last executing test programs: 21m43.555592626s ago: executing program 1 (id=42): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 21m42.958530227s ago: executing program 1 (id=44): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x80000000, 0x40002) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xfe779) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,fmask=00000000000000000000000,utf8,iocharset=cp864,discard,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x1548, &(0x7f0000000640)="$eJzs3AuYTlXbOPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJEmSJKfklCZ5JSExhCQNSUgOQxJDSA4Tk8b5fD4kJEmTJCE5Jet/Tbi8vdW/vq++1/e9c/+ua1+z7mfve+21n3s/z7P2npnnm65DazauVa0hEcFfghd+JAJALAAMBIDcABAAQLm4cnGZ67NLTPxrO2F/rwdTrvQI2JXE9c/auP5ZG9c/a+P6Z21c/6yN65+1cf2zNq4/Y1nZpmkFruEl6y58////uNi/ksyf//9BMkqN/WJNqeu6AcT8ia2zA9c/y+P6/8cK/sxGXP+sjeufVf2laSP7P+DpP7ENv/6zgmy/u4brn7Vx/RnLyq70/ec/vyAA/P39QuR/2XNwJPuFwvyb9nelzz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nDaX+ZAoBL7Ss9LsYYY4wxxhhjjP19fLYrPQLGGGOMMcYYY4z9z0MQIEFBADGQDWIhO+QAAQBXQy7IDRG4BuLgWsgD10FeyAf5oQDEQ0EoBBoMWCAIoTAUgShcD0XhBigGxaEElAQHpaA03Ahl4CYoCzdDObgFysOtUAEqQiWoDLdBFbgdqsIdUA3uhOpQA2pCLbgLasPdUAfugbpwL9SD+6A+3A8N4AFoCA9CI3gIGsPD0AQegabQDJpDC2j5+/ntEOB38p+DnvA89ILekAh9oC+8AP2gPwyAF2EgvASD4GUYDK9AEgyBofAqDIPXYDi8DiNgJIyCN2A0vAljYCyMg/GQDBNgIrwFk+BtmAzvwBSYCikwDabDuzADZsIseA9mw/swB+bCPJgPqfABLICFkAYfwiL4CNJhMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22ww74GHbCJ7ALdsMe+BT2wmf/xfxT/5LfDQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA7zYB7Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oRlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78K7sA/WwTpYF+tiPax36fYUNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsBW2xtbYFttie2yPHbADJmACdsSO2Ak7YWfsjF2wC3bFrtgNu2P3jOeyAT6Pz2NvrC76YF/si/0wKdsAfBFfxJdwEL6ML+MrmIRDcCi+iq/iazgcT+IIHImjcBRWEW/iGByLJMZjMibjRJyIk3BS5ukG7+BUTMFpOB2n4wyciTPxPZyN7+P7OBfn4nxMxVRcgAsxDdNwEZ7CdFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9GBYCf4G7cjUm4F/fiPtyH+3E/HsADmIEZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/CZ+K8afVx8dRKITEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEHpFH5BV5RX6RX8SLeFFIFBJGGEEijAEAERVRUVQUFcVEMVFClBBOOFFalBZlRBlRVpQV5cQtory4VVQQFUUbV1lUFlVEW1dV3CGqiWqiuqghaopaopaoLWqLOqKOqCvqinqinqgv7hcNRB8cgA+KzMo0FkOwiRiKTUUzIS++g7USw7G1aCPainZiJI7ADqKVSxBPio5iDHYS/xBj8WnRRYzHruJZ0U10Fz3Ec6KnaO16id5iMvYRfcVU7Cf6iwHiRTEDa4j3cHb2muIVkSSGiKHiVTEfXxPDxetihBgpRok3so8Wb4oxYqwYJ8aLZDFBTBRviUnibTFZvCOmiKkiRUwT08W7YoaYKWaJ98Rs8b6YI+aKeWK+SBUfiAVioUgTH4pF4iORLhaLJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosd4mOxU3widondYo/4VOwVn4l94nOxX3whDogvRYb4ShwUX4tD4htxWHwrjojvxFFxTBwX34sT4gdxUpwSp8UZcVb8KM6Jn8R54QVIlEJKqWQgY2Q2GSuzyxzyKplTBhef3WtknLxW5pHXybwyn8wvC8h4WVAWkloaaSXJUBaWRWRUXi+LyhtkMVlclpAlpZOlZGl5oywjb5Jl5c2ynLxFlpe3ygqyoqwkK8vbZBV5u4TIhX1UlzVkTVlL3iUT4W5ZR94j68p7ZT15n6wv75cN5AOyoXxQNpIPycbyYdlEPiKbymayuWwhW8pHZSv5mGwt28i2sp1sLx+XHeQTMkE+KTtKf/EUeVp2kc/IrvJZ2U12lz3kT/K89LKX7C2hD8i+8gXZT/aXA2IBQL4kB8mX5WD5ikySQ+RQ+aocJl+Tw+XrcoQcKUfJN+Ro+aYcI8fKcXK8TJYT5ET5lpwk35aT5TtyipwqU+Q0OUAO/LmnWVL+Yf5bv5E/+Oe9b5Sb5Ga5RW6V2+R2uUN+LHfKnXKX3CX3yD1yr9wr98l9cr/cLw/IAzJDZsiD8qA8JA/Jw/KwPCKPyKPymDwjv5cn5A/ypDwlT8kz8qw8K89dfA5AoRJKKqUCFaOyqViVXeVQV6mc6mqVS+VWEXWNist8F1bXqbwqn8qvCqh4VVAVUloZZRWpUBVWRVRUXY8XTxhVQpVUTpVSpdWNF/LVtSrPH+erouoGVUwV/0X+pfEl/s74WqqWqpVqpVqr1qqtaqvaq/aqg+qgElSC6qg6qk6qk+qsOqsuqovqqrqqbqqb6qF6qJ6qp+qleqlElaj6qhdUP9VfDVAvqoHqJTVIDVKD1WCVpJLUUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVLJKVhPVRDVJTVKT1WQ1RU1RKSpFTVfT1Qw1Q81Ss9RsNVvNUXPUPDVPpapUtUAtUGkqTS1Si1S6WqwWq6VqqVqulquVaqVarVartWqtWq/Wq3S1SW1SW9QWtU1tUzvUDrVT7VS71C61R+1Re9VetU/tU/vVfnVAHVAZKkMdVAfVIXVIHVaH1RF1RB1VR9VxdVydUCfUSXVSnVan1Vl1Vp1T59R5dT5z2heIQAQqUEFMEBPEBrFBjiBHkDPIGeQKcgWRIBLEBXFBnuC6IG+QL8gfFAjig4JBoUAHJrCBuFj0aHB9UDS4ISgWFA9KBCUDF5QKSgc3BmWCm4Kywc1BueCWoHxwa1AhqBhUCioHtwVVgtuDqsEdQbXgzqB6UCOoGdQK7gpqB3cHdYJ7grrBvUG94L6gfnB/0CB4IGgYPBg0Ch4KGgcPB02CR4KmQbOgedAiaPm39u/9yXyPuV66t07UfXRf/YLup/vrAfpFPVC/pAfpl/Vg/YpO0kP0UP2qHqZf08P163qEHqlH6Tf0aP2mHqPH6nF6vE7WE/RE/ZaepN/Wk/U7eoqeqlP0ND1dv6tn6Jl6ln5Pz9bv6zl6rp6n5+tU/YFeoBfqNP2hXqQ/0ul6sV6il+plerleoVfqVXq1XqPX6nV6vQK9UW/Sm/UWvVVv09v1Dv2x3qk/0bv0br1Hf6r36s/0Pv253q+/0Af0lzpDf6UP6q/1If2NPqy/1Uf0d/qoPqaP6+/1Cf2DPqlP6dP6jD6rf9Tn9E/6vPaZk/vMj3ejjDIxJsbEmliTw+QwOU1Ok8vkMhETMXEmzuQxeUxek9fkN/lNvIk3hUwhk4kMmcKmsImaqClqippippgpYUoYZ5wpbUqbMqaMKWvKmnKmnClvypsKpoKpZCqZ28xt5nZzu7nD3GHuNHeaGqaGqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYpqapaW6am5ampWllWpnWprVpa9qa9qa96WA6mASTYDqajqaT6WQ6m86mi+liupquppvpZnqYHqan6Wl6mV4m0SSavqav6Wf6mQFmgBloBppBZpAZbAabJJNkhpqhZpgZZoab4WaEGWlGZU5UzZtmjBlrxpnxJtkkm4lmoplkJpnJZrKZYqaYFJNippvpZoaZYWaZWWa2mW3mmDlmnplnUk2qWWAWmDSTZhaZRSbdpJslZolZZpaZFWaFWWVWmTVmjVkH68wGs8FsMpvMFrPFbDPbzA6zw+w0O80us8vsMXvMXrPXI4DZb/abA+aAyTAZ5qA5aA6ZQ+awOWyOmCPmqDlqjpvj5oQ5YU6ak+a0OW3OmnwXPy+9ibXZbQ57lc1pr7a5bG77r3F+W8DG24K2kNU2r833i9hYa4vZ4raELWmdLWVL2xt/FVewFW0lW9neZqvY223VX8W17d22jr3H1rX32lr2rl/E9ex9tr592DZABLDNbCPbwja2D9sm9hHb1DazzW0L294+bjvYJ2yCfdJ2tE/9Kl5gF9pVdrVdY9faXXa3PW3P2EP2G3vW/mh72d52oH3JDrIv28H2FZtkh/wqHmXfsKPtm3aMHWvH2fG/iqfYqTbFTrPT7bt2hp35qzjVfmBn2zQ7x8618+z8n+PMMaXZD+0i+5FNtwEssUvtMrvcrrArL43V57br7Qa70e60n9gtdqvdZrfbHZcmwna33WM/tXvtZ/ag/drut1/YA/awzbBf/RxnHt9h+609Yr+zR+0xe9x+b0/YH9Sl7Mxj/97+ZM9bb4GQgCQpCiiGslEsZaccdBXlpKspF+WmCF1DcXQt5aHrKC/lo/xUgOKpIBUiTYYsEYVUmIpQlK6nS8MrQSXJUSkqTTdSGbqJytLNVI5uofJ0K1WgilSJKtNtVIVup6p0B1WjO6k61aCaVIvuotp0N9Whe6gu3Uv16D6qT/dTA3qAGtKD1Igeosb0MDWhR6gpNaPm1IJa0qPUih6j1tSG2lI7ak+PUwd6ghLoSepIT1En+gd1pqepCz1DXelZ6kbdqQc9Rz3peepFvSmR+lBfeoH6UX8aQC/SQHqJBtHLNJheoSQaQkPpVRpGr9Fwep1G0EgaRW/QaHqTxtBYGkfjKZkm0ER6iybR2zSZ3qEpNJVSaBpNp3dpBs2kWfQezab3aQ7NpXk0n1LpA1pACymNPqRF9BGl02JaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacd9DHtpE9oF+2mPfQp7aXPaB99TvvpCzpAX1IGfUUH6Ws6RN/QYfrW96bv6Cgdo+P0PZ2gH+gknaLTdIbO0o90jn6i8+QJQgxFKEMVBmFMmC2MDbOHOcKrwpzh1WGuMHcYCa8J48JrwzzhdWHeMF+YPywQxocFw0KhDk1oQwrDsHBYJIyG14dFwxvCYmHxsERYMnRhqbB0eGNYJrwpLBveHJYLbwnLh7eGFcKK4cP3Vg5vC6uEt4dVwzvCauGdYfWwRlgzrBXeFdYO7w7rhPeEdcN7w7LhfWH98P6wQfhA2DB8MGwUPhQ2Dh8Om4SPhE3DZmHzsEXYMnw0bBU+FrYO24Rtw3Zh+/DxsEP4RJgQPhl2DJ/6ef19C39/fWLYJ+wbvhC+EHp/j5wXnR9NjX4QXRBdGE2LfhhdFP0omh5dHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3Rj1vlY2cOiEk065wMW4bC7WZXc53FUup7va5XK5XcRd4+LctS6Pu87ldflcflfAxbuCrpDTzjjryIWusCviou56V9Td4Iq54q6EK+mcK+VKuxaupWvpWrnHXGvXxrV17Vw797h73D3hnnBPuo7uKdfJ/cN1dk+7Lu4Z94x71nVz3V0P95zr6SbkuvCaTHR9XV/Xz/VzA9wAN9ANdIPcIDfYDXZJLskNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbtkN9FNdJPcJDfZTXZT3BSX4lLcdDfdzXAzXJWZF/Yyx81x89w8l+pS3QKXOWdMc4vcIpfu0t0St8Qtc8vcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3A63w+10O90un/tCp26v2+f2uf1uvzvgvnQZ7it30H3tDrlv3GH3rTvivnNH3TF33H3vTrgf3El3yp12Z9xZ96M7535y5513yZEJkYmRtyKTIm9HJkfeiUyJTI2kRKZFpkfejcyIzIzMirwXmR15PzInMjcyLzI/khr5ILIgsjCSFvkwsijyUSQ9sjiyJLI0siyyPOJ9wS2hL+yL+Ki/3hf1N/hivrgv4Ut650v50v5GX8bf5Mv6m305f4sv72/1FXxFX8k/4pv6Zr65b+Fb+kd9K/+Yb+3b+La+nW/vH/cd/BM+wT/pO/qnfCf/D9/ZP+27+Gd8V/+s7+a7+x7+Od/TP+97+d4+0ffxff0Lvp/v7wf4F/1A/5If5F/2g/0rPskP8UP9q36Yf80P96/7EX6kHxXzhh996RIZxvtkP8FP9G/5Sf5tP9m/46f4qT7FT/PT/bt+hp/pZ/n3/Gz/vp/j5/p5fr5P9R/4BX6hT/Mf+kX+I5/uF1+6qexX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/iP/U7/id/ld/s9/lO/13/m9/nP/X7/hT/gv/QZ/it/0H/tD/lv/GH/rT/iv/NH/TF/3H/vT/gf/El/yp/2Z/xZ/6M/53/y5/l/1hhjjDHG/pQJl5vil2su3M7v8xs54p827gsAV28tkPHP6zNnlOvyXmj3F/HtIwDwZO+uD15aqldPTEy8uG26hKDIXIBLvwnKFAOX48XQFh6HBGgDZX5z/P1F97P0B/1HbwHI8U85sXA5vtz/5wCY+Bv9P9pu1ILy4em4/0//cwGKFbmckx0ux4uh7c/3V9pA2d8Zf75WfzD+7F8kA7T+p5yccCk+ePHbGjLHXxoeg6cg4RdbMsYYY4wxxhhjF/QXlTpfuv689Befv3V9Hq8u52SDy/EfXZ8zxhhjjDHGGGPsynu6e48nHk1IaNP5v96o+t/K+tONJvA/1TM3frPhPcClRxQA/MUOATIb8t95FJv/LftKuvjS+ddVy874AP53lPLvaFzhNybGGGOMMcbY3+7ypP+Xj6srNSDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+nd8ndiVPkbGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsSvt/AQAA///BeAKt") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x2, 