last executing test programs: 4.671595131s ago: executing program 1 (id=3066): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a}], "0800040000000000"}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 4.649005743s ago: executing program 3 (id=3067): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 4.405724778s ago: executing program 3 (id=3068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 4.205957638s ago: executing program 3 (id=3069): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYBLOB="fd5a30494a98e2fd594c7f5575b44a6b9875a6deb8a9ed63e149fdc3a5e345922596d46c4a2b3978044b864f941e1137ce034002852c9ef5606de83cf95a02ef4bacef1188250b8a73609da88d66c4224c3ea46f117012f2aab4bca171e710172b4c22e4d51e27059feb304bb3e260a2", @ANYRES32=0x0], 0x1, 0x1282, &(0x7f0000002880)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) creat(&(0x7f0000000040)='./bus\x00', 0x0) 3.746952754s ago: executing program 3 (id=3070): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018"], 0xc0}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.538158765s ago: executing program 3 (id=3072): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 3.356850784s ago: executing program 1 (id=3073): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7ffffffb}]}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) gettid() 3.177973641s ago: executing program 1 (id=3074): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) 3.040752975s ago: executing program 1 (id=3075): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000000080)=0x1e) 2.8890698s ago: executing program 1 (id=3076): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace"], 0xd0060) 2.682095871s ago: executing program 1 (id=3077): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.653690014s ago: executing program 2 (id=3078): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f000001f680)='net/softnet_stat\x00') 1.548500325s ago: executing program 0 (id=3082): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7ffffffb}]}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) gettid() 1.359027914s ago: executing program 0 (id=3083): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) 1.357850164s ago: executing program 2 (id=3084): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000000080)=0x1e) 1.219576668s ago: executing program 0 (id=3085): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d4"], 0xd0060) 1.162115074s ago: executing program 2 (id=3086): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dda865694e08605b70220000001800018014000200"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.045789475s ago: executing program 0 (id=3087): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 1.034449237s ago: executing program 2 (id=3088): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r2, r2, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 866.038533ms ago: executing program 2 (id=3089): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 659.297764ms ago: executing program 2 (id=3090): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r4, 0x1000}], 0x1, &(0x7f0000000100)={r5, r6+60000000}, &(0x7f0000000140)={[0xc]}, 0x8) 530.040247ms ago: executing program 3 (id=3091): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7ffffffb}]}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) gettid() 509.705699ms ago: executing program 0 (id=3092): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$eJzsmbFrFEEUxr+Z3ds7gwRtLGwsDBjR7O3uqaSJEMFSEKKo5WHWEN3k5LJC7kDwsLHRzkKwtbG0sLCy8C+w1UIFwcIrBQthZGZnd4e93fMOTwXzfpDJN/PezLz3YF6xB4Ig9iyfPn778PDc8qWTAPZjAXW9/sXKfbjh//7JnROPV84/ffHu2Zvt+buviucxAEJUXve9aHIAvF61EIPZyYoQmM/tC0YIWuMyOI5rfQUMbiJ/CEUyCcFwTfvcNHRnnxZR6F7vROs3NqPQk4Mvh0AOLTM+GdRwwLAOoKGiE4IZ9p1e/1Y7isJuUdREes+IaVrBK8up41vlWEFaPSGk/9UH9wdyrmsDDzyrnw8OX+sWGNa0XkYdruvmJTHyP2zn51uT5D9jcVbd9WjSXc+VOLj05wNLRPpGptkly/g3SvcfidpMzmHFFfmgs5VDw7QHmj6f/1nu+LVPY/xjhLaPmN7ORdGF34jQKSlUJvL+JDv7MaM/2bCz/tGMt243d3r9pc2t9ka4EW4HQeuMd8rzTgdN1YiScUz/a6j+NGecX6vwdZiD3XYcd/1dIO762TxIxjwBrL3sfJVbDkD1P47Fo+oI1VNV2vXyO5j+4+q/VItWuee9ypwIgiAIgiAIgiAIgiAIgiDKOQKG5JcwwfQH0TKCi+oL5c8AAAD//40vYXw=") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) pwrite64(r1, 0x0, 0x0, 0x8080c61) sendmsg$nl_generic(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r2, 0xe0ffff, 0x19, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 0 (id=3093): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) kernel console output (not intermixed with test programs): 74.807422][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.147552][ T7432] loop2: detected capacity change from 0 to 1024 [ 177.194776][ T7432] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.244058][ T7432] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 177.298810][ T7432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.474870][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.482122][ T7459] loop3: detected capacity change from 0 to 1024 [ 178.530986][ T7459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.585021][ T7459] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 178.623584][ T7459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.773523][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.222586][ T5874] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 181.416961][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 181.434206][ T5874] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 181.452449][ T5874] usb 2-1: config 0 has no interface number 0 [ 181.478842][ T5874] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 181.522918][ T5874] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 181.562980][ T5874] usb 2-1: config 0 interface 41 has no altsetting 0 [ 181.602767][ T5874] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 181.642466][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.673199][ T5874] usb 2-1: Product: syz [ 181.682489][ T5874] usb 2-1: Manufacturer: syz [ 181.697653][ T5874] usb 2-1: SerialNumber: syz [ 181.733590][ T5874] usb 2-1: config 0 descriptor?? [ 181.739298][ T7474] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.752160][ T7474] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.029920][ T5874] CoreChips: probe of 2-1:0.41 failed with error -71 [ 182.071529][ T5874] usb 2-1: USB disconnect, device number 4 [ 182.489293][ T7496] loop3: detected capacity change from 0 to 1024 [ 182.539500][ T7496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.592909][ T7496] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 182.658953][ T7496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.854158][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.689435][ T7537] loop2: detected capacity change from 0 to 1024 [ 183.731923][ T7537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.780147][ T7537] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 183.840351][ T7537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.034185][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.611722][ T7563] loop2: detected capacity change from 0 to 1024 [ 184.636719][ T7563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.713151][ T7563] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 184.752204][ T7563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.904371][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.306902][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 191.314761][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 191.320798][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 191.326967][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 194.350409][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.356937][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.897022][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 198.081636][ T7735] loop1: detected capacity change from 0 to 2048 [ 198.122585][ T7735] EXT4-fs: Ignoring removed bh option [ 198.141904][ T7735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.164297][ T7735] EXT4-fs: Ignoring removed nobh option [ 198.200291][ T7735] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 200.825482][ T7759] loop3: detected capacity change from 0 to 128 [ 200.865850][ T7759] FAT-fs (loop3): bogus number of FAT sectors [ 200.888905][ T7759] FAT-fs (loop3): Can't find a valid FAT filesystem [ 203.139282][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 203.302534][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 203.516823][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 203.540660][ T8] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 203.572449][ T8] usb 2-1: config 0 has no interface number 0 [ 203.607521][ T8] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 203.633997][ T8] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 203.684834][ T8] usb 2-1: config 0 interface 41 has no altsetting 0 [ 203.704953][ T8] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 203.734335][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.742319][ T8] usb 2-1: Product: syz [ 203.782702][ T8] usb 2-1: Manufacturer: syz [ 203.794261][ T8] usb 2-1: SerialNumber: syz [ 203.820008][ T8] usb 2-1: config 0 descriptor?? [ 203.829702][ T7820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.839368][ T7820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 204.018220][ T7833] loop3: detected capacity change from 0 to 512 [ 204.043482][ T7833] ======================================================= [ 204.043482][ T7833] WARNING: The mand mount option has been deprecated and [ 204.043482][ T7833] and is ignored by this kernel. Remove the mand [ 204.043482][ T7833] option from the mount to silence this warning. [ 204.043482][ T7833] ======================================================= [ 204.102701][ T8] CoreChips: probe of 2-1:0.41 failed with error -71 [ 204.145257][ T8] usb 2-1: USB disconnect, device number 5 [ 204.218197][ T7833] EXT4-fs error (device loop3): __ext4_fill_super:5497: inode #2: comm syz.3.847: inode has both inline data and extents flags [ 204.262724][ T7833] EXT4-fs (loop3): get root inode failed [ 204.281930][ T7833] EXT4-fs (loop3): mount failed [ 206.235124][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 206.408117][ T7874] loop2: detected capacity change from 0 to 1024 [ 206.451321][ T7874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.505024][ T7874] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 206.561791][ T7874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.730619][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.578135][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 208.826228][ T7902] loop2: detected capacity change from 0 to 1024 [ 208.845001][ T7902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.904710][ T7902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 208.954691][ T7902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.063609][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.807744][ T7926] loop3: detected capacity change from 0 to 1024 [ 210.840299][ T7926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.912255][ T7926] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 210.987097][ T7926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.164645][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.571190][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 214.302788][ T5874] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 214.484754][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 214.496265][ T5874] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 214.515049][ T5874] usb 1-1: config 0 has no interface number 0 [ 214.521182][ T5874] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 214.591832][ T5874] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 214.632193][ T5874] usb 1-1: config 0 interface 41 has no altsetting 0 [ 214.644983][ T5874] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 214.654180][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.700207][ T5874] usb 1-1: Product: syz [ 214.713189][ T5874] usb 1-1: Manufacturer: syz [ 214.717808][ T5874] usb 1-1: SerialNumber: syz [ 214.754238][ T5874] usb 1-1: config 0 descriptor?? [ 214.780268][ T7958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 214.787723][ T7958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.013569][ T5874] CoreChips: probe of 1-1:0.41 failed with error -71 [ 215.049306][ T5874] usb 1-1: USB disconnect, device number 4 [ 215.908226][ T7980] loop0: detected capacity change from 0 to 1024 [ 215.964014][ T7980] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.002292][ T7980] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 216.057583][ T7980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.188430][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.796434][ T8005] loop2: detected capacity change from 0 to 1024 [ 219.833201][ T8005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.893145][ T8005] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 219.931653][ T8005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.123702][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.352343][ T8049] loop2: detected capacity change from 0 to 1024 [ 224.393341][ T8049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.459617][ T8049] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 224.492717][ T8049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.634116][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.625906][ T8080] loop0: detected capacity change from 0 to 1024 [ 226.653504][ T8080] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.694735][ T8080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 226.734255][ T8080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.914169][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.131215][ T8111] loop1: detected capacity change from 0 to 1024 [ 228.163126][ T8111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.218552][ T8111] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 228.255845][ T8111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.464189][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.092582][ T5792] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 229.282485][ T5792] usb 2-1: Using ep0 maxpacket: 16 [ 229.289050][ T5792] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 229.318013][ T5792] usb 2-1: config 0 has no interface number 0 [ 229.344479][ T5792] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 229.384840][ T5792] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 229.432920][ T5792] usb 2-1: config 0 interface 41 has no altsetting 0 [ 229.451430][ T5792] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 229.462598][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.470600][ T5792] usb 2-1: Product: syz [ 229.515301][ T5792] usb 2-1: Manufacturer: syz [ 229.519908][ T5792] usb 2-1: SerialNumber: syz [ 229.573679][ T5792] usb 2-1: config 0 descriptor?? [ 229.583096][ T8123] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.590297][ T8123] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.827076][ T5792] CoreChips: probe of 2-1:0.41 failed with error -71 [ 229.863663][ T5792] usb 2-1: USB disconnect, device number 6 [ 231.435079][ T8150] loop1: detected capacity change from 0 to 1024 [ 231.472758][ T8150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.512778][ T8150] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 231.558325][ T8150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.717584][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.322725][ T5792] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 232.512331][ T5792] usb 2-1: Using ep0 maxpacket: 16 [ 232.525554][ T5792] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 232.542451][ T5792] usb 2-1: config 0 has no interface number 0 [ 232.561679][ T5792] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 232.604344][ T5792] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 232.644852][ T5792] usb 2-1: config 0 interface 41 has no altsetting 0 [ 232.686520][ T5792] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 232.705971][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.736072][ T5792] usb 2-1: Product: syz [ 232.751791][ T5792] usb 2-1: Manufacturer: syz [ 232.772608][ T5792] usb 2-1: SerialNumber: syz [ 232.791981][ T5792] usb 2-1: config 0 descriptor?? [ 232.821274][ T8156] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.831221][ T8156] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 233.076293][ T5792] CoreChips: probe of 2-1:0.41 failed with error -71 [ 233.124314][ T5792] usb 2-1: USB disconnect, device number 7 [ 237.206183][ T8197] loop2: detected capacity change from 0 to 512 [ 237.309541][ T8197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.372745][ T8197] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.459231][ T27] audit: type=1800 audit(1763424540.417:2): pid=8197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1000" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 237.785207][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.707577][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 242.310462][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 255.785519][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.791853][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.909220][ T8505] loop3: detected capacity change from 0 to 1024 [ 259.947124][ T8505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.016456][ T8505] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 260.064243][ T8505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.213629][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.153976][ T8517] loop3: detected capacity change from 0 to 512 [ 261.246582][ T8517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.312620][ T8517] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.513768][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.760662][ T8592] loop2: detected capacity change from 0 to 1024 [ 267.797947][ T8592] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.858338][ T8592] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 267.910285][ T8592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.062111][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.262916][ T8632] loop0: detected capacity change from 0 to 512 [ 270.271333][ T8630] loop1: detected capacity change from 0 to 1024 [ 270.291206][ T8630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.333182][ T8632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.346039][ T8630] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 270.380696][ T8630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.401406][ T8632] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.482857][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 270.521132][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.604686][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.664338][ T8] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 270.679598][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.713648][ T8] usb 3-1: config 0 descriptor?? [ 270.744464][ T8] usb 3-1: selecting invalid altsetting 1 [ 270.899950][ T8] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 272.231640][ T8628] loop2: detected capacity change from 0 to 4096 [ 272.542246][ T8628] EXT4-fs (loop2): Test dummy encryption mode enabled [ 272.569672][ T8628] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 272.611467][ T8628] System zones: 0-5 [ 272.627297][ T8628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.007130][ T8628] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 273.097581][ T5792] usb 3-1: USB disconnect, device number 4 [ 273.694198][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.092490][ T5792] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 275.272476][ T5792] usb 1-1: Using ep0 maxpacket: 16 [ 275.294461][ T5792] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 275.322641][ T5792] usb 1-1: config 0 has no interface number 0 [ 275.328731][ T5792] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 275.382844][ T5792] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 275.424092][ T5792] usb 1-1: config 0 interface 41 has no altsetting 0 [ 275.485089][ T5792] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 275.494909][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.525030][ T5792] usb 1-1: Product: syz [ 275.535123][ T5792] usb 1-1: Manufacturer: syz [ 275.546181][ T5792] usb 1-1: SerialNumber: syz [ 275.572887][ T5792] usb 1-1: config 0 descriptor?? [ 275.593504][ T8677] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 275.600818][ T8677] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 275.856377][ T5792] CoreChips: probe of 1-1:0.41 failed with error -71 [ 275.901930][ T5792] usb 1-1: USB disconnect, device number 5 [ 276.872320][ T8734] loop1: detected capacity change from 0 to 1024 [ 276.909965][ T8734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.960560][ T8734] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 278.230637][ T8734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.414126][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.209815][ T8778] loop0: detected capacity change from 0 to 512 [ 279.337967][ T8778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.388596][ T8778] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.623871][ T8786] loop3: detected capacity change from 0 to 1024 [ 279.651129][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.661332][ T8786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.688058][ T8786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 279.769090][ T8786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.919679][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.381421][ T27] audit: type=1326 audit(1763424583.337:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b418f6c9 code=0x7ffc0000 [ 280.413428][ T27] audit: type=1326 audit(1763424583.337:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b418f6c9 code=0x7ffc0000 [ 280.440874][ T27] audit: type=1326 audit(1763424583.337:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b418f6c9 code=0x7ffc0000 [ 280.482955][ T27] audit: type=1326 audit(1763424583.337:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe1b418f6c9 code=0x7ffc0000 [ 280.533182][ T27] audit: type=1326 audit(1763424583.347:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b418f6c9 code=0x7ffc0000 [ 280.567312][ T27] audit: type=1326 audit(1763424583.347:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b418f6c9 code=0x7ffc0000 [ 280.596213][ T27] audit: type=1326 audit(1763424583.347:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe1b418f6c9 code=0x7ffc0000 [ 280.625161][ T27] audit: type=1326 audit(1763424583.347:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe1b418f6c9 code=0x7ffc0000 [ 280.817533][ T8805] loop0: detected capacity change from 0 to 1024 [ 280.853406][ T8805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.907059][ T8805] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 280.962202][ T8805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.114292][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.786258][ T8826] loop0: detected capacity change from 0 to 512 [ 281.869258][ T8826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.907079][ T8826] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.048963][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.442556][ T5792] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 284.637256][ T5792] usb 2-1: Using ep0 maxpacket: 16 [ 284.673339][ T5792] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 284.712468][ T5792] usb 2-1: config 0 has no interface number 0 [ 284.718912][ T5792] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 284.756933][ T5792] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 284.802497][ T5792] usb 2-1: config 0 interface 41 has no altsetting 0 [ 284.831654][ T5792] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 284.851094][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.891087][ T5792] usb 2-1: Product: syz [ 284.905493][ T5792] usb 2-1: Manufacturer: syz [ 284.910860][ T5792] usb 2-1: SerialNumber: syz [ 284.943594][ T5792] usb 2-1: config 0 descriptor?? [ 284.969338][ T8877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.976781][ T8877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 285.218427][ T5792] CoreChips: probe of 2-1:0.41 failed with error -71 [ 285.253783][ T5792] usb 2-1: USB disconnect, device number 8 [ 289.924988][ T8949] netlink: 'syz.0.1331': attribute type 2 has an invalid length. [ 291.401416][ T8962] loop2: detected capacity change from 0 to 1024 [ 291.470394][ T8962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.653670][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.843560][ T8978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 294.163408][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 294.382661][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 294.396365][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.419134][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.460366][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.489989][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.514201][ T8] usb 2-1: Product: syz [ 294.518382][ T8] usb 2-1: Manufacturer: syz [ 294.562590][ T8] usb 2-1: SerialNumber: syz [ 294.889773][ T8] usb 2-1: 0:2 : does not exist [ 294.952652][ T8] usb 2-1: USB disconnect, device number 9 [ 295.386520][ T9001] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1344'. [ 296.304174][ T9024] netlink: 620 bytes leftover after parsing attributes in process `syz.1.1361'. [ 296.539459][ T9028] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 296.552487][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 296.754345][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 296.760856][ T8] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 296.779169][ T8] usb 3-1: config 0 has no interface number 0 [ 296.803336][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 296.848795][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 296.882460][ T8] usb 3-1: config 0 interface 41 has no altsetting 0 [ 296.920144][ T8] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 296.932449][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.970832][ T8] usb 3-1: Product: syz [ 296.985167][ T8] usb 3-1: Manufacturer: syz [ 296.990698][ T8] usb 3-1: SerialNumber: syz [ 297.026235][ T8] usb 3-1: config 0 descriptor?? [ 297.063477][ T9023] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 297.070687][ T9023] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 297.326682][ T8] CoreChips: probe of 3-1:0.41 failed with error -71 [ 297.360942][ T8] usb 3-1: USB disconnect, device number 5 [ 299.994393][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 300.678580][ T9138] loop0: detected capacity change from 0 to 1024 [ 300.702262][ T9138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.750648][ T9138] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 300.795703][ T9138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.924361][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.416615][ T9162] loop1: detected capacity change from 0 to 256 [ 301.511936][ T9168] loop3: detected capacity change from 0 to 1024 [ 301.546700][ T9168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.601294][ T9168] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 301.657831][ T9168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.805969][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.100429][ T9184] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 302.140637][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 302.172556][ T9184] bridge_slave_1: left allmulticast mode [ 302.188403][ T9184] bridge_slave_1: left promiscuous mode [ 302.209523][ T9184] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.240296][ T9184] bridge_slave_0: left allmulticast mode [ 302.260007][ T9184] bridge_slave_0: left promiscuous mode [ 302.272527][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 302.283216][ T9184] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.478538][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 302.498877][ T8] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 302.532465][ T8] usb 4-1: config 0 has no interface number 0 [ 302.553875][ T8] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 302.592670][ T8] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 302.637312][ T8] usb 4-1: config 0 interface 41 has no altsetting 0 [ 302.675850][ T8] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 302.696116][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.735196][ T8] usb 4-1: Product: syz [ 302.747920][ T8] usb 4-1: Manufacturer: syz [ 302.767057][ T8] usb 4-1: SerialNumber: syz [ 302.793382][ T8] usb 4-1: config 0 descriptor?? [ 302.822362][ T9182] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 302.842562][ T9182] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 303.086563][ T8] CoreChips: probe of 4-1:0.41 failed with error -71 [ 303.119889][ T8] usb 4-1: USB disconnect, device number 5 [ 305.135588][ T9233] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1461'. [ 307.292564][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 307.499907][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 307.516532][ T8] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 307.536588][ T8] usb 3-1: config 0 has no interface number 0 [ 307.565015][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 307.605401][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 307.644170][ T8] usb 3-1: config 0 interface 41 has no altsetting 0 [ 307.681670][ T8] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 