bridge_slave_1 left promiscuous mode [ 230.384137][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.622432][ T487] device bridge_slave_0 left promiscuous mode [ 231.624130][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.807920][ T5555] udc-core: couldn't find an available UDC or it's busy [ 231.810022][ T5555] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 231.966006][ T487] device veth1_macvtap left promiscuous mode [ 231.967678][ T487] device veth0_macvtap left promiscuous mode [ 231.969189][ T487] device veth1_vlan left promiscuous mode [ 231.970975][ T487] device veth0_vlan left promiscuous mode [ 232.609763][ T487] team0 (unregistering): Port device team_slave_1 removed [ 232.632252][ T487] team0 (unregistering): Port device team_slave_0 removed [ 232.664089][ T487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.726177][ T487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.848632][ T4880] handle_bad_sector: 14766 callbacks suppressed [ 232.848651][ T4880] attempt to access beyond end of device [ 232.848651][ T4880] loop0: rw=524288, want=57448, limit=40427 [ 232.853219][ T4880] attempt to access beyond end of device [ 232.853219][ T4880] loop0: rw=524288, want=57456, limit=40427 [ 232.876072][ T4880] attempt to access beyond end of device [ 232.876072][ T4880] loop0: rw=524288, want=57464, limit=40427 [ 232.894876][ T4880] attempt to access beyond end of device [ 232.894876][ T4880] loop0: rw=524288, want=57472, limit=40427 [ 232.906960][ T4880] attempt to access beyond end of device [ 232.906960][ T4880] loop0: rw=524288, want=57480, limit=40427 [ 232.910016][ T4880] attempt to access beyond end of device [ 232.910016][ T4880] loop0: rw=524288, want=57488, limit=40427 [ 232.912896][ T4880] attempt to access beyond end of device [ 232.912896][ T4880] loop0: rw=524288, want=57496, limit=40427 [ 232.915778][ T4880] attempt to access beyond end of device [ 232.915778][ T4880] loop0: rw=524288, want=57504, limit=40427 [ 232.935058][ T4880] attempt to access beyond end of device [ 232.935058][ T4880] loop0: rw=524288, want=57512, limit=40427 [ 232.938538][ T4880] attempt to access beyond end of device [ 232.938538][ T4880] loop0: rw=524288, want=57520, limit=40427 [ 232.982449][ T487] bond0 (unregistering): Released all slaves [ 233.139619][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.142350][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.152549][ T5272] device veth0_macvtap entered promiscuous mode [ 233.167711][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.192557][ T5272] device veth1_macvtap entered promiscuous mode [ 233.254887][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.267895][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.270408][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.272940][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.295975][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.298732][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.301210][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.304183][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.325962][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.336256][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.338620][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.346798][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.359136][ T5272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.376591][ T5334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.387463][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.390254][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.399329][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.405375][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.455972][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.476057][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.478724][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.496654][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.500403][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.509502][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.512089][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.535147][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.538269][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.540829][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.557378][ T5272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.569120][ T5334] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.582572][ T5272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.584719][ T5272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.595994][ T5272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.598459][ T5272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.602039][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.604705][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.608259][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.612681][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.616364][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.620808][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.626950][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.628765][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.636961][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.669266][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.672182][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.675060][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.676971][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.689125][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.697388][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.758415][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.763515][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.766264][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.774086][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.785111][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.788817][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.807800][ T5334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.814559][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.828834][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.831657][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.835473][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.876047][ T304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.885995][ T304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.889554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.932178][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.934470][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.938854][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.077406][ T5334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.107479][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.109942][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.832897][ T5595] loop1: detected capacity change from 0 to 512 [ 236.290369][ T5595] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 236.293365][ T5595] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 236.297530][ T5595] EXT4-fs (loop1): Unrecognized mount option "dont_appraise" or missing value [ 236.352545][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 236.354894][ T5603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 236.357551][ T5603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.355'. [ 236.359763][ T5603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.355'. [ 237.713998][ T5606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.353'. [ 237.727363][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.730103][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.714469][ T4880] handle_bad_sector: 11691 callbacks suppressed [ 238.714498][ T4880] attempt to access beyond end of device [ 238.714498][ T4880] loop0: rw=0, want=59256, limit=40427 [ 238.724653][ T4880] attempt to access beyond end of device [ 238.724653][ T4880] loop0: rw=0, want=59264, limit=40427 [ 