0x0) getdents64(r3, 0x0, 0x22) 21m41.261293914s ago: executing program 1 (id=48): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008740)=[{{0x0, 0x0, &(0x7f00000080c0)=[{&(0x7f0000006f40)="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", 0xea0}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], &(0x7f00000001c0)=[0x4], 0x0, 0x1, 0x1}}, 0x40) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r3, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, 0xffffffffffffffff, 0x0) 21m40.921611585s ago: executing program 3 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8004) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x0, &(0x7f0000000840)=""/4103, &(0x7f00000007c0)=0x1007) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1094c3, 0x0, 0x0, 0x0, &(0x7f0000000000)) 21m40.921331623s ago: executing program 0 (id=50): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdb6, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x20}}], 0x20}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 21m39.765897096s ago: executing program 0 (id=52): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 21m38.684798684s ago: executing program 3 (id=54): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 21m38.546231757s ago: executing program 1 (id=55): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 21m36.823000018s ago: executing program 0 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x214000, 0x1000, 0x0, 0x2}, 0x20) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 21m35.921146579s ago: executing program 1 (id=58): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x80000000, 0x40002) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0xfe779) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,fmask=00000000000000000000000,utf8,iocharset=cp864,discard,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x1548, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x2, 0x0) getdents64(r4, 0x0, 0x22) 21m35.574521666s ago: executing program 3 (id=59): iopl(0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") chdir(0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c60a, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x142) 21m33.117487563s ago: executing program 0 (id=61): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 21m28.795473864s ago: executing program 3 (id=64): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) 21m28.130679368s ago: executing program 0 (id=65): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008740)=[{{0x0, 0x0, &(0x7f00000080c0)=[{&(0x7f0000006f40)="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", 0xea0}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], &(0x7f00000001c0)=[0x4], 0x0, 0x1, 0x1}}, 0x40) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r3, 0x0) 21m26.701617245s ago: executing program 3 (id=67): openat$hwrng(0xffffffffffffff9c, 0x0, 0x138000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r4 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x110, 0x11, 0x148, 0x110, 0x10, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0xc8, 0x110, 0x1c, {0x6}, [@common=@unspec=@cgroup0={{0x28}, {0x9, 0x3}}, @common=@unspec=@mark={{0x30}, {0x863, 0x7fff}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xb9fb, 0x8, 0x81, 'pptp\x00', {0x4}}}}, {{@ip={@remote, @empty, 0x0, 0xff000000, 'dvmrp0\x00', 'veth1_to_hsr\x00', {}, {}, 0x32, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="f1c79a897dea", 0x9, 0x8, [0x3b, 0x29, 0x1f, 0x2, 0x29, 0x25, 0x38, 0x25, 0xa, 0x33, 0x33, 0x1f, 0x25, 0x11, 0x16, 0x1b], 0x2, 0x3ff, 0x9}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r5, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r6 = socket(0x1, 0x3, 0x0) recvfrom$packet(r6, 0x0, 0x0, 0x2a56ea8b4750591f, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 21m25.965900049s ago: executing program 0 (id=69): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 21m24.667761018s ago: executing program 1 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21m22.694692943s ago: executing program 3 (id=71): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="f860787c983555067ca7370e1b825880e6129ce67e", 0x15}, {0x0}], 0x2, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}], 0x1, 0x4000000) 21m9.753648529s ago: executing program 32 (id=69): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 21m9.311387918s ago: executing program 33 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21m7.228439334s ago: executing program 34 (id=71): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="f860787c983555067ca7370e1b825880e6129ce67e", 0x15}, {0x0}], 0x2, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}], 0x1, 0x4000000) 14m22.271453196s ago: executing program 2 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a0001010000000904000016020200000524"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3ffffffffffff19, 0x2, 0x0) syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) 14m13.253895645s ago: executing program 2 (id=356): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)=0x6) 14m11.440798033s ago: executing program 4 (id=357): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 14m10.669865004s ago: executing program 4 (id=358): r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x402, 0x0) fcntl$setlease(r0, 0x400, 0x4) 14m10.216163339s ago: executing program 4 (id=359): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 14m9.708885842s ago: executing program 4 (id=360): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04030b"], 0xe) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) 14m9.510192136s ago: executing program 2 (id=361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c3000000000300", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 14m9.090120287s ago: executing program 4 (id=362): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x100000001) readv(r4, &(0x7f0000001300)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0x0, 0xa}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x4}, {0x8, 0x0, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x4, 0x16, 0x1, 0x6, 0x5}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x3, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x29, 0x15, 0xffff, 0x4, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) syz_clone3(&(0x7f0000000300)={0x200004400, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x58) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.current\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000240000000800"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r8, &(0x7f0000000540), 0x0}, 0x20) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xfffffff5, 0x7, 0x6, 0x800, 0x5, "0000262301af79070000f6ffffff00", 0x8, 0x8}) 14m9.04032023s ago: executing program 2 (id=363): openat$sysfs(0xffffffffffffff9c, 0x0, 0x123481, 0x127) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x4) syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000280)={[{@discard}, {@space_cache}, {@nobarrier}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x74, 0x6c, 0x67, 0x6b, 0x32, 0x34]}}]}, 0x3, 0x5136, &(0x7f0000000340)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 14m7.111715408s ago: executing program 4 (id=364): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f0000000480)={[{@noacl}, {@journal_checksum}]}, 0x5, 