307.707372][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.735943][ T8] usb 3-1: Product: syz [ 307.754481][ T8] usb 3-1: Manufacturer: syz [ 307.779326][ T8] usb 3-1: SerialNumber: syz [ 307.800207][ T8] usb 3-1: config 0 descriptor?? [ 307.823236][ T9291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.856655][ T9291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.087161][ T8] CoreChips: probe of 3-1:0.41 failed with error -71 [ 308.126188][ T8] usb 3-1: USB disconnect, device number 6 [ 309.774401][ T9325] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 309.781385][ T9325] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 309.844549][ T9325] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 310.972481][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 311.171077][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 311.183071][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.202659][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.243473][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.266298][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.302638][ T8] usb 2-1: Product: syz [ 311.306825][ T8] usb 2-1: Manufacturer: syz [ 311.311417][ T8] usb 2-1: SerialNumber: syz [ 311.562919][ T8] usb 2-1: 0:2 : does not exist [ 311.616597][ T8] usb 2-1: USB disconnect, device number 10 [ 313.512498][ T786] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 313.702489][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 313.724171][ T786] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 313.744297][ T786] usb 2-1: config 0 has no interface number 0 [ 313.750435][ T786] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 313.804652][ T786] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 313.852451][ T786] usb 2-1: config 0 interface 41 has no altsetting 0 [ 313.876443][ T786] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 313.896428][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.927792][ T786] usb 2-1: Product: syz [ 313.931945][ T786] usb 2-1: Manufacturer: syz [ 313.969300][ T786] usb 2-1: SerialNumber: syz [ 313.992911][ T786] usb 2-1: config 0 descriptor?? [ 313.998451][ T9371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.019418][ T9371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.256170][ T786] CoreChips: probe of 2-1:0.41 failed with error -71 [ 314.298092][ T786] usb 2-1: USB disconnect, device number 11 [ 315.912496][ T786] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 316.117258][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 316.147617][ T786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.172447][ T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.226895][ T786] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.242461][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.265223][ T9416] loop0: detected capacity change from 0 to 1024 [ 316.281717][ T786] usb 2-1: Product: syz [ 316.291811][ T786] usb 2-1: Manufacturer: syz [ 316.297709][ T9416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.314579][ T786] usb 2-1: SerialNumber: syz [ 316.341079][ T9416] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 316.384651][ T9416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.513465][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.553807][ T786] usb 2-1: 0:2 : does not exist [ 316.610783][ T786] usb 2-1: USB disconnect, device number 12 [ 317.227358][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.238449][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.512272][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 318.443946][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 318.483277][ T9446] bridge_slave_1: left allmulticast mode [ 318.488956][ T9446] bridge_slave_1: left promiscuous mode [ 318.524421][ T9446] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.570503][ T9446] bridge_slave_0: left allmulticast mode [ 318.582538][ T9446] bridge_slave_0: left promiscuous mode [ 318.622846][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.754733][ T9463] netlink: 556 bytes leftover after parsing attributes in process `syz.3.1566'. [ 321.172598][ T786] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 321.373336][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 321.394700][ T786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.425236][ T786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.459606][ T786] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.479611][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.513231][ T786] usb 4-1: Product: syz [ 321.527577][ T786] usb 4-1: Manufacturer: syz [ 321.532195][ T786] usb 4-1: SerialNumber: syz [ 321.744214][ T9501] netlink: 568 bytes leftover after parsing attributes in process `syz.0.1582'. [ 321.774752][ T786] usb 4-1: 0:2 : does not exist [ 321.828700][ T786] usb 4-1: USB disconnect, device number 6 [ 322.127851][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 322.923695][ T9529] netlink: 568 bytes leftover after parsing attributes in process `syz.0.1594'. [ 325.458991][ T9586] loop1: detected capacity change from 0 to 1024 [ 325.490642][ T9586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 325.543554][ T9586] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 325.603409][ T9586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.743641][ T9592] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1623'. [ 325.773970][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.708272][ T9611] loop2: detected capacity change from 0 to 1024 [ 326.757450][ T9611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.804713][ T9611] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 326.842589][ T9611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.029530][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.760255][ T5874] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 328.953855][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 328.991855][ T5874] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 329.018130][ T5874] usb 1-1: config 0 has no interface number 0 [ 329.042492][ T5874] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 329.079043][ T5874] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 329.115245][ T5874] usb 1-1: config 0 interface 41 has no altsetting 0 [ 329.152241][ T5874] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 329.183529][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.191539][ T5874] usb 1-1: Product: syz [ 329.228096][ T5874] usb 1-1: Manufacturer: syz [ 329.252445][ T5874] usb 1-1: SerialNumber: syz [ 329.275271][ T5874] usb 1-1: config 0 descriptor?? [ 329.303605][ T9656] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.324257][ T9656] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.565540][ T5874] CoreChips: probe of 1-1:0.41 failed with error -71 [ 329.606841][ T5874] usb 1-1: USB disconnect, device number 6 [ 330.555258][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 331.472596][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'. [ 332.938278][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1690'. [ 334.028869][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 337.989672][ T9782] loop3: detected capacity change from 0 to 1024 [ 338.053941][ T9782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 338.082262][ T9782] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 338.137052][ T9782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.274880][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.468991][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1718'. [ 338.512573][ T9794] bridge_slave_1: left allmulticast mode [ 338.540192][ T9794] bridge_slave_1: left promiscuous mode [ 338.556237][ T9794] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.587566][ T9794] bridge_slave_0: left allmulticast mode [ 338.614676][ T9794] bridge_slave_0: left promiscuous mode [ 338.642047][ T9794] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.764327][ T9811] loop3: detected capacity change from 0 to 1024 [ 339.801554][ T9811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 339.853544][ T9811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 339.887533][ T9811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.055661][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.128650][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'. [ 348.251134][ T9886] loop1: detected capacity change from 0 to 1024 [ 348.293552][ T9886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 348.352298][ T9886] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 348.407825][ T9886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.573924][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.669601][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'. [ 350.847736][ T786] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 351.062481][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 351.073485][ T786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.112527][ T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.153769][ T786] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.178419][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.206700][ T786] usb 2-1: Product: syz [ 351.231157][ T786] usb 2-1: Manufacturer: syz [ 351.241216][ T786] usb 2-1: SerialNumber: syz [ 351.473415][ T786] usb 2-1: 0:2 : does not exist [ 351.519137][ T786] usb 2-1: USB disconnect, device number 13 [ 351.566043][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.331426][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1811'. [ 357.933942][T10031] loop1: detected capacity change from 0 to 1024 [ 357.941140][T10031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.013736][T10031] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 358.055428][T10031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.214716][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.359594][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 362.665483][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1849'. [ 362.793487][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1851'. [ 363.573273][ T5874] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 363.598560][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 363.770296][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 363.784393][ T5874] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.822537][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.855784][ T5874] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.891840][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.922467][ T5874] usb 2-1: Product: syz [ 363.935759][ T5874] usb 2-1: Manufacturer: syz [ 363.952029][ T5874] usb 2-1: SerialNumber: syz [ 364.194428][ T5874] usb 2-1: 0:2 : does not exist [ 364.225975][ T5874] usb 2-1: USB disconnect, device number 14 [ 364.911397][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 364.960407][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 365.605440][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 365.673325][T10212] loop1: detected capacity change from 0 to 1024 [ 365.712768][T10212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.757405][T10212] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 365.765777][ T5874] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 365.794724][T10212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.913514][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.963236][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 365.985460][ T5874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.022459][ T5874] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.055622][ T5874] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.084036][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.114414][ T5874] usb 1-1: Product: syz [ 366.118588][ T5874] usb 1-1: Manufacturer: syz [ 366.149859][ T5874] usb 1-1: SerialNumber: syz [ 366.423328][ T5874] usb 1-1: 0:2 : does not exist [ 366.463744][ T5874] usb 1-1: USB disconnect, device number 7 [ 367.302486][ T5874] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 367.520926][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 367.534772][ T5874] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 367.563207][ T5874] usb 1-1: config 0 has no interface number 0 [ 367.582494][ T5874] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 367.622548][ T5874] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 367.667279][ T5874] usb 1-1: config 0 interface 41 has no altsetting 0 [ 367.704791][ T5874] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 367.732822][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.762181][ T5874] usb 1-1: Product: syz [ 367.776528][ T5874] usb 1-1: Manufacturer: syz [ 367.801390][ T5874] usb 1-1: SerialNumber: syz [ 367.812556][ T5874] usb 1-1: config 0 descriptor?? [ 367.837822][T10248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.852794][T10248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 368.085991][ T5874] CoreChips: probe of 1-1:0.41 failed with error -71 [ 368.123962][ T5874] usb 1-1: USB disconnect, device number 8 [ 368.351376][T10269] Zero length message leads to an empty skb [ 368.896469][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 368.942502][T10279] bridge_slave_1: left allmulticast mode [ 368.962487][T10279] bridge_slave_1: left promiscuous mode [ 368.968183][T10279] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.043388][T10279] bridge_slave_0: left allmulticast mode [ 369.049121][T10279] bridge_slave_0: left promiscuous mode [ 369.065383][T10279] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.960144][T10294] loop0: detected capacity change from 0 to 1024 [ 369.995007][T10294] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.042674][T10294] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 370.089383][T10294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.294343][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.663304][T10310] loop2: detected capacity change from 0 to 1024 [ 370.670517][T10310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.737428][T10310] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 370.785066][T10310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.928440][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.033552][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1936'. [ 371.185654][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1938'. [ 372.813599][T10373] loop2: detected capacity change from 0 to 1024 [ 372.820759][T10373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.845776][T10375] loop1: detected capacity change from 0 to 1024 [ 372.871541][T10375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.911078][T10375] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 372.921232][T10373] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 