238.767231][ T4880] attempt to access beyond end of device [ 238.767231][ T4880] loop0: rw=0, want=59272, limit=40427 [ 238.778916][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.781548][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.784325][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.799687][ T5613] loop2: detected capacity change from 0 to 512 [ 238.814268][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.826951][ T5334] device veth0_vlan entered promiscuous mode [ 238.834425][ T4880] attempt to access beyond end of device [ 238.834425][ T4880] loop0: rw=0, want=59280, limit=40427 [ 238.842177][ T5334] device veth1_vlan entered promiscuous mode [ 238.845964][ T4880] attempt to access beyond end of device [ 238.845964][ T4880] loop0: rw=0, want=59288, limit=40427 [ 238.847130][ T5613] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 238.859198][ T4880] attempt to access beyond end of device [ 238.859198][ T4880] loop0: rw=0, want=59296, limit=40427 [ 238.861999][ T4880] attempt to access beyond end of device [ 238.861999][ T4880] loop0: rw=0, want=59304, limit=40427 [ 238.864801][ T4880] attempt to access beyond end of device [ 238.864801][ T4880] loop0: rw=0, want=59312, limit=40427 [ 238.893381][ T5615] loop1: detected capacity change from 0 to 512 [ 238.907316][ T5613] EXT4-fs (loop2): 1 truncate cleaned up [ 238.908847][ T5613] EXT4-fs (loop2): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 238.926560][ T4880] attempt to access beyond end of device [ 238.926560][ T4880] loop0: rw=0, want=59320, limit=40427 [ 238.929534][ T4880] attempt to access beyond end of device [ 238.929534][ T4880] loop0: rw=0, want=59328, limit=40427 [ 238.974353][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.977321][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.998358][ T5334] device veth0_macvtap entered promiscuous mode [ 239.003571][ T5334] device veth1_macvtap entered promiscuous mode [ 239.033283][ T5615] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.153059][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.155750][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.178089][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.215853][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.231742][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.249770][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.277164][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.279876][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.282486][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.285156][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.348112][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.365212][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.385862][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.388593][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.407409][ T5334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.410723][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.413416][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.306131][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.320320][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.326274][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.329069][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.331401][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.333997][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.385972][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.388624][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.391125][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.393684][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.418036][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.420797][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.423270][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.425790][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.459076][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.461699][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.506579][ T5334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.524453][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.527908][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.572329][ T5334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.585266][ T5334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.595927][ T5334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.603424][ T5334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.747271][ T3320] Bluetooth: hci0: command 0x0406 tx timeout [ 241.266279][ T304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.268478][ T304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.296427][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.657709][ T5473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.660101][ T5473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.668021][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.861583][ T5660] loop4: detected capacity change from 0 to 512 [ 246.891775][ T4880] handle_bad_sector: 4605 callbacks suppressed [ 246.891794][ T4880] attempt to access beyond end of device [ 246.891794][ T4880] loop0: rw=524288, want=57416, limit=40427 [ 246.948162][ T4880] attempt to access beyond end of device [ 246.948162][ T4880] loop0: rw=524288, want=57424, limit=40427 [ 246.951200][ T4880] attempt to access beyond end of device [ 246.951200][ T4880] loop0: rw=524288, want=57432, limit=40427 [ 246.954137][ T4880] attempt to access beyond end of device [ 246.954137][ T4880] loop0: rw=524288, want=57440, limit=40427 [ 246.998972][ T4880] attempt to access beyond end of device [ 246.998972][ T4880] loop0: rw=524288, want=57448, limit=40427 [ 247.001907][ T4880] attempt to access beyond end of device [ 247.001907][ T4880] loop0: rw=524288, want=57456, limit=40427 [ 247.004758][ T4880] attempt to access beyond end of device [ 247.004758][ T4880] loop0: rw=524288, want=57464, limit=40427 [ 247.018806][ T5660] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 247.020937][ T5660] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 247.022748][ T5660] EXT4-fs (loop4): Unrecognized mount option "dont_appraise" or missing value [ 247.130601][ T4880] attempt to access beyond end of device [ 247.130601][ T4880] loop0: rw=524288, want=57472, limit=40427 [ 247.148654][ T4880] attempt to access beyond end of device [ 247.148654][ T4880] loop0: rw=524288, want=57480, limit=40427 [ 247.191745][ T4880] attempt to access beyond end of device [ 247.191745][ T4880] loop0: rw=524288, want=57488, limit=40427 [ 248.225212][ T5673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.368'. [ 248.473625][ T5680] loop4: detected capacity change from 0 to 512 [ 248.538784][ T5680] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 248.566961][ T5680] EXT4-fs (loop4): 1 truncate cleaned up [ 248.568471][ T5680] EXT4-fs (loop4): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 249.246033][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 250.457541][ T25] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 250.460429][ T25] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 250.463171][ T25] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 250.465364][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.481246][ T5700] loop1: detected capacity change from 0 to 512 [ 251.288925][ T5681] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 251.476227][ T25] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 251.480152][ T25] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input6 [ 251.498162][ T5700] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 251.500243][ T5700] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 251.502196][ T5700] EXT4-fs (loop1): Unrecognized mount option "dont_appraise" or missing value [ 252.285288][ T4880] handle_bad_sector: 6612 callbacks suppressed [ 252.285308][ T4880] attempt to access beyond end of device [ 252.285308][ T4880] loop0: rw=524288, want=57352, limit=40427 [ 252.290771][ T4880] attempt