0x563, &(0x7f0000000600)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYS+TuXRt/THBh/koOhzo+wztXRlNl9GkY60Dtwf34osMQcSB+K7vPg7/Af+KgQ6GjKoPvkRuetNla9KkW7Z05vOBO87JPdm539z7PT03JyEBDK2J7J9CxMsR8XUScTAiknzfaOQ7J9bbrd2/OpttSdTrn/yZNNpl9azVnpbn7Y/1yksR8euXEccLm/utrqwulMrldCmvT9YWL01WV1ZPXFgszafz6cXpmZlTb81Mv/vO232L9fWz/3z38e0PTn11dO3bn+8eupnE6TiQ72vG8YSutVYmYiJ/Tcbi9CMNp/rQ2U6SDPoAeCwjeZ6PRTYGHIyRPOuB/78vIqIODKlk2/n/19M5EOAZa84Dmvf2fboPfm7ce3/9Bmhz/KPr743Ensa90b615KE7o+x+d7wP/Wd9/PLHrZvZFv17HwKgq2vXI+Lk6Ojm8S/Jx79W23tv6GQPbR7tw/gHz87tbP7zRrv5T2Fj/hNt5j/72+Tu4+ie/4W7feimo2z+917b+e/GotX4SF57oTHnG0vOXyin2dj2YkQci7HdWX2r9ZxTa3fqnfa1zv+yLeu/ORfMj+Pu6O6HnzNXqpWeJOZW965HvNJ2/ptsnP+kzfnPXo+zPfZxJL31Wqd93eN/uuo/Rj1pe/4frGglW69PTjauh8nmVbHZ3zeO/Nap/0HHn53/fVvHP560rtdWt9/HD3v+TTvteyj+6P3635V82ijvyh+7UqrVlqYidiUfbX58+sFzm/Vm+yz+Y0e3Hv/aXf97I+KzHuO/cfinV3uKf0Dnf25b53/7hTsffv59p/57G//ebJSO5Y/0Mv71eoBP8toBAAAAAADATlOIiAORFIob5UKhWFz/fMfh2FcoV6q14+cryxfnovFd2fEYKzRXug+2fB5iKv88bLM+/Uh9JiIORcQ3I3sb9eJspTw36OABAAAAAAAAAAAAAAAAAABgh9jf4fv/md9HBn10wFPnJ79heHXN/3780hOwI/n7D8NL/sPwkv8wvOQ/DC/5D8NL/sNQ2hvyH4aa/AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+OnvmTLbV1+5fnc3qc5dXlhcql0/MpdWF4uLybHG2snSpOF+pzJfT4mxlsdv/V65ULk1Nx/KVyVparU1WV1bPLVaWL9bOXVgszafn0rFnEhUAAAAAAAAAAAAAAAAAAAA8X6orqwulcjldUlB4rMJoz40LsVOOWaF7YdAjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88F8AAAD//0TvN7E=") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f00000013c0)=""/167) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000884}, 0x0) socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x44030, 0xffffffffffffffff, 0x1370a000) 14m6.85479407s ago: executing program 2 (id=365): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 14m5.531292527s ago: executing program 2 (id=366): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c1}, 0xc8c4) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000dc0)={0x0, "507cea5a1af14db701e8ffbbe3d2a2d6"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 13m51.049969213s ago: executing program 35 (id=364): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f0000000480)={[{@noacl}, {@journal_checksum}]}, 0x5, 0x563, &(0x7f0000000600)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYS+TuXRt/THBh/koOhzo+wztXRlNl9GkY60Dtwf34osMQcSB+K7vPg7/Af+KgQ6GjKoPvkRuetNla9KkW7Z05vOBO87JPdm539z7PT03JyEBDK2J7J9CxMsR8XUScTAiknzfaOQ7J9bbrd2/OpttSdTrn/yZNNpl9azVnpbn7Y/1yksR8euXEccLm/utrqwulMrldCmvT9YWL01WV1ZPXFgszafz6cXpmZlTb81Mv/vO232L9fWz/3z38e0PTn11dO3bn+8eupnE6TiQ72vG8YSutVYmYiJ/Tcbi9CMNp/rQ2U6SDPoAeCwjeZ6PRTYGHIyRPOuB/78vIqIODKlk2/n/19M5EOAZa84Dmvf2fboPfm7ce3/9Bmhz/KPr743Ensa90b615KE7o+x+d7wP/Wd9/PLHrZvZFv17HwKgq2vXI+Lk6Ojm8S/Jx79W23tv6GQPbR7tw/gHz87tbP7zRrv5T2Fj/hNt5j/72+Tu4+ie/4W7feimo2z+917b+e/GotX4SF57oTHnG0vOXyin2dj2YkQci7HdWX2r9ZxTa3fqnfa1zv+yLeu/ORfMj+Pu6O6HnzNXqpWeJOZW965HvNJ2/ptsnP+kzfnPXo+zPfZxJL31Wqd93eN/uuo/Rj1pe/4frGglW69PTjauh8nmVbHZ3zeO/Nap/0HHn53/fVvHP560rtdWt9/HD3v+TTvteyj+6P3635V82ijvyh+7UqrVlqYidiUfbX58+sFzm/Vm+yz+Y0e3Hv/aXf97I+KzHuO/cfinV3uKf0Dnf25b53/7hTsffv59p/57G//ebJSO5Y/0Mv71eoBP8toBAAAAAADATlOIiAORFIob5UKhWFz/fMfh2FcoV6q14+cryxfnovFd2fEYKzRXug+2fB5iKv88bLM+/Uh9JiIORcQ3I3sb9eJspTw36OABAAAAAAAAAAAAAAAAAABgh9jf4fv/md9HBn10wFPnJ79heHXN/3780hOwI/n7D8NL/sPwkv8wvOQ/DC/5D8NL/sNQ2hvyH4aa/AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+OnvmTLbV1+5fnc3qc5dXlhcql0/MpdWF4uLybHG2snSpOF+pzJfT4mxlsdv/V65ULk1Nx/KVyVparU1WV1bPLVaWL9bOXVgszafn0rFnEhUAAAAAAAAAAAAAAAAAAAA8X6orqwulcjldUlB4rMJoz40LsVOOWaF7YdAjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88F8AAAD//0TvN7E=") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f00000013c0)=""/167) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000884}, 0x0) socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x44030, 0xffffffffffffffff, 0x1370a000) 13m49.332164335s ago: executing program 36 (id=366): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c1}, 0xc8c4) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000dc0)={0x0, "507cea5a1af14db701e8ffbbe3d2a2d6"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 9m13.28208664s ago: executing program 8 (id=660): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) 9m6.476781287s ago: executing program 8 (id=663): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f0000000040)) 8m58.792059632s ago: executing program 8 (id=669): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) syz_usb_disconnect(0xffffffffffffffff) rt_sigpending(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/143, 0x8f) syz_usb_disconnect(r0) 8m54.189768968s ago: executing program 8 (id=674): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@xino_on}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES64], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg=0xb234626ba419ac6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m49.000116789s ago: executing program 8 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xac) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001940)={r1, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, &(0x7f0000001740)=[{}], 0x8, 0x0, 0x0, &(0x7f00000017c0), 0x8, 0x55, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x1f, 0x10, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@alu={0x7, 0x1, 0x1, 0x8, 0x1, 0xfffffffffffffff4, 0x18}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x3, 0x1000, &(0x7f0000000600)=""/4096, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x2e, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001640)={0x1, 0x9, 0x8, 0x7ff}, 0x10, r6, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 8m43.287564244s ago: executing program 8 (id=679): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x2c5481, 0x1cf) execve(0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) 8m27.670119172s ago: executing program 37 (id=679): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x2c5481, 0x1cf) execve(0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) 5.243732761s ago: executing program 6 (id=1015): socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) close(0x3) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002500), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') rmdir(&(0x7f00000196c0)='./cgroup/../file0\x00') 4.604394297s ago: executing program 6 (id=1016): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000575c820490d00702f260102030109021200010000008309040000000e"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000060605000000000000000000000000060500010007000000090002004ff47a3000000000057e7fa44e1ccd2e6e61fa73a7000500020000000900020073797a31000000000c000300686173683a6970001200030068613a6e65742c706f72"], 0x5c}, 0x1, 0x0, 0x0, 0x48050}, 0x20008085) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000140)="ac17b6bb2a4f3f3b9f782300a5d610a23fcbd25188af143d9ece262b378218f5b115045af6ec8fb89a3fe2f6ce011bf5e3f6", 0xca, r2, 0x4}, 0x38) ioctl$KVM_SET_SREGS2(r1, 0x4140aecd, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000080), 0xa3a, 0x4043c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000020a05f0ff00000000000000070000090900010073797a3100000000140000001100010000000000000000000300000a"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000001c0)={0x1d, r7, 0x3, {0x0, 0x1}, 0xff}, 0x18) connect$inet6(r6, &(0x7f0000000340)={0x2, 0x4e21, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000580)={'\x00', 0x1, 0xdd37, 0x80, 0xa3, 0x81}) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8b37, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000c95d"}) syz_open_dev$sndctrl(&(0x7f0000000ec0), 0x188, 0x0) 1.603282383s ago: executing program 6 (id=1017): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcbb}]}) sync_file_range(0xffffffffffffffff, 0x7, 0x9, 0x0) 1.012996859s ago: executing program 6 (id=1018): readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0xfffffffffffffdf2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110005"], 0x68}, 0x1, 0x0, 0x0, 