372.953669][T10373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.976599][T10375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.163279][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.183851][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.445593][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1963'. [ 374.099692][T10408] loop2: detected capacity change from 0 to 1024 [ 374.121389][T10410] loop1: detected capacity change from 0 to 1024 [ 374.138895][T10408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.156802][T10410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.191040][T10408] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 374.234043][T10410] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 374.268507][T10408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.292242][T10410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.424839][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.484609][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.157432][T10437] loop3: detected capacity change from 0 to 1024 [ 375.178120][T10437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.225996][T10437] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 375.272530][T10437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.418665][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.245638][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 378.665714][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.672969][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.824668][T10544] loop1: detected capacity change from 0 to 1024 [ 379.860905][T10544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 379.918508][T10544] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 379.952198][T10544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.087560][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.303763][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.320225][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.328397][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.341125][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.349131][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 381.356865][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.599028][T10562] chnl_net:caif_netlink_parms(): no params data found [ 381.863861][T10562] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.871020][T10562] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.896378][T10562] bridge_slave_0: entered allmulticast mode [ 381.923148][T10562] bridge_slave_0: entered promiscuous mode [ 381.940553][T10562] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.948672][T10562] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.961582][T10562] bridge_slave_1: entered allmulticast mode [ 381.969140][T10562] bridge_slave_1: entered promiscuous mode [ 382.218712][T10562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.237753][T10562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.340315][ T1090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.424914][T10562] team0: Port device team_slave_0 added [ 382.448974][T10562] team0: Port device team_slave_1 added [ 382.501868][ T1090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.598956][T10562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.612430][T10562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.645137][T10562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.711143][ T1090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.743741][T10562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.750700][T10562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.784264][T10562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.833122][ T1090] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.900195][T10562] hsr_slave_0: entered promiscuous mode [ 382.920939][T10562] hsr_slave_1: entered promiscuous mode [ 382.929585][T10562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.941710][T10562] Cannot create hsr debugfs directory [ 383.382614][ T5787] Bluetooth: hci4: command tx timeout [ 384.584592][T10562] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.625555][T10562] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.822793][T10562] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.856520][T10562] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 385.368064][T10562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.467842][ T5787] Bluetooth: hci4: command tx timeout [ 385.577999][T10562] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.638153][ T1090] hsr_slave_0: left promiscuous mode [ 385.651658][ T1090] hsr_slave_1: left promiscuous mode [ 385.657964][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.674932][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.696214][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.707819][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.790872][ T1090] veth1_macvtap: left promiscuous mode [ 385.799954][ T1090] veth0_macvtap: left promiscuous mode [ 385.811807][ T1090] veth1_vlan: left promiscuous mode [ 385.818168][ T1090] veth0_vlan: left promiscuous mode [ 385.891773][T10631] loop1: detected capacity change from 0 to 1024 [ 385.913458][T10631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.002203][T10631] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 386.037106][T10631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.209252][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.086594][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 387.168897][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 387.252089][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.387456][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.552797][ T5787] Bluetooth: hci4: command tx timeout [ 388.324754][ T1090] bond0 (unregistering): Released all slaves [ 388.424527][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.431687][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.461540][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.468718][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.004904][T10562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.131122][T10562] veth0_vlan: entered promiscuous mode [ 389.149454][T10562] veth1_vlan: entered promiscuous mode [ 389.219030][T10562] veth0_macvtap: entered promiscuous mode [ 389.250405][T10562] veth1_macvtap: entered promiscuous mode [ 389.324639][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.340988][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.351420][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.368688][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.382298][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.403999][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.420256][T10562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.465928][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.488057][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.504069][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.517165][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.549587][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.566596][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.579118][T10562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.616571][T10562] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.623592][ T5787] Bluetooth: hci4: command tx timeout [ 389.631354][T10562] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.640866][T10562] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.650663][T10562] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.858803][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.876743][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.937326][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.948694][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.029164][T10721] loop0: detected capacity change from 0 to 1024 [ 393.063409][T10721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 393.113866][T10721] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 393.172690][T10721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.305511][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.433646][T10737] loop1: detected capacity change from 0 to 1024 [ 395.463993][T10737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 395.519649][T10737] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 395.554990][T10737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.622696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 395.695404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 395.727382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 395.850156][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.647152][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2095'. [ 396.674686][T10761] bridge_slave_1: left allmulticast mode [ 396.691574][T10761] bridge_slave_1: left promiscuous mode [ 396.710193][T10761] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.735897][T10761] bridge_slave_0: left allmulticast mode [ 396.754818][T10761] bridge_slave_0: left promiscuous mode [ 396.773518][T10761] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.656571][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'. [ 398.020578][T10787] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.2115'. [ 402.544626][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2140'. [ 402.724290][T10846] loop1: detected capacity change from 0 to 1024 [ 402.731432][T10846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.816098][T10846] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 402.860168][T10846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.063939][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.557635][T10924] loop0: detected capacity change from 0 to 512 [ 405.634635][T10924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.838319][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.028118][T10931] loop0: detected capacity change from 0 to 1024 [ 406.069366][T10931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.113196][T10931] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 406.170407][T10931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.336613][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.792498][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 406.982554][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 407.022880][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.052490][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.073392][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.082574][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.090539][ T8] usb 1-1: Product: syz [ 407.132452][ T8] usb 1-1: Manufacturer: syz [ 407.147247][ T8] usb 1-1: SerialNumber: syz [ 407.380539][ T8] usb 1-1: 0:2 : does not exist [ 407.428509][ T8] usb 1-1: USB disconnect, device number 9 [ 408.362684][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 408.572487][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 408.581340][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'. [ 408.601527][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.624079][ T8] usb 1-1: config 0 has no interfaces? [ 408.677948][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 408.703413][ T8] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 408.742494][ T8] usb 1-1: Manufacturer: syz [ 408.764624][ T8] usb 1-1: config 0 descriptor?? [ 409.063230][ T8] usb 1-1: USB disconnect, device number 10 [ 410.988431][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2216'. [ 413.492486][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 413.715803][ T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 413.732467][ T8] usb 2-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 413.772467][ T8] usb 2-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 413.815941][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 413.855063][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.872444][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.900724][ T8] usb 2-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳 [ 413.988867][ T8] usb 2-1: SerialNumber: syz [ 414.223970][ T8] cdc_ether 2-1:1.0: skipping garbage [ 414.249601][ T8] cdc_ether 2-1:1.0: skipping garbage [ 414.265324][ T8] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 414.303674][ T8] usb 2-1: USB disconnect, device number 15 [ 420.752493][ T786] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 420.959852][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 420.974316][ T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.992465][ T786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.034569][ T786] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.062477][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.082441][ T786] usb 1-1: Product: syz [ 421.096768][ T786] usb 1-1: Manufacturer: syz [ 421.116963][ T786] usb 1-1: SerialNumber: syz [ 421.348508][ T786] usb 1-1: 0:2 : does not exist [ 421.406187][ T786] usb 1-1: USB disconnect, device number 11 [ 421.470464][T11120] udevd[11120]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.137370][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 427.994163][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2310'. [ 428.582952][ T5874] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 428.775717][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 428.797879][ T5874] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 428.819009][ T5874] usb 4-1: config 0 has no interface number 0 [ 428.852499][ T5874] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 428.892467][ T5874] usb 4-1: config 0 interface 41 has no altsetting 0 [ 428.915191][ T5874] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 428.932448][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.962540][ T5874] usb 4-1: Product: syz [ 428.966739][ T5874] usb 4-1: Manufacturer: syz [ 429.001822][ T5874] usb 4-1: SerialNumber: syz [ 429.023469][ T5874] usb 4-1: config 0 descriptor?? [ 429.049876][T11244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 429.058369][ T5874] CoreChips: probe of 4-1:0.41 failed with error -22 [ 429.261219][ T8] usb 4-1: USB disconnect, device number 7 [ 433.532709][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 433.772527][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 433.779639][ T8] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 433.809327][ T8] usb 2-1: config 0 has no interface number 0 [ 433.832491][ T8] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 433.872963][ T8] usb 2-1: config 0 interface 41 has no altsetting 0 [ 433.896486][ T8] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 433.915971][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.942526][ T8] usb 2-1: Product: syz [ 433.967084][ T8] usb 2-1: Manufacturer: syz [ 433.971703][ T8] usb 2-1: SerialNumber: syz [ 434.010227][ T8] usb 2-1: config 0 descriptor?? [ 434.036220][T11319] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.046928][ T8] CoreChips: probe of 2-1:0.41 failed with error -22 [ 434.209005][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 434.218444][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 434.226762][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 434.235891][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 434.244298][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 434.261316][ T8] usb 2-1: USB disconnect, device number 16 [ 434.282684][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.501057][T11335] chnl_net:caif_netlink_parms(): no params data found [ 434.596841][T11335] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.608156][T11335] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.618154][T11335] bridge_slave_0: entered allmulticast mode [ 434.625558][T11335] bridge_slave_0: entered promiscuous mode [ 434.635254][T11335] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.642601][T11335] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.649772][T11335] bridge_slave_1: entered allmulticast mode [ 434.657045][T11335] bridge_slave_1: entered promiscuous mode [ 434.699679][T11335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.712720][T11335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.756354][T11335] team0: Port device team_slave_0 added [ 434.765540][T11335] team0: Port device team_slave_1 added [ 434.842993][T11335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.849967][T11335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.896613][T11335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.917438][T11335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.929165][T11335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.961223][T11335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.158811][T11335] hsr_slave_0: entered promiscuous mode [ 435.168878][T11335] hsr_slave_1: entered promiscuous mode [ 435.177865][T11335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.195805][T11335] Cannot create hsr debugfs directory [ 435.449978][T11356] 9pnet_fd: Insufficient options for proto=fd [ 435.609271][T11335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.815678][T11335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.940774][T11335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.093965][T11335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.328452][T11335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 436.342815][ T51] Bluetooth: hci2: command tx timeout [ 436.355576][T11335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 436.374595][T11335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 436.386610][T11335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 436.536096][T11335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.559845][T11335] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.584936][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.592070][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.625737][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.632897][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.944614][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'. [ 437.052369][T11335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.217904][T11335] veth0_vlan: entered promiscuous mode [ 437.290314][T11335] veth1_vlan: entered promiscuous mode [ 437.386459][T11335] veth0_macvtap: entered promiscuous mode [ 437.418919][T11335] veth1_macvtap: entered promiscuous mode [ 437.619180][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.639833][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.650173][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.666415][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.676963][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.689134][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.699211][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.710778][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.722668][T11335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.820185][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.833038][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.843319][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.854037][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.864269][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.880685][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.895130][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.905878][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.936881][T11335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.986467][T11335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.003794][T11335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.017626][T11335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.029537][T11335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.189696][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2382'. [ 438.343682][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.360345][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.400490][ T3514] hsr_slave_0: left promiscuous mode [ 438.412160][ T3514] hsr_slave_1: left promiscuous mode [ 438.428448][ T51] Bluetooth: hci2: command tx timeout [ 438.437816][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.448577][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.465086][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.472657][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.503762][ T3514] veth1_macvtap: left promiscuous mode [ 438.510097][ T3514] veth0_macvtap: left promiscuous mode [ 438.516471][ T3514] veth1_vlan: left promiscuous mode [ 438.522078][ T3514] veth0_vlan: left promiscuous mode [ 439.703350][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 439.794374][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 439.880937][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.996579][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.107084][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.118059][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.504033][ T51] Bluetooth: hci2: command tx timeout [ 440.875158][ T3514] bond0 (unregistering): Released all slaves [ 440.970795][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.015534][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.350896][T11457] loop3: detected capacity change from 0 to 512 [ 441.385977][T11457] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.408036][T11457] EXT4-fs: inline encryption not supported [ 441.433006][T11457] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.472579][T11457] EXT4-fs (loop3): Test dummy encryption mode enabled [ 441.494044][T11457] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 441.555248][T11457] EXT4-fs (loop3): 1 truncate cleaned up [ 441.588820][T11457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.858999][T10562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.592680][ T51] Bluetooth: hci2: command tx timeout [ 450.517464][T11606] loop2: detected capacity change from 0 to 512 [ 450.562882][T11606] EXT4-fs: Ignoring removed mblk_io_submit option [ 450.569341][T11606] EXT4-fs: inline encryption not supported [ 450.607497][T11606] EXT4-fs: Ignoring removed mblk_io_submit option [ 450.642512][T11606] EXT4-fs (loop2): Test dummy encryption mode enabled [ 450.669757][T11606] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 450.743342][T11606] EXT4-fs (loop2): 1 truncate cleaned up [ 450.751990][T11606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.963424][T11335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.916824][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 454.684703][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.700050][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.708577][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.723522][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.731156][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 454.738976][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.034673][T11670] chnl_net:caif_netlink_parms(): no params data found [ 455.317575][T11670] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.326044][T11670] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.337454][T11670] bridge_slave_0: entered allmulticast mode [ 455.347908][T11670] bridge_slave_0: entered promiscuous mode [ 455.358961][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'. [ 455.374390][T11683] bridge_slave_1: left allmulticast mode [ 455.380055][T11683] bridge_slave_1: left promiscuous mode [ 455.413802][T11683] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.455645][T11683] bridge_slave_0: left allmulticast mode [ 455.461314][T11683] bridge_slave_0: left promiscuous mode [ 455.492660][T11683] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.615877][T11670] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.640008][T11670] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.657683][T11670] bridge_slave_1: entered allmulticast mode [ 455.676976][T11670] bridge_slave_1: entered promiscuous mode [ 455.821679][T11670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.846317][T11670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.005501][T11670] team0: Port device team_slave_0 added [ 456.022364][T11670] team0: Port device team_slave_1 added [ 456.191289][T11670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.201132][T11670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.260775][T11670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.304659][T11670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.311618][T11670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.345689][T11670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.491973][T11670] hsr_slave_0: entered promiscuous mode [ 456.507357][T11670] hsr_slave_1: entered promiscuous mode [ 456.824133][ T5787] Bluetooth: hci0: command tx timeout [ 456.857981][ T3514] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.978106][ T3514] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.115803][ T3514] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.244512][ T3514] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.552695][T11670] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 458.575457][T11670] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 458.660024][T11670] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.684349][T11670] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.902787][ T5787] Bluetooth: hci0: command tx timeout [ 459.197962][T11670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.395213][T11670] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.448741][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.455929][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.618099][ T3514] hsr_slave_0: left promiscuous mode [ 459.629623][ T3514] hsr_slave_1: left promiscuous mode [ 459.658092][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.677792][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.694231][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.701663][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.770114][ T3514] veth1_macvtap: left promiscuous mode [ 459.775906][ T3514] veth0_macvtap: left promiscuous mode [ 459.781541][ T3514] veth1_vlan: left promiscuous mode [ 459.793003][ T3514] veth0_vlan: left promiscuous mode [ 460.546644][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 460.624225][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 460.695728][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.763661][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.987830][ T5787] Bluetooth: hci0: command tx timeout [ 461.436680][ T3514] bond0 (unregistering): Released all slaves [ 461.492263][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2514'. [ 461.513447][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.520589][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.091802][T11670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.166119][T11670] veth0_vlan: entered promiscuous mode [ 462.187605][T11670] veth1_vlan: entered promiscuous mode [ 462.248483][T11670] veth0_macvtap: entered promiscuous mode [ 462.269940][T11670] veth1_macvtap: entered promiscuous mode [ 462.301480][T11670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.312893][T11670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.330065][T11670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.340825][T11670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.381749][T11670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.397622][T11670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.410214][T11670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.431964][T11670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.448779][T11670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.460289][T11670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.477195][T11670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.488621][T11670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.503617][T11670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.557440][T11670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.588387][T11670] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.603771][T11670] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.617265][T11670] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.627494][T11670] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.798238][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.814629][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.860011][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.874215][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.062996][ T5787] Bluetooth: hci0: command tx timeout [ 464.172807][ T5856] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 465.876873][T11815] binder: BINDER_SET_CONTEXT_MGR already set [ 465.909180][T11817] loop1: detected capacity change from 0 to 512 [ 465.915505][T11815] binder: 11814:11815 ioctl 4018620d 200000000040 returned -16 [ 465.957503][T11817] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 466.066180][T11817] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 466.106989][T11817] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2541: bg 0: block 248: padding at end of block bitmap is not set [ 466.159784][T11817] Quota error (device loop1): write_blk: dquota write failed [ 466.192633][T11817] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 466.222548][T11817] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2541: Failed to acquire dquot type 1 [ 466.277119][T11817] EXT4-fs (loop1): 1 truncate cleaned up [ 466.288276][T11817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 466.413005][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 466.464596][T11670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 