to access beyond end of device [ 252.290771][ T4880] loop0: rw=524288, want=57360, limit=40427 [ 252.294064][ T4880] attempt to access beyond end of device [ 252.294064][ T4880] loop0: rw=524288, want=57368, limit=40427 [ 252.310221][ T5716] loop2: detected capacity change from 0 to 512 [ 252.337239][ T4880] attempt to access beyond end of device [ 252.337239][ T4880] loop0: rw=524288, want=57376, limit=40427 [ 252.340308][ T4880] attempt to access beyond end of device [ 252.340308][ T4880] loop0: rw=524288, want=57384, limit=40427 [ 252.398833][ T4880] attempt to access beyond end of device [ 252.398833][ T4880] loop0: rw=524288, want=57392, limit=40427 [ 252.401885][ T4880] attempt to access beyond end of device [ 252.401885][ T4880] loop0: rw=524288, want=57400, limit=40427 [ 252.414470][ T25] usb 1-1: USB disconnect, device number 3 [ 252.416190][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 252.434789][ T5708] capability: warning: `syz.2.380' uses deprecated v2 capabilities in a way that may be insecure [ 252.448061][ T4880] attempt to access beyond end of device [ 252.448061][ T4880] loop0: rw=524288, want=57408, limit=40427 [ 252.451118][ T4880] attempt to access beyond end of device [ 252.451118][ T4880] loop0: rw=524288, want=57416, limit=40427 [ 252.473336][ T4880] attempt to access beyond end of device [ 252.473336][ T4880] loop0: rw=524288, want=57424, limit=40427 [ 253.347028][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 253.590065][ T5729] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 253.801429][ T5729] loop2: detected capacity change from 0 to 512 [ 254.253172][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.254982][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.258794][ T5729] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.299348][ T5733] loop3: detected capacity change from 0 to 512 [ 254.306872][ T5729] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,noquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 254.336230][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.339055][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.340926][ T5733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 254.341441][ T25] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.354463][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.358919][ T25] usb 1-1: config 0 descriptor?? [ 254.372040][ T5733] EXT4-fs (loop3): 1 truncate cleaned up [ 254.376512][ T5733] EXT4-fs (loop3): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 254.745977][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 254.747782][ T25] usbhid: probe of 1-1:0.0 failed with error -71 [ 254.752932][ T25] usb 1-1: USB disconnect, device number 4 [ 256.231212][ T5758] serio: Serial port tty25 [ 257.531814][ T5764] overlayfs: failed to resolve './file0': -2 [ 257.739588][ T4880] handle_bad_sector: 4532 callbacks suppressed [ 257.739605][ T4880] attempt to access beyond end of device [ 257.739605][ T4880] loop0: rw=0, want=59008, limit=40427 [ 257.744094][ T4880] attempt to access beyond end of device [ 257.744094][ T4880] loop0: rw=0, want=59016, limit=40427 [ 257.781150][ T4880] attempt to access beyond end of device [ 257.781150][ T4880] loop0: rw=0, want=59024, limit=40427 [ 257.812035][ T4880] attempt to access beyond end of device [ 257.812035][ T4880] loop0: rw=0, want=59032, limit=40427 [ 257.814833][ T4880] attempt to access beyond end of device [ 257.814833][ T4880] loop0: rw=0, want=59040, limit=40427 [ 257.906977][ T4880] attempt to access beyond end of device [ 257.906977][ T4880] loop0: rw=0, want=59048, limit=40427 [ 257.909849][ T4880] attempt to access beyond end of device [ 257.909849][ T4880] loop0: rw=0, want=59056, limit=40427 [ 257.912625][ T4880] attempt to access beyond end of device [ 257.912625][ T4880] loop0: rw=0, want=59064, limit=40427 [ 257.915342][ T4880] attempt to access beyond end of device [ 257.915342][ T4880] loop0: rw=0, want=59072, limit=40427 [ 257.931993][ T4880] attempt to access beyond end of device [ 257.931993][ T4880] loop0: rw=0, want=59080, limit=40427 [ 258.910787][ T5768] loop3: detected capacity change from 0 to 2048 [ 258.915481][ T5776] x_tables: ip_tables: udp match: only valid for protocol 17 [ 258.992762][ T5768] loop3: p1 < > p2 p3 < p5 > p4 [ 258.994191][ T5768] loop3: partition table partially beyond EOD, truncated [ 258.996449][ T5768] loop3: p1 start 4278190080 is beyond EOD, truncated [ 258.998201][ T5768] loop3: p2 start 16908800 is beyond EOD, truncated [ 259.017319][ T5768] loop3: p4 start 11326 is beyond EOD, truncated [ 259.018934][ T5768] loop3: p5 start 16908800 is beyond EOD, truncated [ 259.854190][ T5791] loop4: detected capacity change from 0 to 32768 [ 259.952707][ T5761] udevd[5761]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 260.103413][ T5791] loop4: p1 p3 < > [ 260.249515][ T5747] udevd[5747]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 260.369357][ T5774] loop1: detected capacity change from 0 to 40427 [ 260.521229][ T5774] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 260.523326][ T5774] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 260.545905][ T5774] F2FS-fs (loop1): Unrecognized mount option "0177777777777777777777718446744073709551615" or missing value [ 260.576365][ T5807] udc-core: couldn't find an available UDC or it's busy [ 260.578209][ T5807] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 261.551619][ T5761] udevd[5761]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 262.029707][ T5747] udevd[5747]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 262.535251][ T5826] loop4: detected capacity change from 0 to 2048 [ 262.717105][ T5826] EXT2-fs (loop4): error: couldn't mount because of unsupported optional features (85c0) [ 262.999259][ T4880] handle_bad_sector: 12584 callbacks suppressed [ 262.999435][ T4880] attempt to access beyond end of device [ 262.999435][ T4880] loop0: rw=0, want=57760, limit=40427 [ 263.186502][ T1534] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 263.446364][ T1534] usb 1-1: Using ep0 maxpacket: 8 [ 263.566130][ T1534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.568915][ T1534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.571376][ T1534] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 263.573593][ T1534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.576657][ T4880] attempt to access beyond end of device [ 263.576657][ T4880] loop0: rw=0, want=57768, limit=40427 [ 263.579546][ T4880] attempt to access beyond end of device [ 263.579546][ T4880] loop0: rw=0, want=57776, limit=40427 [ 263.582483][ T4880] attempt to access beyond end of device [ 263.582483][ T4880] loop0: rw=0, want=57784, limit=40427 [ 263.605915][ T4880] attempt to access beyond end of device [ 263.605915][ T4880] loop0: rw=0, want=57792, limit=40427 [ 263.608714][ T4880] attempt to access beyond end of device [ 263.608714][ T4880] loop0: rw=0, want=57800, limit=40427 [ 263.611567][ T4880] attempt to access beyond end of device [ 263.611567][ T4880] loop0: rw=0, want=57808, limit=40427 [ 263.615007][ T4880] attempt to access beyond end of device [ 263.615007][ T4880] loop0: rw=0, want=57816, limit=40427 [ 263.760160][ T4880] attempt to access beyond end of device [ 263.760160][ T4880] loop0: rw=0, want=57824, limit=40427 [ 263.762841][ T4880] attempt to access beyond end of device [ 263.762841][ T4880] loop0: rw=0, want=57832, limit=40427 [ 264.936876][ T5840] serio: Serial port tty23 [ 266.538364][ T1534] usb 1-1: config 0 descriptor?? [ 267.365015][ T5866] loop3: detected capacity change from 0 to 512 [ 268.196393][ T1534] usbhid 1-1:0.0: can't add hid device: -71 [ 268.198658][ T1534] usbhid: probe of 1-1:0.0 failed with error -71 [ 268.408167][ T4880] handle_bad_sector: 4784 callbacks suppressed [ 268.408186][ T4880] attempt to access beyond end of device [ 268.408186][ T4880] loop0: rw=524288, want=57352, limit=40427 [ 268.412714][ T4880] attempt to access beyond end of device [ 268.412714][ T4880] loop0: rw=524288, want=57360, limit=40427 [ 