0x4008010}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 515.200093ms ago: executing program 6 (id=1019): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8088, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x3, 0x232, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000002"], 0x454680) 0s ago: executing program 6 (id=1020): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): yz.6.871: corrupted inode contents [ 1312.701436][T11160] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.871: mark_inode_dirty error [ 1312.751703][T11160] Quota error (device loop6): write_blk: dquota write failed [ 1312.762348][T11160] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1312.809666][T11160] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.871: Failed to acquire dquot type 0 [ 1312.834689][T11160] loop6: lost filesystem error report for type 5 error -117 [ 1312.856285][T11160] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.871: corrupted inode contents [ 1312.885231][T10990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.893974][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.894197][T11160] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.871: mark_inode_dirty error [ 1312.934253][T10990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.959659][T11160] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.871: corrupted inode contents [ 1312.961868][T11002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.979994][T11002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.992207][T11160] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.871: mark_inode_dirty error [ 1313.013300][T11002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.033684][T11160] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.871: corrupted inode contents [ 1313.058375][T11160] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1313.086376][T11160] loop6: lost filesystem error report for type 5 error -117 [ 1313.093827][T11160] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.871: corrupted inode contents [ 1313.117256][ T14] hsr_slave_0: left promiscuous mode [ 1313.120813][T11160] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.871: mark_inode_dirty error [ 1313.141093][T11160] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1313.151001][ T14] hsr_slave_1: left promiscuous mode [ 1313.151031][T11160] loop6: lost filesystem error report for type 5 error -117 [ 1313.161563][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1313.167036][T11160] EXT4-fs (loop6): 1 truncate cleaned up [ 1313.187160][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.191875][T11160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1313.222591][T11160] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1313.252261][T11160] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.871: iget: bad i_size value: 360287970189639690 [ 1313.252300][ T14] hsr_slave_0: left promiscuous mode [ 1313.274826][ T14] hsr_slave_1: left promiscuous mode [ 1313.286137][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1313.301619][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.412509][ T7822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.643821][T11165] loop6: detected capacity change from 0 to 64 [ 1313.711363][ T29] audit: type=1800 audit(1780193822.090:51): pid=11165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.872" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 1314.629830][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1314.682952][ T29] audit: type=1326 audit(1780193823.060:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.6.876" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ffb9ce59 code=0x7ffc0000 [ 1314.732162][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1314.743465][ T29] audit: type=1326 audit(1780193823.090:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.6.876" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ffb9ce59 code=0x7ffc0000 [ 1314.844772][ T29] audit: type=1326 audit(1780193823.090:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.6.876" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ffb9ce59 code=0x7ffc0000 [ 1314.926921][ T29] audit: type=1326 audit(1780193823.100:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.6.876" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7ff4ffb9ce59 code=0x7ffc0000 [ 1314.975653][ T29] audit: type=1326 audit(1780193823.100:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.6.876" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ffb9ce59 code=0x7ffc0000 [ 1315.044825][ T29] audit: type=1326 audit(1780193823.100:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.6.876" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ffb9ce59 code=0x7ffc0000 [ 1315.077018][ T29] audit: type=1326 audit(1780193823.100:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.6.876" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4ffb9ce59 code=0x7ffc0000 [ 1315.107750][ T29] audit: type=1326 audit(1780193823.100:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.6.876" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff4ffb9ce59 code=0x7ffc0000 [ 1315.163597][ T29] audit: type=1326 audit(1780193823.100:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.6.876" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff4ffb9ce59 code=0x7ffc0000 [ 1315.577293][T11180] loop6: detected capacity change from 0 to 512 [ 1315.661538][T11180] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #3: comm syz.6.878: corrupted inode contents [ 1315.678057][T11180] fserror_report: 12 callbacks suppressed [ 1315.678134][T11180] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1315.687559][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1315.703589][ C1] EXT4-fs (loop6): initial error at time 1780193824: ext4_do_update_inode:5690: inode 3 [ 1315.713753][ C1] EXT4-fs (loop6): last error at time 1780193824: ext4_do_update_inode:5690: inode 3 [ 1315.718217][T11180] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #3: comm syz.6.878: mark_inode_dirty error [ 1315.736164][T11180] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1315.761621][T11180] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #3: comm syz.6.878: corrupted inode contents [ 1315.791664][T11180] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1315.794445][T11180] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.878: mark_inode_dirty error [ 1315.823291][T11180] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1315.825499][T11180] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.878: Failed to acquire dquot type 0 [ 1315.855259][T11180] loop6: lost filesystem error report for type 5 error -117 [ 1315.874982][T11180] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.878: corrupted inode contents [ 1315.901204][T11180] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1315.920490][T11180] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.878: mark_inode_dirty error [ 1315.981598][T11180] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1315.983521][T11180] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.878: corrupted inode contents [ 1316.013248][T11180] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1316.014790][T11180] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.878: mark_inode_dirty error [ 1316.045063][T11180] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1316.046739][T11180] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.878: corrupted inode contents [ 1316.069050][T11180] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1316.070706][T11180] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1316.100513][T11180] loop6: lost filesystem error