466.616879][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 466.643823][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.678607][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.714984][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.732457][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.770841][ T8] usb 4-1: Product: syz [ 466.787285][ T8] usb 4-1: Manufacturer: syz [ 466.805963][ T8] usb 4-1: SerialNumber: syz [ 467.059112][ T8] usb 4-1: 0:2 : does not exist [ 467.100319][ T8] usb 4-1: USB disconnect, device number 8 [ 468.596462][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2555'. [ 469.556837][T11876] loop2: detected capacity change from 0 to 512 [ 469.591421][T11876] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.612808][T11876] EXT4-fs: inline encryption not supported [ 469.618701][T11876] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.680770][T11876] EXT4-fs (loop2): Test dummy encryption mode enabled [ 469.696836][T11876] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 469.774499][T11876] EXT4-fs (loop2): 1 truncate cleaned up [ 469.784004][T11876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.010125][T11335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.078002][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2570'. [ 471.140551][T11902] loop1: detected capacity change from 0 to 512 [ 471.173048][T11902] EXT4-fs: Ignoring removed mblk_io_submit option [ 471.206114][T11902] EXT4-fs: inline encryption not supported [ 471.226214][T11902] EXT4-fs: Ignoring removed mblk_io_submit option [ 471.262793][T11902] EXT4-fs (loop1): Test dummy encryption mode enabled [ 471.273017][T11902] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 471.320652][T11902] EXT4-fs (loop1): 1 truncate cleaned up [ 471.347357][T11902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.514269][T11670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.785756][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2599'. [ 473.507654][T11972] loop0: detected capacity change from 0 to 512 [ 473.531248][T11972] EXT4-fs: Ignoring removed mblk_io_submit option [ 473.552522][T11972] EXT4-fs: inline encryption not supported [ 473.572567][T11972] EXT4-fs: Ignoring removed mblk_io_submit option [ 473.595636][T11972] EXT4-fs (loop0): Test dummy encryption mode enabled [ 473.616892][T11972] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 473.652910][T11972] EXT4-fs (loop0): 1 truncate cleaned up [ 473.672360][T11972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.796901][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.243603][T11987] loop1: detected capacity change from 0 to 512 [ 474.283354][T11987] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.289819][T11987] EXT4-fs: inline encryption not supported [ 474.328292][T11987] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.360889][T11987] EXT4-fs (loop1): Test dummy encryption mode enabled [ 474.402726][T11987] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 474.463247][T11987] EXT4-fs (loop1): 1 truncate cleaned up [ 474.470144][T11987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.666741][T11670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.002507][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 475.202471][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 475.219241][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.246906][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 475.276036][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 475.291745][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.316101][ T8] usb 1-1: Product: syz [ 475.330178][ T8] usb 1-1: Manufacturer: syz [ 475.343605][ T8] usb 1-1: SerialNumber: syz [ 475.573619][ T8] usb 1-1: 0:2 : does not exist [ 475.613243][ T8] usb 1-1: USB disconnect, device number 12 [ 475.917698][T12007] loop1: detected capacity change from 0 to 512 [ 475.943485][T12007] EXT4-fs: Ignoring removed mblk_io_submit option [ 475.960165][T12007] EXT4-fs: inline encryption not supported [ 475.980444][T12007] EXT4-fs: Ignoring removed mblk_io_submit option [ 476.020051][T12007] EXT4-fs (loop1): Test dummy encryption mode enabled [ 476.032441][T12007] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 476.065786][T12007] EXT4-fs (loop1): 1 truncate cleaned up [ 476.072063][T12007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.259138][T11670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.296083][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2625'. [ 477.450526][T12033] loop2: detected capacity change from 0 to 512 [ 477.487267][T12033] EXT4-fs: Ignoring removed mblk_io_submit option [ 477.521777][T12033] EXT4-fs: inline encryption not supported [ 477.541426][T12033] EXT4-fs: Ignoring removed mblk_io_submit option [ 477.583607][T12033] EXT4-fs (loop2): Test dummy encryption mode enabled [ 477.611571][T12033] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 477.677453][T12033] EXT4-fs (loop2): 1 truncate cleaned up [ 477.706258][T12033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.840515][T11335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.068590][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 478.089900][T12048] bridge_slave_1: left allmulticast mode [ 478.108305][T12048] bridge_slave_1: left promiscuous mode [ 478.127003][T12048] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.155867][T12048] bridge_slave_0: left allmulticast mode [ 478.173733][T12048] bridge_slave_0: left promiscuous mode [ 478.191870][T12048] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.180884][T12077] loop3: detected capacity change from 0 to 512 [ 479.206396][T12077] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.235968][T12077] EXT4-fs: inline encryption not supported [ 479.241877][T12077] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.289933][T12077] EXT4-fs (loop3): Test dummy encryption mode enabled [ 479.327261][T12077] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 479.365504][T12077] EXT4-fs (loop3): 1 truncate cleaned up [ 479.388472][T12077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.427338][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2654'. [ 479.617029][T10562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.112505][ T786] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 480.260927][T12105] loop3: detected capacity change from 0 to 512 [ 480.285284][T12105] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.298687][T12105] EXT4-fs: inline encryption not supported [ 480.312523][T12105] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.329227][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 480.344780][ T786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.369437][ T786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.382525][T12105] EXT4-fs (loop3): Test dummy encryption mode enabled [ 480.409376][T12105] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 480.433784][ T786] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.452692][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.471380][T12105] EXT4-fs (loop3): 1 truncate cleaned up [ 480.479158][T12105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.496100][ T786] usb 3-1: Product: syz [ 480.500298][ T786] usb 3-1: Manufacturer: syz [ 480.524089][ T786] usb 3-1: SerialNumber: syz [ 480.641722][T10562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.766454][ T786] usb 3-1: 0:2 : does not exist [ 480.834642][ T786] usb 3-1: USB disconnect, device number 7 [ 480.876369][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'. [ 480.944480][T11712] udevd[11712]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.732032][T12134] loop3: detected capacity change from 0 to 1024 [ 481.840326][T12134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 481.892594][T12134] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.075322][T10562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 483.005147][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 483.044059][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 483.053755][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 483.062065][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 483.070395][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 483.080260][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 483.170561][ T5787] Bluetooth: hci4: unexpected cc 0x204b length: 9 > 3 [ 483.717452][T12164] chnl_net:caif_netlink_parms(): no params data found [ 483.994502][ T1090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.015992][T12164] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.023667][T12164] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.039837][T12164] bridge_slave_0: entered allmulticast mode [ 484.054411][T12164] bridge_slave_0: entered promiscuous mode [ 484.063934][T12164] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.071618][T12164] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.094990][T12164] bridge_slave_1: entered allmulticast mode [ 484.102182][T12164] bridge_slave_1: entered promiscuous mode [ 484.157084][ T1090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.244276][ T1090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.290364][T12164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.315246][T12164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.375083][ T1090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.435413][T12164] team0: Port device team_slave_0 added [ 484.455387][T12164] team0: Port device team_slave_1 added [ 484.520042][T12164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.527219][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.554139][T12164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.603544][T12164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.610521][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.639795][T12164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.811581][T12164] hsr_slave_0: entered promiscuous mode [ 484.819369][T12164] hsr_slave_1: entered promiscuous mode [ 484.831347][T12164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.839986][T12164] Cannot create hsr debugfs directory [ 485.143014][ T5787] Bluetooth: hci3: command tx timeout [ 486.088463][T12164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 486.175301][T12164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 486.220753][T12164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 486.268916][T12164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 486.530174][ T1090] hsr_slave_0: left promiscuous mode [ 486.545680][ T1090] hsr_slave_1: left promiscuous mode [ 486.551874][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.565982][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.583389][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.590807][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.641803][ T1090] veth1_macvtap: left promiscuous mode [ 486.651116][ T1090] veth0_macvtap: left promiscuous mode [ 486.660024][ T1090] veth1_vlan: left promiscuous mode [ 486.669638][ T1090] veth0_vlan: left promiscuous mode [ 487.223874][ T5787] Bluetooth: hci3: command tx timeout [ 487.701209][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 487.768363][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 487.813979][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.879345][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.697483][ T1090] bond0 (unregistering): Released all slaves [ 488.805823][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2709'. [ 489.161341][T12164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.234873][T12256] loop2: detected capacity change from 0 to 512 [ 489.245734][T12256] EXT4-fs: Ignoring removed mblk_io_submit option [ 489.252190][T12256] EXT4-fs: inline encryption not supported [ 489.262337][T12164] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.290779][T12256] EXT4-fs: Ignoring removed mblk_io_submit option [ 489.302664][ T5787] Bluetooth: hci3: command tx timeout [ 489.329284][T12256] EXT4-fs (loop2): Test dummy encryption mode enabled [ 489.342323][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.349512][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.368594][T12256] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 489.399977][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.407175][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.427334][T12256] EXT4-fs (loop2): 1 truncate cleaned up [ 489.434715][T12256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.518985][T12164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.530099][T12164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 489.547726][T11335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.876642][T12164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.956131][T12164] veth0_vlan: entered promiscuous mode [ 489.976205][T12164] veth1_vlan: entered promiscuous mode [ 490.028298][T12164] veth0_macvtap: entered promiscuous mode [ 490.046142][T12164] veth1_macvtap: entered promiscuous mode [ 490.092172][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.134709][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.158500][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.169246][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.181533][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.197285][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.209412][T12164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.211927][T12281] loop3: detected capacity change from 0 to 512 [ 490.237026][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.245086][T12281] EXT4-fs: Ignoring removed mblk_io_submit option [ 490.264884][T12281] EXT4-fs: inline encryption not supported [ 490.277518][T12281] EXT4-fs: Ignoring removed mblk_io_submit option [ 490.292170][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.309737][T12281] EXT4-fs (loop3): Test dummy encryption mode enabled [ 490.319695][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.324250][T12281] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 490.348224][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.358864][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.371169][T12281] EXT4-fs (loop3): 1 truncate cleaned up [ 490.378296][T12281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.390606][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.425344][T12164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.449404][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2718'. [ 490.495666][T10562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.511399][T12164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.542578][T12164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.569673][T12164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.581147][T12164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.718304][T12293] binder: BINDER_SET_CONTEXT_MGR already set [ 490.747384][T12293] binder: 12292:12293 ioctl 4018620d 200000000040 returned -16 [ 490.774298][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.793754][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.855109][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.878470][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.382646][ T5787] Bluetooth: hci3: command tx timeout [ 492.999948][T12366] loop2: detected capacity change from 0 to 1024 [ 493.064696][T12366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 493.109285][T12366] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.285136][T11335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 493.508675][T12382] loop2: detected capacity change from 0 to 512 [ 493.569690][T12382] EXT4-fs: Ignoring removed mblk_io_submit option [ 493.586471][T12382] EXT4-fs: inline encryption not supported [ 493.592372][T12382] EXT4-fs: Ignoring removed mblk_io_submit option [ 493.647550][T12382] EXT4-fs (loop2): Test dummy encryption mode enabled [ 493.682530][T12382] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 493.732585][T12382] EXT4-fs (loop2): 1 truncate cleaned up [ 493.753660][T12382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.983594][T11335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.819572][T12413] loop2: detected capacity change from 0 to 512 [ 494.856972][T12413] EXT4-fs: Ignoring removed mblk_io_submit option [ 494.886401][T12413] EXT4-fs: inline encryption not supported [ 494.892296][T12413] EXT4-fs: Ignoring removed mblk_io_submit option [ 494.939953][T12413] EXT4-fs (loop2): Test dummy encryption mode enabled [ 494.963602][T12413] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 495.018258][T12413] EXT4-fs (loop2): 1 truncate cleaned up [ 495.033747][T12413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.204600][T11335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.185217][T12450] input: syz0 as /devices/virtual/input/input5 [ 497.622073][T12455] loop2: detected capacity change from 0 to 1024 [ 497.722273][T12455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 497.762609][T12455] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.953344][T11335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 498.194702][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2792'. [ 501.556425][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.569010][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.623998][T12485] Bluetooth: hci4: command 0x0406 tx timeout [ 504.234861][T12510] loop3: detected capacity change from 0 to 512 [ 504.241967][T12510] EXT4-fs: Ignoring removed mblk_io_submit option [ 504.287859][T12510] EXT4-fs: inline encryption not supported [ 504.312539][T12510] EXT4-fs: Ignoring removed mblk_io_submit option [ 504.351425][T12510] EXT4-fs (loop3): Test dummy encryption mode enabled [ 504.371559][T12510] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 504.455974][T12510] EXT4-fs (loop3): 1 truncate cleaned up [ 504.462285][T12510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.610000][T10562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.576794][T12520] loop2: detected capacity change from 0 to 512 [ 506.623430][T12520] EXT4-fs: Ignoring removed mblk_io_submit option [ 506.629892][T12520] EXT4-fs: inline encryption not supported [ 506.702667][T12520] EXT4-fs: Ignoring removed mblk_io_submit option [ 506.732541][T12520] EXT4-fs (loop2): Test dummy encryption mode enabled [ 506.739349][T12520] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 506.824181][T12520] EXT4-fs (loop2): 1 truncate cleaned up [ 506.830464][T12520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.067713][T11335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.410581][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2821'. [ 508.201614][T11330] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 508.422496][T11330] usb 2-1: Using ep0 maxpacket: 16 [ 508.463475][T11330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.473838][T11330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.514243][T11330] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.523475][T11330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.531481][T11330] usb 2-1: Product: syz [ 508.576145][T11330] usb 2-1: Manufacturer: syz [ 508.580766][T11330] usb 2-1: SerialNumber: syz [ 508.828310][T11330] usb 2-1: 0:2 : does not exist [ 508.866181][T11330] usb 2-1: USB disconnect, device number 17 [ 509.311425][T12550] loop3: detected capacity change from 0 to 512 [ 509.328730][T12550] EXT4-fs: Ignoring removed mblk_io_submit option [ 509.362489][T12550] EXT4-fs: inline encryption not supported [ 509.368375][T12550] EXT4-fs: Ignoring removed mblk_io_submit option [ 509.421696][T12550] EXT4-fs (loop3): Test dummy encryption mode enabled [ 509.449404][T12550] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 509.492215][T12550] EXT4-fs (loop3): 1 truncate cleaned up [ 509.518739][T12550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.684312][T10562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.918623][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2831'. [ 510.304058][T12565] loop3: detected capacity change from 0 to 512 [ 510.311141][T12565] EXT4-fs: Ignoring removed mblk_io_submit option [ 510.361502][T12565] EXT4-fs: inline encryption not supported [ 510.377765][T12565] EXT4-fs: Ignoring removed mblk_io_submit option [ 510.432515][T12565] EXT4-fs (loop3): Test dummy encryption mode enabled [ 510.439339][T12565] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 510.484329][T12565] EXT4-fs (loop3): 1 truncate cleaned up [ 510.507016][T12565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.816247][T10562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.859976][T12588] 9pnet_fd: Insufficient options for proto=fd [ 512.176702][T12592] loop3: detected capacity change from 0 to 512 [ 512.210911][T12592] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.235576][T12592] EXT4-fs: inline encryption not supported [ 512.241456][T12592] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.306361][T12592] EXT4-fs (loop3): Test dummy encryption mode enabled [ 512.329330][T12592] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 512.370351][T12592] EXT4-fs (loop3): 1 truncate cleaned up [ 512.398000][T12592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.558556][T10562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.210052][T12623] loop1: detected capacity change from 0 to 512 [ 514.254228][T12623] EXT4-fs: Ignoring removed mblk_io_submit option [ 514.281004][T12623] EXT4-fs: inline encryption not supported [ 514.301233][T12623] EXT4-fs: Ignoring removed mblk_io_submit option [ 514.328204][T12623] EXT4-fs (loop1): Test dummy encryption mode enabled [ 514.370805][T12623] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 514.438581][T12623] EXT4-fs (loop1): 1 truncate cleaned up [ 514.444944][T12623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.623996][T11670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.516385][T12639] loop1: detected capacity change from 0 to 1024 [ 515.592904][T12639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 515.652759][T12639] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.813771][T11670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 515.967448][T12645] loop2: detected capacity change from 0 to 8192 [ 516.649409][T12659] loop0: detected capacity change from 0 to 1024 [ 516.756169][T12659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 516.792912][T12659] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.932172][T12164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 517.343674][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2882'. [ 517.382631][T12674] bridge_slave_1: left allmulticast mode [ 517.388304][T12674] bridge_slave_1: left promiscuous mode [ 517.432621][T12674] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.459510][T12674] bridge_slave_0: left allmulticast mode [ 517.479367][T12674] bridge_slave_0: left promiscuous mode [ 517.509048][T12676] loop3: detected capacity change from 0 to 8192 [ 517.522756][T12674] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.306032][T12695] loop3: detected capacity change from 0 to 1024 [ 518.418877][T12695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 518.465561][T12695] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.557118][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'. [ 518.606170][T10562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 518.689547][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2895'. [ 519.332518][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2903'. [ 519.614397][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 519.832689][ T5874] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 520.039430][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 520.054519][ T5874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.091393][ T5874] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.126031][ T5874] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 520.148618][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.174218][ T5874] usb 1-1: Product: syz [ 520.182505][ T5874] usb 1-1: Manufacturer: syz [ 520.192476][ T5874] usb 1-1: SerialNumber: syz [ 520.225854][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2914'. [ 520.413281][ T5874] usb 1-1: 0:2 : does not exist [ 520.448966][ T5874] usb 1-1: USB disconnect, device number 13 [ 520.555393][T11712] udevd[11712]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.791385][T12766] loop2: detected capacity change from 0 to 8192 [ 521.471755][T12778] loop0: detected capacity change from 0 to 1024 [ 521.549975][T12778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 521.611338][T12778] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.771929][T12164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 521.872675][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2926'. [ 522.132533][ T786] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 522.173527][T12799] 9pnet_fd: Insufficient options for proto=fd [ 522.322763][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 522.341939][ T786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.372292][ T786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.400363][ T786] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.415306][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.441186][ T786] usb 3-1: Product: syz [ 522.454256][ T786] usb 3-1: Manufacturer: syz [ 522.468751][ T786] usb 3-1: SerialNumber: syz [ 522.697085][ T786] usb 3-1: 0:2 : does not exist [ 522.738667][ T786] usb 3-1: USB disconnect, device number 8 [ 523.006544][T12814] loop0: detected capacity change from 0 to 1024 [ 523.071821][T12814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 523.112559][T12814] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.255132][T12164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 523.452819][T12821] loop1: detected capacity change from 0 to 8192 [ 523.519222][T12823] loop2: detected capacity change from 0 to 8192 [ 524.704112][T12851] loop0: detected capacity change from 0 to 8192 [ 525.326325][T12865] loop0: detected capacity change from 0 to 1024 [ 525.349322][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2961'. [ 525.414216][T12865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 525.474680][T12865] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.616767][T12164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 525.980364][T12888] 9pnet_fd: Insufficient options for proto=fd [ 526.330162][T12892] loop2: detected capacity change from 0 to 8192 [ 527.142523][T12913] loop2: detected capacity change from 0 to 8192 [ 527.292330][T12921] loop0: detected capacity change from 0 to 1024 [ 527.412200][T12921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 527.483200][T12921] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.654122][T12164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 527.742670][T12928] loop2: detected capacity change from 0 to 8192 [ 528.554127][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2987'. [ 529.059689][T12960] loop1: detected capacity change from 0 to 8192 [ 530.042570][T12980] loop2: detected capacity change from 0 to 8192 [ 530.899483][T12993] loop2: detected capacity change from 0 to 8192 [ 532.392807][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3025'. [ 532.941242][T13022] loop1: detected capacity change from 0 to 8192 [ 533.610635][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3036'. [ 533.646693][T13039] loop1: detected capacity change from 0 to 512 [ 533.660677][T13039] EXT4-fs: Ignoring removed mblk_io_submit option [ 533.685280][T13039] EXT4-fs: inline encryption not supported [ 533.705359][T13039] EXT4-fs: Ignoring removed mblk_io_submit option [ 533.729761][T13039] EXT4-fs (loop1): Test dummy encryption mode enabled [ 533.750212][T13039] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 533.790621][T13039] EXT4-fs (loop1): 1 truncate cleaned up [ 533.809101][T13039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.925069][T11670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.009111][T13045] loop3: detected capacity change from 0 to 8192 [ 534.652378][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3041'. [ 535.836557][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'. [ 536.103227][T13091] loop3: detected capacity change from 0 to 1024 [ 536.194671][T13091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 536.233069][T13091] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.382573][T10562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 538.250119][T13116] loop3: detected capacity change from 0 to 8192 [ 538.764403][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 540.234235][T13142] loop0: detected capacity change from 0 to 8192 [ 541.328114][T13160] loop0: detected capacity change from 0 to 512 [ 541.363428][T13160] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.369909][T13160] EXT4-fs: inline encryption not supported [ 541.427154][T13160] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.462515][T13160] EXT4-fs (loop0): Test dummy encryption mode enabled [ 541.494055][T13160] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 541.557271][T13160] EXT4-fs (loop0): 1 truncate cleaned up [ 541.566033][T13160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.784902][T12164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.954516][T13169] loop0: detected capacity change from 0 to 16 [ 541.992145][T13169] erofs: (device loop0): mounted with root inode @ nid 36. [ 542.041706][T13169] syz.0.3092: attempt to access beyond end of device [ 542.041706][T13169] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 542.128000][T13170] syz.0.3092: attempt to access beyond end of device [ 542.128000][T13170] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 