268.415564][ T4880] attempt to access beyond end of device [ 268.415564][ T4880] loop0: rw=524288, want=57368, limit=40427 [ 268.416112][ T1534] usb 1-1: USB disconnect, device number 5 [ 268.419220][ T4880] attempt to access beyond end of device [ 268.419220][ T4880] loop0: rw=524288, want=57376, limit=40427 [ 268.423558][ T4880] attempt to access beyond end of device [ 268.423558][ T4880] loop0: rw=524288, want=57384, limit=40427 [ 268.458293][ T5871] udc-core: couldn't find an available UDC or it's busy [ 268.460030][ T5871] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 268.460557][ T4880] attempt to access beyond end of device [ 268.460557][ T4880] loop0: rw=524288, want=57392, limit=40427 [ 268.464800][ T4880] attempt to access beyond end of device [ 268.464800][ T4880] loop0: rw=524288, want=57400, limit=40427 [ 268.473848][ T5869] loop2: detected capacity change from 0 to 256 [ 268.490430][ T4880] attempt to access beyond end of device [ 268.490430][ T4880] loop0: rw=524288, want=57408, limit=40427 [ 268.493392][ T4880] attempt to access beyond end of device [ 268.493392][ T4880] loop0: rw=524288, want=57416, limit=40427 [ 268.516220][ T5866] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 268.534975][ T4880] attempt to access beyond end of device [ 268.534975][ T4880] loop0: rw=524288, want=57424, limit=40427 [ 268.546756][ T5866] EXT4-fs (loop3): 1 orphan inode deleted [ 268.548286][ T5866] EXT4-fs (loop3): 1 truncate cleaned up [ 268.549627][ T5866] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none. [ 269.714007][ T5876] udc-core: couldn't find an available UDC or it's busy [ 269.715794][ T5876] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 269.942046][ T26] audit: type=1326 audit(269.900:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5880 comm="syz.3.428" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c3a58a8 code=0x0 [ 270.147374][ T5887] loop4: detected capacity change from 0 to 512 [ 270.227940][ T5890] loop3: detected capacity change from 0 to 512 [ 270.259007][ T5887] EXT4-fs (loop4): Ignoring removed nobh option [ 270.262984][ T5887] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 270.289353][ T5887] EXT4-fs (loop4): 1 truncate cleaned up [ 270.293061][ T5887] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 270.393823][ T5890] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 270.396124][ T5890] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 270.399128][ T5890] EXT4-fs (loop3): Unrecognized mount option "dont_appraise" or missing value [ 272.601950][ T5906] udc-core: couldn't find an available UDC or it's busy [ 272.603826][ T5906] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 272.953814][ T5912] loop2: detected capacity change from 0 to 2048 [ 273.008863][ T5912] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (85c0) [ 273.107528][ T5914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.432'. [ 274.006759][ T4880] handle_bad_sector: 8150 callbacks suppressed [ 274.006806][ T4880] attempt to access beyond end of device [ 274.006806][ T4880] loop0: rw=524288, want=57352, limit=40427 [ 274.011177][ T4880] attempt to access beyond end of device [ 274.011177][ T4880] loop0: rw=524288, want=57360, limit=40427 [ 274.032292][ T5919] udc-core: couldn't find an available UDC or it's busy [ 274.034158][ T5919] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 274.080317][ T4880] attempt to access beyond end of device [ 274.080317][ T4880] loop0: rw=524288, want=57368, limit=40427 [ 274.091573][ T5921] loop4: detected capacity change from 0 to 512 [ 274.099862][ T4880] attempt to access beyond end of device [ 274.099862][ T4880] loop0: rw=524288, want=57376, limit=40427 [ 274.117530][ T4880] attempt to access beyond end of device [ 274.117530][ T4880] loop0: rw=524288, want=57384, limit=40427 [ 274.137855][ T4880] attempt to access beyond end of device [ 274.137855][ T4880] loop0: rw=524288, want=57392, limit=40427 [ 274.140861][ T4880] attempt to access beyond end of device [ 274.140861][ T4880] loop0: rw=524288, want=57400, limit=40427 [ 274.143739][ T4880] attempt to access beyond end of device [ 274.143739][ T4880] loop0: rw=524288, want=57408, limit=40427 [ 274.167683][ T4880] attempt to access beyond end of device [ 274.167683][ T4880] loop0: rw=524288, want=57416, limit=40427 [ 274.170605][ T4880] attempt to access beyond end of device [ 274.170605][ T4880] loop0: rw=524288, want=57424, limit=40427 [ 274.177381][ T5921] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 276.059045][ T5930] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.442: Directory hole found for htree leaf block 0 [ 276.291312][ T5939] loop4: detected capacity change from 0 to 512 [ 276.370775][ T5939] EXT4-fs (loop4): 1 orphan inode deleted [ 276.372377][ T5939] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc=0x0000000000000002,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 278.908543][ T5957] loop4: detected capacity change from 0 to 1024 [ 279.022904][ T4880] handle_bad_sector: 4903 callbacks suppressed [ 279.022923][ T4880] attempt to access beyond end of device [ 279.022923][ T4880] loop0: rw=0, want=57896, limit=40427 [ 279.040091][ T5957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c02c, mo2=0003] [ 279.042357][ T5957] System zones: 0-1, 3-36 [ 279.049650][ T5957] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,data_err=ignore,discard,max_batch_time=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000006,delalloc,nodelalloc,errors=remount-ro,bsddf,debug,. Quota mode: writeback. [ 279.099989][ T4880] attempt to access beyond end of device [ 279.099989][ T4880] loop0: rw=0, want=57904, limit=40427 [ 279.140697][ T4880] attempt to access beyond end of device [ 279.140697][ T4880] loop0: rw=0, want=57912, limit=40427 [ 279.186994][ T4880] attempt to access beyond end of device [ 279.186994][ T4880] loop0: rw=0, want=57920, limit=40427 [ 279.211586][ T4880] attempt to access beyond end of device [ 279.211586][ T4880] loop0: rw=0, want=57928, limit=40427 [ 279.214408][ T4880] attempt to access beyond end of device [ 279.214408][ T4880] loop0: rw=0, want=57936, limit=40427 [ 279.257060][ T5966] loop3: detected capacity change from 0 to 2048 [ 279.258957][ T4880] attempt to access beyond end of device [ 279.258957][ T4880] loop0: rw=0, want=57944, limit=40427 [ 279.261716][ T4880] attempt to access beyond end of device [ 279.261716][ T4880] loop0: rw=0, want=57952, limit=40427 [ 279.264547][ T4880] attempt to access beyond end of device [ 279.264547][ T4880] loop0: rw=0, want=57960, limit=40427 [ 279.303343][ T4880] attempt to access beyond end of device [ 279.303343][ T4880] loop0: rw=0, want=57968, limit=40427 [ 279.355675][ T5968] loop2: detected capacity change from 0 to 128 [ 279.463443][ T5948] loop1: detected capacity change from 0 to 40427 [ 280.920039][ T5978] loop3: detected capacity change from 0 to 256 [ 282.775586][ T5985] udc-core: couldn't find an available UDC or it's busy [ 282.796999][ T5985] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 283.138040][ T5994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.461'. [ 283.873695][ T6006] loop1: detected capacity change from 0 to 2048 [ 284.269032][ T4880] handle_bad_sector: 7139 callbacks suppressed [ 284.269050][ T4880] attempt to access beyond end of device [ 284.269050][ T4880] loop0: rw=0, want=57968, limit=40427 [ 284.273480][ T4880] attempt to access beyond end of device [ 284.273480][ T4880] loop0: rw=0, want=57976, limit=40427 [ 284.308842][ T6006] EXT2-fs (loop1): error: couldn't mount because of unsupported optional features (85c0) [ 284.366025][ T4880] attempt to access beyond end of device [ 284.366025][ T4880] loop0: rw=0, want=57984, limit=40427 [ 284.368776][ T4880] attempt to access beyond end of device [ 284.368776][ T4880] loop0: rw=0, want=57992, limit=40427 [ 284.371584][ T4880] attempt to access beyond end of device [ 284.371584][ T4880] loop0: rw=0, want=58000, limit=40427 [ 284.516339][ T4880] attempt to access beyond end of device [ 284.516339][ T4880] loop0: rw=0, want=58008, limit=40427 [ 284.695057][ T5998] loop4: detected capacity change from 0 to 40427 [ 284.695984][ T4880] attempt to access beyond end of device [ 284.695984][ T4880] loop0: rw=0, want=58016, limit=40427 [ 284.699597][ T4880] attempt to access beyond end of device [ 284.699597][ T4880] loop0: rw=0, want=58024, limit=40427 [ 284.702459][ T4880] attempt to access beyond end of device [ 284.702459][ T4880] loop0: rw=0, want=58032, limit=40427 [ 284.705229][ T4880] attempt to access beyond end of device [ 284.705229][ T4880] loop0: rw=0, want=58040, limit=40427 [ 285.670702][ T5998] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 285.675980][ T5998] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 285.680935][ T5998] F2FS-fs (loop4): invalid crc value [ 285.702351][ T6016] loop3: detected capacity change from 0 to 512 [ 285.729411][ T5998] F2FS-fs (loop4): Found nat_bits in checkpoint [ 285.750768][ T6016] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 285.757920][ T6016] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 285.821683][ T6016] EXT4-fs (loop3): Unrecognized mount option "dont_appraise" or missing value [ 285.973802][ T6024] loop1: detected capacity change from 0 to 2048 [ 286.021271][ T5998] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 286.023226][ T5998] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 286.943543][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 287.033484][ T6024] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.070668][ T6023] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 287.107080][ T6023] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 287.110574][ T6023] EXT4-fs (loop1): This should not happen!! Data will be lost [ 287.110574][ T6023] [ 287.113006][ T6023] EXT4-fs (loop1): Total free blocks count 0 [ 287.114565][ T6023] EXT4-fs (loop1): Free/Dirty block details [ 287.204564][ T6023] EXT4-fs (loop1): free_blocks=2415919104 [ 287.206583][ T6023] EXT4-fs (loop1): dirty_blocks=32 [ 287.207956][ T6023] EXT4-fs (loop1): Block reservation details [ 287.209570][ T6023] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 287.229426][ T6024] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none. [ 287.427418][ T6023] EXT4-fs (loop1): Ignoring removed orlov option [ 288.041000][ T6043] loop1: detected capacity change from 0 to 512 [ 288.096306][ T6043] EXT4-fs (loop1): Test dummy encryption mode enabled [ 288.098043][ T6043] EXT4-fs (loop1): Unrecognized mount option "smackfstransmute=" or missing value [ 288.139324][ T6047] loop4: detected capacity change from 0 to 512 [ 288.263827][ T6047] EXT4-fs (loop4): Test dummy encryption mode enabled [ 288.283665][ T6047] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 1: comm syz.4.474: invalid block [ 288.287256][ T6047] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.474: couldn't read orphan inode 11 (err -117) [ 288.315776][ T6047] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,resuid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,user_xattr,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 289.546743][ T6056] overlayfs: missing 'workdir' [ 289.719365][ T4880] handle_bad_sector: 10829 callbacks suppressed [ 289.719383][ T4880] attempt to access beyond end of device [ 289.719383][ T4880] loop0: rw=0, want=58992, limit=40427 [ 290.949951][ T4880] attempt to access beyond end of device [ 290.949951][ T4880] loop0: rw=0, want=59000, limit=40427 [ 290.952790][ T4880] attempt to access beyond end of device [ 290.952790][ T4880] loop0: rw=0, want=59008, limit=40427 [ 291.034810][ T4880] attempt to access beyond end of device [ 291.034810][ T4880] loop0: rw=0, want=59016, limit=40427 [ 291.039128][ T4880] attempt to access beyond end of device [ 291.039128][ T4880] loop0: rw=0, want=59024, limit=40427 [ 291.042000][ T4880] attempt to access beyond end of device [ 291.042000][ T4880] loop0: rw=0, want=59032, limit=40427 [ 291.059002][ T4880] attempt to access beyond end of device [ 291.059002][ T4880] loop0: rw=0, want=59040, limit=40427 [ 291.072186][ T4880] attempt to access beyond end of device [ 291.072186][ T4880] loop0: rw=0, want=59048, limit=40427 [ 291.126387][ T4880] attempt to access beyond end of device [ 291.126387][ T4880] loop0: rw=0, want=59056, limit=40427 [ 291.149391][ T4880] attempt to access beyond end of device [ 291.149391][ T4880] loop0: rw=0, want=59064, limit=40427 [ 292.249390][ T6076] loop1: detected capacity change from 0 to 128 [ 294.623431][ T5324] device hsr_slave_0 left promiscuous mode [ 295.402579][ T4880] handle_bad_sector: 5079 callbacks suppressed [ 295.402599][ T4880] attempt to access beyond end of device [ 295.402599][ T4880] loop0: rw=0, want=58904, limit=40427 [ 295.412811][ T4880] attempt to access beyond end of device [ 295.412811][ T4880] loop0: rw=0, want=58912, limit=40427 [ 295.626783][ T4880] attempt to access beyond end of device [ 295.626783][ T4880] loop0: rw=0, want=58920, limit=40427 [ 295.638855][ T4880] attempt to access beyond end of device [ 295.638855][ T4880] loop0: rw=0, want=58928, limit=40427 [ 295.650563][ T4880] attempt to access beyond end of device [ 295.650563][ T4880] loop0: rw=0, want=58936, limit=40427 [ 295.661484][ T4880] attempt to access beyond end of device [ 295.661484][ T4880] loop0: rw=0, want=58944, limit=40427 [ 295.742041][ T4880] attempt to access beyond end of device [ 295.742041][ T4880] loop0: rw=0, want=58952, limit=40427 [ 295.744756][ T4880] attempt to access beyond end of device [ 295.744756][ T4880] loop0: rw=0, want=58960, limit=40427 [ 295.747658][ T4880] attempt to access beyond end of device [ 295.747658][ T4880] loop0: rw=0, want=58968, limit=40427 [ 295.750452][ T4880] attempt to access beyond end of device [ 295.750452][ T4880] loop0: rw=0, want=58976, limit=40427 [ 295.994019][ T5324] device hsr_slave_1 left promiscuous mode [ 296.726372][ T5324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.728377][ T5324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.731479][ T5324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.733389][ T5324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.751325][ T5324] device bridge_slave_1 left promiscuous mode [ 296.753069][ T5324] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.808859][ T5324] device bridge_slave_0 left promiscuous mode [ 296.810580][ T5324] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.206151][ T5324] device veth1_macvtap left promiscuous mode [ 297.208116][ T5324] device veth0_macvtap left promiscuous mode [ 297.210008][ T5324] device veth1_vlan left promiscuous mode [ 297.466327][ T4066] Bluetooth: hci6: command 0x0406 tx timeout [ 297.683306][ T5324] team0 (unregistering): Port device team_slave_1 removed [ 297.695008][ T5324] team0 (unregistering): Port device team_slave_0 removed [ 297.704065][ T5324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.773617][ T5324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.981883][ T5324] bond0 (unregistering): Released all slaves [ 298.138401][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 298.182286][ T6112] team1: Mode "" not found [ 298.223727][ T6130] loop3: detected capacity change from 0 to 512 [ 298.283460][ T6137] loop4: detected capacity change from 0 to 256 [ 298.351577][ T6137] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 298.454901][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 298.476734][ T6130] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 299.925329][ T6152] loop1: detected capacity change from 0 to 512 [ 300.847452][ T4880] handle_bad_sector: 28391 callbacks suppressed [ 300.847470][ T4880] attempt to access beyond end of device [ 300.847470][ T4880] loop0: rw=0, want=57632, limit=40427 [ 300.849985][ T6152] EXT4-fs (loop1): Test dummy encryption mode enabled [ 300.854093][ T6152] EXT4-fs (loop1): Unrecognized mount option "smackfstransmute=" or missing value [ 300.855241][ T4880] attempt to access beyond end of device [ 300.855241][ T4880] loop0: rw=0, want=57640, limit=40427 [ 300.861732][ T4880] attempt