542.255718][T12164] BUG: Bad page state in process syz-executor pfn:717e1 [ 542.263252][T12164] page:ffffea0001c5f840 refcount:0 mapcount:0 mapping:ffff8880709a07c8 index:0x2 pfn:0x717e1 [ 542.273845][T12164] aops:z_erofs_cache_aops ino:0 [ 542.278717][T12164] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 542.286564][T12164] page_type: 0xffffffff() [ 542.290904][T12164] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880709a07c8 [ 542.299536][T12164] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 542.308185][T12164] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 542.315690][T12164] page_owner tracks the page as allocated [ 542.321619][T12164] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13169, tgid 13168 (syz.0.3092), ts 542041254624, free_ts 541715088624 [ 542.343852][T12164] post_alloc_hook+0x1cd/0x210 [ 542.348631][T12164] get_page_from_freelist+0x195c/0x19f0 [ 542.354241][T12164] __alloc_pages+0x1e3/0x460 [ 542.358854][T12164] z_erofs_do_read_page+0x20c0/0x3680 [ 542.364541][T12164] z_erofs_pcluster_readmore+0x2cf/0x450 [ 542.370176][T12164] z_erofs_read_folio+0x208/0x540 [ 542.375239][T12164] filemap_read_folio+0x167/0x760 [ 542.380270][T12164] do_read_cache_folio+0x470/0x7e0 [ 542.385450][T12164] erofs_bread+0x16f/0x630 [ 542.389889][T12164] erofs_namei+0x28c/0xf00 [ 542.394362][T12164] erofs_lookup+0x135/0x310 [ 542.398876][T12164] path_openat+0x10b8/0x3190 [ 542.403519][T12164] do_filp_open+0x1c5/0x3d0 [ 542.408032][T12164] do_sys_openat2+0x12c/0x1c0 [ 542.412756][T12164] __x64_sys_openat+0x139/0x160 [ 542.417617][T12164] do_syscall_64+0x55/0xb0 [ 542.422021][T12164] page last free stack trace: [ 542.426761][T12164] free_unref_page_prepare+0x7ce/0x8e0 [ 542.432232][T12164] free_unref_page_list+0xbe/0x860 [ 542.437397][T12164] release_pages+0x1fa0/0x2220 [ 542.442175][T12164] tlb_flush_mmu+0x368/0x4f0 [ 542.446835][T12164] tlb_finish_mmu+0xc3/0x1d0 [ 542.451444][T12164] exit_mmap+0x3f0/0xb50 [ 542.455754][T12164] __mmput+0x118/0x3c0 [ 542.459826][T12164] exit_mm+0x1da/0x2c0 [ 542.463953][T12164] do_exit+0x88e/0x23c0 [ 542.468121][T12164] do_group_exit+0x21b/0x2d0 [ 542.472761][T12164] get_signal+0x12fc/0x1400 [ 542.477276][T12164] arch_do_signal_or_restart+0x9c/0x7b0 [ 542.482891][T12164] exit_to_user_mode_loop+0x70/0x110 [ 542.488187][T12164] exit_to_user_mode_prepare+0xf6/0x180 [ 542.493958][T12164] syscall_exit_to_user_mode+0x1a/0x50 [ 542.499424][T12164] do_syscall_64+0x61/0xb0 [ 542.503992][T12164] Modules linked in: [ 542.507905][T12164] CPU: 0 PID: 12164 Comm: syz-executor Not tainted syzkaller #0 [ 542.515522][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 542.525576][T12164] Call Trace: [ 542.528846][T12164] [ 542.531774][T12164] dump_stack_lvl+0x16c/0x230 [ 542.536448][T12164] ? show_regs_print_info+0x20/0x20 [ 542.541634][T12164] ? swiotlb_print_info+0x70/0x70 [ 542.546670][T12164] bad_page+0x14b/0x170 [ 542.550830][T12164] free_unref_page_prepare+0x887/0x8e0 [ 542.556284][T12164] free_unref_page+0x32/0x2e0 [ 542.560948][T12164] ? __folio_put+0xef/0x210 [ 542.565442][T12164] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 542.571857][T12164] erofs_shrink_workstation+0x118/0x290 [ 542.577403][T12164] ? erofs_shrinker_unregister+0x170/0x170 [ 542.583207][T12164] ? io_schedule+0xd0/0xd0 [ 542.587622][T12164] ? kobject_put+0x43c/0x470 [ 542.592204][T12164] erofs_shrinker_unregister+0x5d/0x170 [ 542.597754][T12164] erofs_put_super+0x4e/0x150 [ 542.602423][T12164] ? erofs_free_inode+0xb0/0xb0 [ 542.607274][T12164] generic_shutdown_super+0x134/0x2b0 [ 542.612720][T12164] kill_block_super+0x44/0x90 [ 542.617406][T12164] erofs_kill_sb+0x4c/0x140 [ 542.621908][T12164] deactivate_locked_super+0x97/0x100 [ 542.627278][T12164] cleanup_mnt+0x429/0x4c0 [ 542.631688][T12164] task_work_run+0x1ce/0x250 [ 542.636273][T12164] ? task_work_cancel+0x240/0x240 [ 542.641293][T12164] ? exit_to_user_mode_loop+0x3b/0x110 [ 542.646747][T12164] exit_to_user_mode_loop+0xe6/0x110 [ 542.652030][T12164] exit_to_user_mode_prepare+0xf6/0x180 [ 542.657571][T12164] syscall_exit_to_user_mode+0x1a/0x50 [ 542.663025][T12164] do_syscall_64+0x61/0xb0 [ 542.667439][T12164] ? clear_bhb_loop+0x40/0x90 [ 542.672104][T12164] ? clear_bhb_loop+0x40/0x90 [ 542.676773][T12164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.682657][T12164] RIP: 0033:0x7f40be7909f7 [ 542.687071][T12164] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 542.706667][T12164] RSP: 002b:00007ffe83664c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 542.715069][T12164] RAX: 0000000000000000 RBX: 00007f40be811d7d RCX: 00007f40be7909f7 [ 542.723030][T12164] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe83664cd0 [ 542.730990][T12164] RBP: 00007ffe83664cd0 R08: 0000000000000000 R09: 0000000000000000 [ 542.738951][T12164] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe83665d60 [ 542.746909][T12164] R13: 00007f40be811d7d R14: 00000000000845f8 R15: 00007ffe83665da0 [ 542.754882][T12164] [ 542.758905][T12164] Disabling lock debugging due to kernel taint [ 542.765105][T12164] BUG: Bad page state in process syz-executor pfn:23b50 [ 542.772124][T12164] page:ffffea00008ed400 refcount:0 mapcount:0 mapping:ffff8880709a07c8 index:0x3 pfn:0x23b50 [ 542.782294][T12164] aops:z_erofs_cache_aops ino:0 [ 542.787181][T12164] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 542.794912][T12164] page_type: 0xffffffff() [ 542.799245][T12164] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880709a07c8 [ 542.807841][T12164] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 542.816431][T12164] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 542.823769][T12164] page_owner tracks the page as allocated [ 542.829472][T12164] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13169, tgid 13168 (syz.0.3092), ts 542041272285, free_ts 541715081375 [ 542.851634][T12164] post_alloc_hook+0x1cd/0x210 [ 542.856421][T12164] get_page_from_freelist+0x195c/0x19f0 [ 542.861964][T12164] __alloc_pages+0x1e3/0x460 [ 542.866579][T12164] z_erofs_do_read_page+0x20c0/0x3680 [ 542.871953][T12164] z_erofs_pcluster_readmore+0x2cf/0x450 [ 542.877601][T12164] z_erofs_read_folio+0x208/0x540 [ 542.882648][T12164] filemap_read_folio+0x167/0x760 [ 542.887653][T12164] do_read_cache_folio+0x470/0x7e0 [ 542.892780][T12164] erofs_bread+0x16f/0x630 [ 542.897195][T12164] erofs_namei+0x28c/0xf00 [ 542.901593][T12164] erofs_lookup+0x135/0x310 [ 542.906117][T12164] path_openat+0x10b8/0x3190 [ 542.910708][T12164] do_filp_open+0x1c5/0x3d0 [ 542.915236][T12164] do_sys_openat2+0x12c/0x1c0 [ 542.919915][T12164] __x64_sys_openat+0x139/0x160 [ 542.924785][T12164] do_syscall_64+0x55/0xb0 [ 542.929210][T12164] page last free stack trace: [ 542.933897][T12164] free_unref_page_prepare+0x7ce/0x8e0 [ 542.939356][T12164] free_unref_page_list+0xbe/0x860 [ 542.944478][T12164] release_pages+0x1fa0/0x2220 [ 542.949237][T12164] tlb_flush_mmu+0x368/0x4f0 [ 542.953838][T12164] tlb_finish_mmu+0xc3/0x1d0 [ 542.958429][T12164] exit_mmap+0x3f0/0xb50 [ 542.962702][T12164] __mmput+0x118/0x3c0 [ 542.966763][T12164] exit_mm+0x1da/0x2c0 [ 542.970814][T12164] do_exit+0x88e/0x23c0 [ 542.974988][T12164] do_group_exit+0x21b/0x2d0 [ 542.979576][T12164] get_signal+0x12fc/0x1400 [ 542.984203][T12164] arch_do_signal_or_restart+0x9c/0x7b0 [ 542.989755][T12164] exit_to_user_mode_loop+0x70/0x110 [ 542.995066][T12164] exit_to_user_mode_prepare+0xf6/0x180 [ 543.000617][T12164] syscall_exit_to_user_mode+0x1a/0x50 [ 543.006086][T12164] do_syscall_64+0x61/0xb0 [ 543.010500][T12164] Modules linked in: [ 543.014400][T12164] CPU: 0 PID: 12164 Comm: syz-executor Tainted: G B syzkaller #0 [ 543.023502][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 543.033536][T12164] Call Trace: [ 543.036795][T12164] [ 543.039706][T12164] dump_stack_lvl+0x16c/0x230 [ 543.044367][T12164] ? show_regs_print_info+0x20/0x20 [ 543.049548][T12164] ? swiotlb_print_info+0x70/0x70 [ 543.054556][T12164] bad_page+0x14b/0x170 [ 543.058698][T12164] free_unref_page_prepare+0x887/0x8e0 [ 543.064143][T12164] free_unref_page+0x32/0x2e0 [ 543.068802][T12164] ? __folio_put+0xef/0x210 [ 543.073289][T12164] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 543.079691][T12164] erofs_shrink_workstation+0x118/0x290 [ 543.085226][T12164] ? erofs_shrinker_unregister+0x170/0x170 [ 543.091020][T12164] ? io_schedule+0xd0/0xd0 [ 543.095423][T12164] ? kobject_put+0x43c/0x470 [ 543.099993][T12164] erofs_shrinker_unregister+0x5d/0x170 [ 543.105528][T12164] erofs_put_super+0x4e/0x150 [ 543.110191][T12164] ? erofs_free_inode+0xb0/0xb0 [ 543.115030][T12164] generic_shutdown_super+0x134/0x2b0 [ 543.120390][T12164] kill_block_super+0x44/0x90 [ 543.125049][T12164] erofs_kill_sb+0x4c/0x140 [ 543.129540][T12164] deactivate_locked_super+0x97/0x100 [ 543.134903][T12164] cleanup_mnt+0x429/0x4c0 [ 543.139304][T12164] task_work_run+0x1ce/0x250 [ 543.143881][T12164] ? task_work_cancel+0x240/0x240 [ 543.148895][T12164] ? exit_to_user_mode_loop+0x3b/0x110 [ 543.154339][T12164] exit_to_user_mode_loop+0xe6/0x110 [ 543.159621][T12164] exit_to_user_mode_prepare+0xf6/0x180 [ 543.165164][T12164] syscall_exit_to_user_mode+0x1a/0x50 [ 543.170611][T12164] do_syscall_64+0x61/0xb0 [ 543.175013][T12164] ? clear_bhb_loop+0x40/0x90 [ 543.179672][T12164] ? clear_bhb_loop+0x40/0x90 [ 543.184332][T12164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.190207][T12164] RIP: 0033:0x7f40be7909f7 [ 543.194609][T12164] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 543.214203][T12164] RSP: 002b:00007ffe83664c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 543.222609][T12164] RAX: 0000000000000000 RBX: 00007f40be811d7d RCX: 00007f40be7909f7 [ 543.230565][T12164] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe83664cd0 [ 543.238524][T12164] RBP: 00007ffe83664cd0 R08: 0000000000000000 R09: 0000000000000000 [ 543.246476][T12164] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe83665d60 [ 543.254431][T12164] R13: 00007f40be811d7d R14: 00000000000845f8 R15: 00007ffe83665da0 [ 543.262403][T12164] [ 543.265644][T12164] BUG: Bad page state in process syz-executor pfn:5fe56 [ 543.272705][T12164] page:ffffea00017f9580 refcount:0 mapcount:0 mapping:ffff8880709a07c8 index:0x4 pfn:0x5fe56 [ 543.282879][T12164] aops:z_erofs_cache_aops ino:0 [ 543.287739][T12164] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 543.295495][T12164] page_type: 0xffffffff() [ 543.299825][T12164] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880709a07c8 [ 543.308450][T12164] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 543.317052][T12164] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 543.324341][T12164] page_owner tracks the page as allocated [ 543.330046][T12164] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13169, tgid 13168 (syz.0.3092), ts 542041289252, free_ts 541715074742 [ 543.352189][T12164] post_alloc_hook+0x1cd/0x210 [ 543.356991][T12164] get_page_from_freelist+0x195c/0x19f0 [ 543.362551][T12164] __alloc_pages+0x1e3/0x460 [ 543.367145][T12164] z_erofs_do_read_page+0x20c0/0x3680 [ 543.372553][T12164] z_erofs_pcluster_readmore+0x2cf/0x450 [ 543.378194][T12164] z_erofs_read_folio+0x208/0x540 [ 543.383292][T12164] filemap_read_folio+0x167/0x760 [ 543.388312][T12164] do_read_cache_folio+0x470/0x7e0 [ 543.393434][T12164] erofs_bread+0x16f/0x630 [ 543.397855][T12164] erofs_namei+0x28c/0xf00 [ 543.402256][T12164] erofs_lookup+0x135/0x310 [ 543.406772][T12164] path_openat+0x10b8/0x3190 [ 543.411366][T12164] do_filp_open+0x1c5/0x3d0 [ 543.415901][T12164] do_sys_openat2+0x12c/0x1c0 [ 543.420589][T12164] __x64_sys_openat+0x139/0x160 [ 543.425471][T12164] do_syscall_64+0x55/0xb0 [ 543.429892][T12164] page last free stack trace: [ 543.434585][T12164] free_unref_page_prepare+0x7ce/0x8e0 [ 543.440044][T12164] free_unref_page_list+0xbe/0x860 [ 543.445164][T12164] release_pages+0x1fa0/0x2220 [ 543.449920][T12164] tlb_flush_mmu+0x368/0x4f0 [ 543.454521][T12164] tlb_finish_mmu+0xc3/0x1d0 [ 543.459111][T12164] exit_mmap+0x3f0/0xb50 [ 543.463386][T12164] __mmput+0x118/0x3c0 [ 543.467454][T12164] exit_mm+0x1da/0x2c0 [ 543.471523][T12164] do_exit+0x88e/0x23c0 [ 543.475701][T12164] do_group_exit+0x21b/0x2d0 [ 543.480301][T12164] get_signal+0x12fc/0x1400 [ 543.484831][T12164] arch_do_signal_or_restart+0x9c/0x7b0 [ 543.490375][T12164] exit_to_user_mode_loop+0x70/0x110 [ 543.495674][T12164] exit_to_user_mode_prepare+0xf6/0x180 [ 543.501216][T12164] syscall_exit_to_user_mode+0x1a/0x50 [ 543.506684][T12164] do_syscall_64+0x61/0xb0 [ 543.511098][T12164] Modules linked in: [ 543.515003][T12164] CPU: 0 PID: 12164 Comm: syz-executor Tainted: G B syzkaller #0 [ 543.524100][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 543.534131][T12164] Call Trace: [ 543.537392][T12164] [ 543.540304][T12164] dump_stack_lvl+0x16c/0x230 [ 543.544964][T12164] ? show_regs_print_info+0x20/0x20 [ 543.550144][T12164] ? swiotlb_print_info+0x70/0x70 [ 543.555151][T12164] bad_page+0x14b/0x170 [ 543.559285][T12164] free_unref_page_prepare+0x887/0x8e0 [ 543.564728][T12164] free_unref_page+0x32/0x2e0 [ 543.569393][T12164] ? __folio_put+0xef/0x210 [ 543.573897][T12164] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 543.580302][T12164] erofs_shrink_workstation+0x118/0x290 [ 543.585840][T12164] ? erofs_shrinker_unregister+0x170/0x170 [ 543.591634][T12164] ? io_schedule+0xd0/0xd0 [ 543.596037][T12164] ? kobject_put+0x43c/0x470 [ 543.600609][T12164] erofs_shrinker_unregister+0x5d/0x170 [ 543.606144][T12164] erofs_put_super+0x4e/0x150 [ 543.610807][T12164] ? erofs_free_inode+0xb0/0xb0 [ 543.615646][T12164] generic_shutdown_super+0x134/0x2b0 [ 543.621007][T12164] kill_block_super+0x44/0x90 [ 543.625666][T12164] erofs_kill_sb+0x4c/0x140 [ 543.630155][T12164] deactivate_locked_super+0x97/0x100 [ 543.635516][T12164] cleanup_mnt+0x429/0x4c0 [ 543.639916][T12164] task_work_run+0x1ce/0x250 [ 543.644492][T12164] ? task_work_cancel+0x240/0x240 [ 543.649501][T12164] ? exit_to_user_mode_loop+0x3b/0x110 [ 543.654948][T12164] exit_to_user_mode_loop+0xe6/0x110 [ 543.660219][T12164] exit_to_user_mode_prepare+0xf6/0x180 [ 543.665750][T12164] syscall_exit_to_user_mode+0x1a/0x50 [ 543.671196][T12164] do_syscall_64+0x61/0xb0 [ 543.675609][T12164] ? clear_bhb_loop+0x40/0x90 [ 543.680270][T12164] ? clear_bhb_loop+0x40/0x90 [ 543.684932][T12164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.690809][T12164] RIP: 0033:0x7f40be7909f7 [ 543.695210][T12164] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 543.714798][T12164] RSP: 002b:00007ffe83664c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 543.723195][T12164] RAX: 0000000000000000 RBX: 00007f40be811d7d RCX: 00007f40be7909f7 [ 543.731149][T12164] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe83664cd0 [ 543.739102][T12164] RBP: 00007ffe83664cd0 R08: 0000000000000000 R09: 0000000000000000 [ 543.747055][T12164] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe83665d60 [ 543.755006][T12164] R13: 00007f40be811d7d R14: 00000000000845f8 R15: 00007ffe83665da0 [ 543.762968][T12164]