to access beyond end of device [ 300.861732][ T4880] loop0: rw=0, want=57648, limit=40427 [ 300.874151][ T4880] attempt to access beyond end of device [ 300.874151][ T4880] loop0: rw=0, want=57656, limit=40427 [ 300.888089][ T4880] attempt to access beyond end of device [ 300.888089][ T4880] loop0: rw=0, want=57664, limit=40427 [ 300.896281][ T4880] attempt to access beyond end of device [ 300.896281][ T4880] loop0: rw=0, want=57672, limit=40427 [ 300.899150][ T4880] attempt to access beyond end of device [ 300.899150][ T4880] loop0: rw=0, want=57680, limit=40427 [ 300.911688][ T4880] attempt to access beyond end of device [ 300.911688][ T4880] loop0: rw=0, want=57688, limit=40427 [ 300.931489][ T4880] attempt to access beyond end of device [ 300.931489][ T4880] loop0: rw=0, want=57696, limit=40427 [ 300.955605][ T4880] attempt to access beyond end of device [ 300.955605][ T4880] loop0: rw=0, want=57704, limit=40427 [ 301.126070][ T4132] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 301.568248][ T6163] overlayfs: missing 'lowerdir' [ 301.863035][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 302.037190][ T4132] usb 1-1: Using ep0 maxpacket: 16 [ 303.026013][ T4132] usb 1-1: device descriptor read/all, error -71 [ 303.034857][ T6177] udc-core: couldn't find an available UDC or it's busy [ 303.048848][ T6177] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 303.178258][ T6167] team1: Mode "" not found [ 305.385667][ T6195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'. [ 305.735508][ T6212] serio: Serial port tty27 [ 305.791365][ T6214] mmap: syz.1.523 (6214) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 305.893359][ T4880] handle_bad_sector: 9740 callbacks suppressed [ 305.893376][ T4880] attempt to access beyond end of device [ 305.893376][ T4880] loop0: rw=0, want=58112, limit=40427 [ 305.922010][ T4880] attempt to access beyond end of device [ 305.922010][ T4880] loop0: rw=0, want=58120, limit=40427 [ 306.040342][ T4880] attempt to access beyond end of device [ 306.040342][ T4880] loop0: rw=0, want=58128, limit=40427 [ 306.043353][ T4880] attempt to access beyond end of device [ 306.043353][ T4880] loop0: rw=0, want=58136, limit=40427 [ 306.128757][ T4880] attempt to access beyond end of device [ 306.128757][ T4880] loop0: rw=0, want=58144, limit=40427 [ 306.131463][ T4880] attempt to access beyond end of device [ 306.131463][ T4880] loop0: rw=0, want=58152, limit=40427 [ 306.134169][ T4880] attempt to access beyond end of device [ 306.134169][ T4880] loop0: rw=0, want=58160, limit=40427 [ 306.889420][ T4880] attempt to access beyond end of device [ 306.889420][ T4880] loop0: rw=0, want=58168, limit=40427 [ 306.892220][ T4880] attempt to access beyond end of device [ 306.892220][ T4880] loop0: rw=0, want=58176, limit=40427 [ 306.895032][ T4880] attempt to access beyond end of device [ 306.895032][ T4880] loop0: rw=0, want=58184, limit=40427 [ 308.478817][ T6235] loop1: detected capacity change from 0 to 256 [ 308.576804][ T6235] exfat: Deprecated parameter 'utf8' [ 308.578262][ T6235] exfat: Deprecated parameter 'namecase' [ 308.579892][ T6235] exfat: Deprecated parameter 'utf8' [ 308.610280][ T6235] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 310.059481][ T6243] device syzkaller0 entered promiscuous mode [ 311.115951][ T4880] handle_bad_sector: 6104 callbacks suppressed [ 311.115970][ T4880] attempt to access beyond end of device [ 311.115970][ T4880] loop0: rw=0, want=58064, limit=40427 [ 311.120292][ T4880] attempt to access beyond end of device [ 311.120292][ T4880] loop0: rw=0, want=58072, limit=40427 [ 311.123057][ T4880] attempt to access beyond end of device [ 311.123057][ T4880] loop0: rw=0, want=58080, limit=40427 [ 311.246018][ T4880] attempt to access beyond end of device [ 311.246018][ T4880] loop0: rw=0, want=58088, limit=40427 [ 311.248881][ T4880] attempt to access beyond end of device [ 311.248881][ T4880] loop0: rw=0, want=58096, limit=40427 [ 311.251709][ T4880] attempt to access beyond end of device [ 311.251709][ T4880] loop0: rw=0, want=58104, limit=40427 [ 311.254475][ T4880] attempt to access beyond end of device [ 311.254475][ T4880] loop0: rw=0, want=58112, limit=40427 [ 311.528222][ T4880] attempt to access beyond end of device [ 311.528222][ T4880] loop0: rw=0, want=58120, limit=40427 [ 311.553579][ T4880] attempt to access beyond end of device [ 311.553579][ T4880] loop0: rw=0, want=58128, limit=40427 [ 311.582685][ T4880] attempt to access beyond end of device [ 311.582685][ T4880] loop0: rw=0, want=58136, limit=40427 [ 312.846688][ T6259] loop4: detected capacity change from 0 to 512 [ 313.014796][ T6259] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 313.048156][ T6259] EXT4-fs (loop4): 1 truncate cleaned up [ 313.049752][ T6259] EXT4-fs (loop4): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 313.179688][ T6267] loop1: detected capacity change from 0 to 256 [ 313.981279][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 314.208372][ T6273] loop2: detected capacity change from 0 to 512 [ 314.319434][ T6273] EXT4-fs (loop2): Ignoring removed nobh option [ 314.321033][ T6273] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 314.326199][ T4132] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 314.340241][ T6273] EXT4-fs (loop2): 1 truncate cleaned up [ 314.365935][ T6273] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 314.651950][ T4132] usb 1-1: Using ep0 maxpacket: 32 [ 314.657703][ T6275] loop4: detected capacity change from 0 to 512 [ 314.659930][ T6281] loop1: detected capacity change from 0 to 512 [ 315.520024][ T6275] EXT4-fs (loop4): Test dummy encryption mode enabled [ 315.521826][ T6275] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 315.523755][ T6275] EXT4-fs (loop4): Test dummy encryption mode enabled [ 315.533020][ T6281] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 315.534882][ T6281] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 315.548884][ T6281] EXT4-fs (loop1): Unrecognized mount option "dont_appraise" or missing value [ 315.575423][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.578605][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.593825][ T6275] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 1: comm syz.4.541: invalid block [ 315.597312][ T6275] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.541: couldn't read orphan inode 11 (err -117) [ 315.600560][ T6275] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,mblk_io_submit,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 315.655996][ T4132] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.661043][ T4132] usb 1-1: config 0 has no interfaces? [ 315.866543][ T4132] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 315.869009][ T4132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.871123][ T4132] usb 1-1: Product: syz [ 315.872159][ T4132] usb 1-1: Manufacturer: syz [ 315.873286][ T4132] usb 1-1: SerialNumber: syz [ 315.893038][ T4132] usb 1-1: config 0 descriptor?? [ 316.442740][ T4880] handle_bad_sector: 7860 callbacks suppressed [ 316.442758][ T4880] attempt to access beyond end of device [ 316.442758][ T4880] loop0: rw=524288, want=57784, limit=40427 [ 316.455044][ T4880] attempt to access beyond end of device [ 316.455044][ T4880] loop0: rw=524288, want=57792, limit=40427 [ 316.473078][ T4880] attempt to access beyond end of device [ 316.473078][ T4880] loop0: rw=524288, want=57800, limit=40427 [ 316.510796][ T4880] attempt to access beyond end of device [ 316.510796][ T4880] loop0: rw=524288, want=57808, limit=40427 [ 316.543664][ T4880] attempt to access beyond end of device [ 316.543664][ T4880] loop0: rw=524288, want=57816, limit=40427 [ 316.548957][ T6294] netlink: 'syz.4.546': attribute type 4 has an invalid length. [ 316.581358][ T4880] attempt to access beyond end of device [ 316.581358][ T4880] loop0: rw=524288, want=57824, limit=40427 [ 316.584359][ T4880] attempt to access beyond end of device [ 316.584359][ T4880] loop0: rw=524288, want=57832, limit=40427 [ 316.637884][ T4880] attempt to access beyond end of device [ 316.637884][ T4880] loop0: rw=524288, want=57840, limit=40427 [ 316.684944][ T4880] attempt to access beyond end of device [ 316.684944][ T4880] loop0: rw=524288, want=57848, limit=40427 [ 316.698919][ T4880] attempt to access beyond end of device [ 316.698919][ T4880] loop0: rw=524288, want=57856, limit=40427 [ 316.758132][ T4066] usb 1-1: USB disconnect, device number 8 [ 317.068410][ T6300] loop4: detected capacity change from 0 to 256 [ 317.153002][ T6300] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.267309][ T6290] loop3: detected capacity change from 0 to 40427 [ 317.350894][ T6290] F2FS-fs (loop3): invalid crc value [ 317.393476][ T6290] F2FS-fs (loop3): Found nat_bits in checkpoint [ 317.437996][ T6290] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 317.447132][ T6290] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 317.471995][ T6305] netlink: 44 bytes leftover after parsing attributes in process `syz.0.549'. [ 317.474263][ T6305] netlink: 43 bytes leftover after parsing attributes in process `syz.0.549'. [ 317.482551][ T6305] netlink: 'syz.0.549': attribute type 5 has an invalid length. [ 317.484669][ T6305] netlink: 43 bytes leftover after parsing attributes in process `syz.0.549'. [ 317.574572][ T6308] loop1: detected capacity change from 0 to 512 [ 317.648944][ T6308] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 317.698169][ T6308] EXT4-fs (loop1): 1 truncate cleaned up [ 317.699734][ T6308] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 317.712235][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 318.049844][ T6325] loop2: detected capacity change from 0 to 256 [ 318.052266][ T6325] exfat: Deprecated parameter 'utf8' [ 318.053813][ T6325] exfat: Deprecated parameter 'namecase' [ 318.060083][ T6325] exfat: Deprecated parameter 'utf8' [ 318.083134][ T6325] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 322.388208][ T4880] handle_bad_sector: 10136 callbacks suppressed [ 322.388228][ T4880] attempt to access beyond end of device [ 322.388228][ T4880] loop0: rw=524288, want=57352, limit=40427 [ 322.417123][ T4880] attempt to access beyond end of device [ 322.417123][ T4880] loop0: rw=524288, want=57360, limit=40427 [ 322.423786][ T4880] attempt to access beyond end of device [ 322.423786][ T4880] loop0: rw=524288, want=57368, limit=40427 [ 322.516901][ T6340] loop1: detected capacity change from 0 to 16 [ 323.398539][ T4880] attempt to access beyond end of device [ 323.398539][ T4880] loop0: rw=524288, want=57376, limit=40427 [ 323.401472][ T4880] attempt to access beyond end of device [ 323.401472][ T4880] loop0: rw=524288, want=57384, limit=40427 [ 323.404359][ T4880] attempt to access beyond end of device [ 323.404359][ T4880] loop0: rw=524288, want=57392, limit=40427 [ 323.407455][ T4880] attempt to access beyond end of device [ 323.407455][ T4880] loop0: rw=524288, want=57400, limit=40427 [ 323.410133][ T4880] attempt to access beyond end of device [ 323.410133][ T4880] loop0: rw=524288, want=57408, limit=40427 [ 323.413252][ T4880] attempt to access beyond end of device [ 323.413252][ T4880] loop0: rw=524288, want=57416, limit=40427 [ 323.644421][ T4880] attempt to access beyond end of device [ 323.644421][ T4880] loop0: rw=524288, want=57424, limit=40427 [ 323.930595][ T6351] loop1: detected capacity change from 0 to 512 [ 324.779086][ T6356] overlayfs: missing 'lowerdir' [ 324.975299][ T6359] loop2: detected capacity change from 0 to 256 [ 327.120397][ T6351] EXT4-fs: failed to create workqueue [ 327.121871][ T6351] EXT4-fs (loop1): mount failed [ 327.352783][ T6374] loop1: detected capacity change from 0 to 512 [ 327.414000][ T4880] handle_bad_sector: 3371 callbacks suppressed [ 327.414017][ T4880] attempt to access beyond end of device [ 327.414017][ T4880] loop0: rw=0, want=57880, limit=40427 [ 327.425733][ T6380] loop2: detected capacity change from 0 to 256 [ 327.428517][ T4880] attempt to access beyond end of device [ 327.428517][ T4880] loop0: rw=0, want=57888, limit=40427 [ 327.441765][ T4880] attempt to access beyond end of device [ 327.441765][ T4880] loop0: rw=0, want=57896, limit=40427 [ 327.444950][ T4880] attempt to access beyond end of device [ 327.444950][ T4880] loop0: rw=0, want=57904, limit=40427 [ 327.452266][ T4880] attempt to access beyond end of device [ 327.452266][ T4880] loop0: rw=0, want=57912, limit=40427 [ 327.455338][ T4880] attempt to access beyond end of device [ 327.455338][ T4880] loop0: rw=0, want=57920, limit=40427 [ 327.474988][ T6374] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 327.487044][ T6380] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 327.517305][ T4880] attempt to access beyond end of device [ 327.517305][ T4880] loop0: rw=0, want=57928, limit=40427 [ 327.520296][ T4880] attempt to access beyond end of device [ 327.520296][ T4880] loop0: rw=0, want=57936, limit=40427 [ 327.523100][ T4880] attempt to access beyond end of device [ 327.523100][ T4880] loop0: rw=0, want=57944, limit=40427 [ 327.547973][ T6374] EXT4-fs (loop1): 1 truncate cleaned up [ 327.549367][ T6374] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 327.566559][ T4880] attempt to access beyond end of device [ 327.566559][ T4880] loop0: rw=0, want=57952, limit=40427 [ 328.988384][ T5775] Bluetooth: hci7: command 0x0406 tx timeout [ 329.263731][ T26] audit: type=1400 audit(329.220:23): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=262620B62402CE0B213EC78A7CE9AE50600E4EBC08727116666D121F8CC9C8F42A53EA359612E288C9F2953FEC644A165FE94D261EE817B543788F3BAED6AB141A9B8061C4414D646B68CCEDC534B04891946ABF6E84425E1ACC2F076F5D51EA6F745937ABBE7D0CCBE371B518C24BBF041F976277ECDEB3CE3D5E5EF73B6FA47BEA4E01601C1C626D6214BA3EC062B37250F7D6EC61311B972857831CAB3F87EC83E9B5BBB2933B9EA476F00D26DD16D5713C741F89257F22566D990626CED6B0AA8351222454B3E0FE985C7CE4EF380CF29293B3177F4BB75ADCC8DA8080E0457424A97712A5F849245FF1A5E6E62DC19D14 pid=6403 comm="syz.4.582" [ 329.904224][ T6409] chnl_net:caif_netlink_parms(): no params data found [ 330.106489][ T6453] usb usb8: usbfs: process 6453 (syz.1.599) did not claim interface 0 before use [ 330.306204][ T6459] netlink: 'syz.1.601': attribute type 10 has an invalid length. [ 330.308164][ T6459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.601'. [ 330.310770][ T6459] device hsr0 entered promiscuous mode [ 330.323417][ T6459] bridge0: port 3(hsr0) entered blocking state [ 330.325215][ T6459] bridge0: port 3(hsr0) entered disabled state [ 330.328659][ T6459] bridge0: port 3(hsr0) entered blocking state [ 330.330788][ T6459] bridge0: port 3(hsr0) entered forwarding state [ 330.334258][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.336278][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.338955][ T6409] device bridge_slave_0 entered promiscuous mode [ 330.380732][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.386314][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.406172][ T6409] device bridge_slave_1 entered promiscuous mode [ 330.518932][ T6409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.539185][ T6409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.699429][ T6409] team0: Port device team_slave_0 added [ 330.716474][ T6409] team0: Port device team_slave_1 added [ 331.058922][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.060757][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.096114][ T6409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.105614][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.115912][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.162578][ T6409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.301675][ T6499] udc-core: couldn't find an available UDC or it's busy [ 331.303412][ T6499] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 331.347878][ T6409] device hsr_slave_0 entered promiscuous mode [ 331.388034][ T6409] device hsr_slave_1 entered promiscuous mode [ 331.390277][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 331.445980][ T6409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.448058][ T6409] Cannot create hsr debugfs directory [ 331.783679][ T6409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.874000][ T6508] device syz_tun entered promiscuous mode [ 331.878087][ T6508] device macsec1 entered promiscuous mode [ 331.900099][ T6508] device syz_tun left promiscuous mode [ 331.961132][ T6409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.036903][ T6514] udc-core: couldn't find an available UDC or it's busy [ 332.038816][ T6514] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 332.243661][ T6409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.373251][ T6409] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.423065][ T4880] handle_bad_sector: 18539 callbacks suppressed [ 332.423082][ T4880] attempt to access beyond end of device [ 332.423082][ T4880] loop0: rw=524288, want=57352, limit=40427 [ 332.471409][ T4880] attempt to access beyond end of device [ 332.471409][ T4880] loop0: rw=524288, want=57360, limit=40427 [ 332.506299][ T4880] attempt to access beyond end of device [ 332.506299][ T4880] loop0: rw=524288, want=57368, limit=40427 [ 332.509225][ T4880] attempt to access beyond end of device [ 332.509225][ T4880] loop0: rw=524288, want=57376, limit=40427 [ 332.511994][ T4880] attempt to access beyond end of device [ 332.511994][ T4880] loop0: rw=524288, want=57384, limit=40427 [ 332.514842][ T4880] attempt to access beyond end of device [ 332.514842][ T4880] loop0: rw=524288, want=57392, limit=40427 [ 332.535660][ T4880] attempt to access beyond end of device [ 332.535660][ T4880] loop0: rw=524288, want=57400, limit=40427 [ 332.539124][ T4880] attempt to access beyond end of device [ 332.539124][ T4880] loop0: rw=524288, want=57408, limit=40427 [ 332.542021][ T4880] attempt to access beyond end of device [ 332.542021][ T4880] loop0: rw=524288, want=57416, limit=40427 [ 332.556389][ T4880] attempt to access beyond end of device [ 332.556389][ T4880] loop0: rw=524288, want=57424, limit=40427 [ 332.777629][ T6409] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.811844][ T6549] loop1: detected capacity change from 0 to 256 [ 332.825974][ T25] Bluetooth: hci8: command 0x0406 tx timeout [ 332.856924][ T6549] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 332.875302][ T6409] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.927760][ T6409] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 333.120723][ T6409] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.048532][ T27] INFO: task kworker/u4:9:4157 blocked for more than 143 seconds. [ 334.050513][ T27] Not tainted 5.15.167-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 334.056345][ T3604] Bluetooth: hci2: command 0x041b tx timeout [ 334.075847][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.078256][ T27] task:kworker/u4:9 state:D stack: 0 pid: 4157 ppid: 2 flags:0x00000008 [ 334.080732][ T27] Workqueue: writeback wb_workfn (flush-7:0) [ 334.082257][ T27] Call trace: [ 334.083033][ T27] __switch_to+0x308/0x5e8 [ 334.084090][ T27] __schedule+0xf10/0x1e48 [ 334.085157][ T27] schedule+0x11c/0x1c8 [ 334.183996][ T27] rwsem_down_write_slowpath+0xd94/0x17e0 [ 334.185649][ T27] down_write+0xe8/0x12c [ 334.199826][ T27] f2fs_balance_fs+0x3e8/0x6a0 [ 334.201140][ T27] f2fs_write_inode+0x42c/0x4a0 [ 334.202444][ T27] __writeback_single_inode+0x584/0x13a4 [ 334.203883][ T27] writeback_sb_inodes+0x94c/0x1654 [ 334.205170][ T27] __writeback_inodes_wb+0x110/0x39c [ 334.226006][ T27] wb_writeback+0x410/0xfc8 [ 334.227127][ T27] wb_workfn+0xbb4/0x1070 [ 334.228211][ T27] process_one_work+0x790/0x11b8 [ 334.229410][ T27] worker_thread+0x910/0x1034 [ 334.230578][ T27] kthread+0x37c/0x45c [ 334.231585][ T27] ret_from_fork+0x10/0x20 [ 334.237453][ T27] [ 334.237453][ T27] Showing all locks held in the system: [ 334.239371][ T27] 1 lock held by khungtaskd/27: [ 334.240651][ T27] #0: ffff800014c917e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 334.243029][ T27] 2 locks held by kworker/1:3/3604: [ 334.244318][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 334.265951][ T27] #1: ffff800022b87c00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 334.268555][ T27] 2 locks held by getty/3782: [ 334.270691][ T27] #0: ffff0000d4770098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 334.273122][ T27] #1: ffff80001d60e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1204 [ 334.275642][ T27] 2 locks held by kworker/1:5/4065: [ 334.290890][ T27] #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 334.293621][ T27] #1: ffff800020267c00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 334.297727][ T27] 3 locks held by kworker/0:9/4132: [ 334.299032][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 334.301608][ T27] #1: ffff8000204c7c00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 334.304566][ T27] #2: ffff0000e3d50240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x274/0x33c4 [ 334.307761][ T27] 4 locks held by kworker/u4:9/4157: [ 334.309106][ T27] #0: ffff0000c0df4938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 334.311609][ T27] #1: ffff80001d2c7c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 334.314088][ T27] #2: ffff0000d6f240e0 (&type->s_umount_key#61){++++}-{3:3}, at: trylock_super+0x28/0xf8 [ 334.316904][ T27] #3: ffff0000d0b3d108 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x3e8/0x6a0 [ 334.319078][ T27] 3 locks held by kworker/1:9/4177: [ 334.320267][ T27] #0: ffff0000d2c09538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 334.322893][ T27] #1: ffff8000202b7c00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 334.325785][ T27] #2: ffff800016bf2868 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 334.328455][ T27] 6 locks held by syz.0.184/4880: [ 334.329715][ T27] 5 locks held by kworker/u4:18/5324: [ 334.330871][ T27] #0: ffff0000c03f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 334.333170][ T27] #1: ffff800022187c00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 334.335354][ T27] #2: ffff800016be7090 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0x9bc [ 334.338331][ T27] #3: ffff800016bf2868 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 334.340217][ T27] #4: ffff800014c95de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2f0/0x660 [ 334.342556][ T27] 3 locks held by syz-executor/5334: [ 334.343798][ T27] #0: ffff0000ca614ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060 [ 334.346877][ T27] #1: ffff0000ca614078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x338/0x1060 [ 334.349252][ T27] #2: ffff800016d361a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 334.351805][ T27] 1 lock held by syz-executor/6409: [ 334.352987][ T27] #0: ffff800016bf2868 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0xa2c/0xdac [ 334.355322][ T27] 2 locks held by syz.1.635/6546: [ 334.358152][ T27] #0: ffff0000e6659a10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc [ 334.360586][ T27] #1: ffff800016bf2868 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 334.362757][ T27] 1 lock held by syz.3.640/6565: [ 334.364030][ T27] #0: ffff800014c95de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2f0/0x660 [ 334.367554][ T27] [ 334.368169][ T27] ============================================= [ 334.368169][ T27] [ 334.370352][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 334.371865][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 334.373972][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 334.376414][ T27] Call trace: [ 334.377323][ T27] dump_backtrace+0x0/0x530 [ 334.378387][ T27] show_stack+0x2c/0x3c [ 334.379377][ T27] dump_stack_lvl+0x108/0x170 [ 334.380714][ T27] dump_stack+0x1c/0x58 [ 334.381824][ T27] panic+0x304/0x8bc [ 334.382873][ T27] hung_task_panic+0x0/0x2c [ 334.384069][ T27] kthread+0x37c/0x45c [ 334.385164][ T27] ret_from_fork+0x10/0x20 [ 334.386294][ T27] SMP: stopping secondary CPUs [ 334.387537][ T27] Kernel Offset: disabled [ 334.388684][ T27] CPU features: 0x8,000081c1,21302e40 [ 334.390087][ T27] Memory Limit: none [ 335.005068][ T27] Rebooting in 86400 seconds..