report for type 5 error -117 [ 1316.102230][T11180] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.878: corrupted inode contents [ 1316.122927][T11180] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1316.125746][T11180] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.878: mark_inode_dirty error [ 1316.166618][T11180] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1316.176309][T11180] loop6: lost filesystem error report for type 5 error -117 [ 1316.183933][T11180] EXT4-fs (loop6): 1 truncate cleaned up [ 1316.205341][T11180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1316.223188][T11180] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1316.255352][T11180] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.878: iget: bad i_size value: 360287970189639690 [ 1316.300435][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1316.337145][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1316.425122][ T7822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.643801][T11185] loop6: detected capacity change from 0 to 64 [ 1316.756857][T10970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.807640][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.869489][T10970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.007618][T11002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.031369][T11002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.072637][T11002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.136567][T10970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.170337][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.290972][T10970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.194757][T10970] hsr_slave_0: entered promiscuous mode [ 1318.218157][T10970] hsr_slave_1: entered promiscuous mode [ 1318.242782][T10970] debugfs: 'hsr0' already exists in 'hsr' [ 1318.249263][T10970] Cannot create hsr debugfs directory [ 1318.409778][T11002] hsr_slave_0: entered promiscuous mode [ 1318.446731][T11002] hsr_slave_1: entered promiscuous mode [ 1318.475873][T11002] debugfs: 'hsr0' already exists in 'hsr' [ 1318.495412][T11002] Cannot create hsr debugfs directory [ 1318.501693][T11201] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1318.676578][T10990] hsr_slave_0: entered promiscuous mode [ 1318.788545][T10990] hsr_slave_1: entered promiscuous mode [ 1318.975590][T10990] debugfs: 'hsr0' already exists in 'hsr' [ 1319.002951][T10990] Cannot create hsr debugfs directory [ 1323.029629][T10898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.435776][T11227] loop6: detected capacity change from 0 to 64 [ 1324.534374][T10898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.945463][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.953153][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.171631][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.179291][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.776816][T10970] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1326.892556][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1327.004822][T10970] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1327.105001][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1327.152589][T10970] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1327.213101][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1327.252587][T10970] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1327.358232][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1328.375615][T11002] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1328.444600][T11002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1328.495857][T11002] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1328.578090][T11002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1328.660648][T11002] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1328.777982][T11002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1328.882803][T11002] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1328.953673][T11002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1329.197800][T10990] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1329.265124][T10990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1329.298580][T10990] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1329.376417][T10990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1329.412082][T10990] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1329.481086][T10990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1329.550998][T10990] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1329.595782][T10990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1329.666888][T10898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1330.345549][T10970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.867333][T10970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.992754][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.000452][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.223026][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.230726][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1331.456414][T11002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.105052][T11002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.351056][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.358852][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.516238][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.523979][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.734462][T10990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.347219][T10990] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.673981][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.681739][ T6086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.884982][T10898] veth0_vlan: entered promiscuous mode [ 1333.979999][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.987773][ T5892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1336.059706][T11304] fuse: Unknown parameter 'use00000000000000000000' [ 1337.325572][T10445] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1337.338421][T10445] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1337.351124][T10445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1337.383136][T10445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1337.412911][T10445] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1337.914697][T10970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.759002][ T6917] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1339.088244][ T6917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.142226][ T6917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.202096][ T6917] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1339.265804][ T6917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.370961][ T6917] usb 7-1: config 0 descriptor?? [ 1339.504474][ T14] bridge_slave_1: left allmulticast mode [ 1339.531155][T10445] Bluetooth: hci0: command tx timeout [ 1339.555261][ T14] bridge_slave_1: left promiscuous mode [ 1339.582831][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.657539][ T14] bridge_slave_0: left allmulticast mode [ 1339.685839][ T14] bridge_slave_0: left promiscuous mode [ 1339.733373][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.092405][ T6917] hkems 0003:2006:0118.0005: item fetching failed at offset 5/7 [ 1340.147230][ T6917] hkems 0003:2006:0118.0005: parse failed [ 1340.186205][ T6917] hkems 0003:2006:0118.0005: probe with driver hkems failed with error -22 [ 1340.313038][ T34] usb 7-1: USB disconnect, device number 26 [ 1340.909794][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.962674][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.981701][ T14] bond0 (unregistering): Released all slaves [ 1341.112621][T11002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.194393][T10990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.429758][ T14] hsr_slave_0: left promiscuous mode [ 1341.455477][ T14] hsr_slave_1: left promiscuous mode [ 1341.503556][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.570736][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.610058][T10445] Bluetooth: hci0: command tx timeout [ 1341.689981][ T14] veth0_vlan: left promiscuous mode [ 1343.204355][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1343.268104][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1343.448487][ T6917] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1343.635170][ T6917] usb 7-1: Using ep0 maxpacket: 16 [ 1343.658197][ T6917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1343.690072][T10445] Bluetooth: hci0: command tx timeout [ 1343.728625][ T6917] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1343.755721][ T6917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.779613][ T6917] usb 7-1: Product: syz [ 1343.795287][ T6917] usb 7-1: Manufacturer: syz [ 1343.818469][ T6917] usb 7-1: SerialNumber: syz [ 1343.854907][ T6917] usb 7-1: config 0 descriptor?? [ 1344.001539][ T6917] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1344.052909][ T6917] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1344.585980][ T6917] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1344.830065][T11002] veth0_vlan: entered promiscuous mode [ 1344.879494][T10970] veth0_vlan: entered promiscuous mode [ 1345.064250][ T6917] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1345.094431][ T6917] em28xx 7-1:0.0: board has no eeprom [ 1345.369180][T11002] veth1_vlan: entered promiscuous mode [ 1345.421233][T10970] veth1_vlan: entered promiscuous mode [ 1345.432949][ T6917] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1345.456187][ T6917] em28xx 7-1:0.0: dvb set to bulk mode. [ 1345.482315][ T9319] em28xx 7-1:0.0: Binding DVB extension [ 1345.576207][ T6917] usb 7-1: USB disconnect, device number 27 [ 1345.626533][ T6917] em28xx 7-1:0.0: Disconnecting em28xx [ 1345.770110][T10445] Bluetooth: hci0: command tx timeout [ 1346.132191][ T9319] em28xx 7-1:0.0: Registering input extension [ 1346.210564][ T6917] em28xx 7-1:0.0: Closing input extension [ 1346.326911][ T6917] em28xx 7-1:0.0: Freeing device [ 1347.093693][T11399] loop6: detected capacity change from 0 to 1024 [ 1347.504250][T11002] veth0_macvtap: entered promiscuous mode [ 1347.947275][T11002] veth1_macvtap: entered promiscuous mode [ 1348.085982][T10356] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1348.100750][T10356] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1348.120347][T10356] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1348.147274][T10356] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1348.182005][T10356] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1348.358592][T11411] fuse: Unknown parameter 'user_i00000000000000000000' [ 1349.144991][T11002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1349.314987][T11002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1349.482831][ T198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.538936][ T198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.726496][ T198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.770340][ T198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.248864][T10356] Bluetooth: hci1: command tx timeout [ 1351.812768][T11313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.858452][T11313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.906678][T11313] bridge_slave_0: entered allmulticast mode [ 1351.963800][T10445] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1351.982423][T11313] bridge_slave_0: entered promiscuous mode [ 1351.991597][T10445] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1352.015272][T10445] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1352.049538][T10445] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1352.078636][T10445] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1352.328969][T10356] Bluetooth: hci1: command tx timeout [ 1352.346734][T11313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.416951][T11313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.476372][T11313] bridge_slave_1: entered allmulticast mode [ 1352.538044][T11313] bridge_slave_1: entered promiscuous mode [ 1353.722464][T11313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1354.170926][T10445] Bluetooth: hci2: command tx timeout [ 1354.195130][T10445] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1354.205707][T10445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1354.236850][T10445] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1354.263882][T10445] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1354.290127][T10445] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1354.415160][T10445] Bluetooth: hci1: command tx timeout [ 1354.493493][T11313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.363133][ T198] bridge_slave_1: left allmulticast mode [ 1355.424057][ T198] bridge_slave_1: left promiscuous mode [ 1355.489568][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.578241][ T198] bridge_slave_0: left allmulticast mode [ 1355.615643][ T198] bridge_slave_0: left promiscuous mode [ 1355.660929][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.247738][T10445] Bluetooth: hci2: command tx timeout [ 1356.329464][T10445] Bluetooth: hci3: command tx timeout [ 1356.490222][T10445] Bluetooth: hci1: command tx timeout [ 1356.649654][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.704326][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.759956][ T198] bond0 (unregistering): Released all slaves [ 1356.919106][T11313] team0: Port device team_slave_0 added [ 1357.291704][T11313] team0: Port device team_slave_1 added [ 1357.481816][T11468] loop6: detected capacity change from 0 to 2048 [ 1357.501120][ T198] hsr_slave_0: left promiscuous mode [ 1357.545163][ T198] hsr_slave_1: left promiscuous mode [ 1357.584339][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.631324][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.701695][T11468] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1357.758393][ T198] veth1_vlan: left promiscuous mode [ 1357.771626][ T198] veth0_vlan: left promiscuous mode [ 1358.328571][T10445] Bluetooth: hci2: command tx timeout [ 1358.407975][T10445] Bluetooth: hci3: command tx timeout [ 1359.173153][T11486] fuse: Unknown parameter 'user_i00000000000000000000' [ 1359.190762][ T198] team0 (unregistering): Port device team_slave_1 removed [ 1359.236849][ T198] team0 (unregistering): Port device team_slave_0 removed [ 1360.145716][T11313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.184963][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1360.290158][T11313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.393174][T11313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1360.400667][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1360.433230][T10445] Bluetooth: hci2: command tx timeout [ 1360.502977][T10356] Bluetooth: hci3: command tx timeout [ 1360.511573][T11313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.002489][T11499] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1361.104996][T11313] hsr_slave_0: entered promiscuous mode [ 1361.187298][T11313] hsr_slave_1: entered promiscuous mode [ 1361.798518][ T198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.360477][ T198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.571189][T10356] Bluetooth: hci3: command tx timeout [ 1363.161880][ T198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.235989][ T198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.534008][T11408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.567900][T11408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.602033][T11408] bridge_slave_0: entered allmulticast mode [ 1367.632397][T11408] bridge_slave_0: entered promiscuous mode [ 1367.915257][T11408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.950308][T11408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.985618][T11408] bridge_slave_1: entered allmulticast mode [ 1368.006626][T11408] bridge_slave_1: entered promiscuous mode [ 1368.065896][T11554] netlink: 'syz.6.912': attribute type 1 has an invalid length. [ 1368.659880][T11408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.745143][T11559] fuse: Unknown parameter 'user_i00000000000000000000' [ 1368.824691][T11408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.346418][T11408] team0: Port device team_slave_0 added [ 1369.380116][T11408] team0: Port device team_slave_1 added [ 1370.084246][T11408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1370.108153][T11408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.162897][T11408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.196611][T11408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1370.220290][T11408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.285071][T11408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1371.822181][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.832747][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1380.205044][T11313] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1380.277187][T11313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1380.308196][T11442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.348598][T11442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.370153][T11442] bridge_slave_0: entered allmulticast mode [ 1380.392788][T11442] bridge_slave_0: entered promiscuous mode [ 1380.421924][T11313] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1380.464124][T11313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1380.483550][T11313] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1380.518723][T11313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1380.534199][T11442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.565038][T11442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.588633][T11442] bridge_slave_1: entered allmulticast mode [ 1380.611791][T11442] bridge_slave_1: entered promiscuous mode [ 1380.875697][T11313] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1380.936119][T11313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1381.549922][T11442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.306123][T11408] hsr_slave_0: entered promiscuous mode [ 1383.262717][T11408] hsr_slave_1: entered promiscuous mode [ 1383.273956][T11408] debugfs: 'hsr0' already exists in 'hsr' [ 1383.281198][T11408] Cannot create hsr debugfs directory [ 1384.407780][T11452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.416306][T11452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.424574][T11452] bridge_slave_0: entered allmulticast mode [ 1384.434426][T11452] bridge_slave_0: entered promiscuous mode [ 1384.546454][T11452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.558002][T11452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.579316][T11452] bridge_slave_1: entered allmulticast mode [ 1384.601615][T11452] bridge_slave_1: entered promiscuous mode [ 1384.660447][T11442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.156597][T11442] team0: Port device team_slave_0 added [ 1393.403673][T11452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1393.424209][T11442] team0: Port device team_slave_1 added [ 1393.555578][T11452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.685832][ T198] bridge_slave_1: left allmulticast mode [ 1393.695833][ T198] bridge_slave_1: left promiscuous mode [ 1393.712900][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.735045][ T198] bridge_slave_0: left allmulticast mode [ 1393.741703][ T198] bridge_slave_0: left promiscuous mode [ 1393.758378][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.785022][ T198] bridge_slave_1: left allmulticast mode [ 1393.795742][ T198] bridge_slave_1: left promiscuous mode [ 1393.806799][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.849287][ T198] bridge_slave_0: left allmulticast mode [ 1393.856332][ T198] bridge_slave_0: left promiscuous mode [ 1393.863331][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.603178][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1394.638834][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.656939][ T198] bond0 (unregistering): Released all slaves [ 1394.995311][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.031127][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.064935][ T198] bond0 (unregistering): Released all slaves [ 1395.232853][T11442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.240698][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1395.322080][T11442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1395.350575][T11442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1395.358002][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1395.384743][T11442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1395.672457][T11452] team0: Port device team_slave_0 added [ 1395.734130][ T198] hsr_slave_0: left promiscuous mode [ 1395.784493][ T198] hsr_slave_1: left promiscuous mode [ 1395.799430][ T198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.820863][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.852908][ T198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.860695][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.914767][ T198] hsr_slave_0: left promiscuous mode [ 1395.923585][ T198] hsr_slave_1: left promiscuous mode [ 1395.935348][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.976291][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.025478][ T198] veth1_macvtap: left promiscuous mode [ 1396.031487][ T198] veth0_macvtap: left promiscuous mode [ 1396.067767][ T198] veth1_vlan: left promiscuous mode [ 1396.073478][ T198] veth0_vlan: left promiscuous mode [ 1397.602108][ T198] team0 (unregistering): Port device team_slave_1 removed [ 1397.656989][ T198] team0 (unregistering): Port device team_slave_0 removed [ 1398.514843][T10445] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1398.530489][T10445] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1398.547852][T10445] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1398.567904][T10445] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1398.589008][T10445] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1398.825405][ T198] team0 (unregistering): Port device team_slave_1 removed [ 1398.892413][ T198] team0 (unregistering): Port device team_slave_0 removed [ 1399.588118][T11452] team0: Port device team_slave_1 added [ 1400.208832][T11442] hsr_slave_0: entered promiscuous mode [ 1400.249425][T11442] hsr_slave_1: entered promiscuous mode [ 1400.287001][T11442] debugfs: 'hsr0' already exists in 'hsr' [ 1400.317285][T11442] Cannot create hsr debugfs directory [ 1400.649021][T10445] Bluetooth: hci4: command tx timeout [ 1402.446470][T11452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.487076][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.552724][T11452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.729470][T10445] Bluetooth: hci4: command tx timeout [ 1403.761651][T11452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.805951][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.921160][T11452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.815387][T10445] Bluetooth: hci4: command tx timeout [ 1405.069783][T11452] hsr_slave_0: entered promiscuous mode [ 1405.115164][T11452] hsr_slave_1: entered promiscuous mode [ 1405.145497][T11452] debugfs: 'hsr0' already exists in 'hsr' [ 1405.173296][T11452] Cannot create hsr debugfs directory [ 1405.425419][T11631] loop6: detected capacity change from 0 to 32768 [ 1405.456938][T11631] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1405.602692][T11631] XFS (loop6): Ending clean mount [ 1405.626784][T11631] XFS (loop6): Quotacheck needed: Please wait. [ 1405.695089][T11631] XFS (loop6): Quotacheck: Done. [ 1406.653300][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1406.653750][ T29] audit: type=1800 audit(1780193914.960:61): pid=11642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.920" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4428 res=0 errno=0 [ 1406.932861][T10445] Bluetooth: hci4: command tx timeout [ 1409.059324][ T7822] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1410.027882][T10356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1410.039339][T10356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1410.051100][T10356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1410.072955][T10356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1410.086432][T10356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1410.850229][ T198] bridge_slave_1: left allmulticast mode [ 1410.888221][ T198] bridge_slave_1: left promiscuous mode [ 1410.933381][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.993325][ T198] bridge_slave_0: left allmulticast mode [ 1411.043218][ T198] bridge_slave_0: left promiscuous mode [ 1411.070057][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.787087][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.841236][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.860726][ T198] bond0 (unregistering): Released all slaves [ 1412.167916][T10445] Bluetooth: hci0: command tx timeout [ 1412.407121][ T198] hsr_slave_0: left promiscuous mode [ 1412.461440][ T198] hsr_slave_1: left promiscuous mode [ 1412.480959][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.512028][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.352935][T10356] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1413.372137][T10356] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1413.383360][T10356] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1413.402888][T10356] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1413.424584][T10356] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1413.536058][ T198] team0 (unregistering): Port device team_slave_1 removed [ 1413.631160][ T198] team0 (unregistering): Port device team_slave_0 removed [ 1414.248395][T10356] Bluetooth: hci0: command tx timeout [ 1414.889080][T10445] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1414.899517][T10445] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1414.912516][T10445] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1414.937664][T10445] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1414.962810][T10445] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1415.527843][T10445] Bluetooth: hci1: command tx timeout [ 1416.334386][T10445] Bluetooth: hci0: command tx timeout [ 1416.892925][ T198] bridge_slave_1: left allmulticast mode [ 1416.928078][ T198] bridge_slave_1: left promiscuous mode [ 1416.972150][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.039269][ T198] bridge_slave_0: left allmulticast mode [ 1417.048489][T10445] Bluetooth: hci2: command tx timeout [ 1417.078682][ T198] bridge_slave_0: left promiscuous mode [ 1417.119129][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.185908][ T198] bridge_slave_1: left allmulticast mode [ 1417.222483][ T198] bridge_slave_1: left promiscuous mode [ 1417.271211][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.330430][ T198] bridge_slave_0: left allmulticast mode [ 1417.367826][ T198] bridge_slave_0: left promiscuous mode [ 1417.378733][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.610981][T10445] Bluetooth: hci1: command tx timeout [ 1417.950718][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.013263][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.037789][ T198] bond0 (unregistering): Released all slaves [ 1418.409360][T10445] Bluetooth: hci0: command tx timeout [ 1418.568210][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.613684][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.642056][ T198] bond0 (unregistering): Released all slaves [ 1419.128464][T10445] Bluetooth: hci2: command tx timeout [ 1419.270966][ T198] hsr_slave_0: left promiscuous mode [ 1419.312654][ T198] hsr_slave_1: left promiscuous mode [ 1419.333392][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.371333][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.543914][ T198] hsr_slave_0: left promiscuous mode [ 1419.564386][ T198] hsr_slave_1: left promiscuous mode [ 1419.585019][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.602646][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.687962][T10445] Bluetooth: hci1: command tx timeout [ 1420.004187][ T198] team0 (unregistering): Port device team_slave_1 removed [ 1420.048279][ T198] team0 (unregistering): Port device team_slave_0 removed [ 1421.207781][T10445] Bluetooth: hci2: command tx timeout [ 1421.576981][ T198] team0 (unregistering): Port device team_slave_1 removed [ 1421.609931][ T198] team0 (unregistering): Port device team_slave_0 removed [ 1421.769483][T10445] Bluetooth: hci1: command tx timeout [ 1422.783679][T11612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.791864][T11612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.801167][T11612] bridge_slave_0: entered allmulticast mode [ 1422.811723][T11612] bridge_slave_0: entered promiscuous mode [ 1422.952211][T11612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.985037][T11612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.008613][T11612] bridge_slave_1: entered allmulticast mode [ 1423.033360][T11612] bridge_slave_1: entered promiscuous mode [ 1423.291672][T10445] Bluetooth: hci2: command tx timeout [ 1423.357150][T11612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.384586][T11612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.415055][T11714] loop6: detected capacity change from 0 to 512 [ 1423.437209][T11714] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1423.714109][T11714] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 1424.200031][T11612] team0: Port device team_slave_0 added [ 1424.524359][T11612] team0: Port device team_slave_1 added [ 1425.485642][ T198] bridge_slave_1: left allmulticast mode [ 1425.497771][ T198] bridge_slave_1: left promiscuous mode [ 1425.504541][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.541537][ T198] bridge_slave_0: left allmulticast mode [ 1425.547870][ T198] bridge_slave_0: left promiscuous mode [ 1425.554623][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.919036][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1425.963695][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.981773][ T198] bond0 (unregistering): Released all slaves [ 1426.003669][T11612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.023649][T11612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.097046][T11612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.356747][ T198] hsr_slave_0: left promiscuous mode [ 1426.389314][ T198] hsr_slave_1: left promiscuous mode [ 1426.420970][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.448931][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.103157][ T198] team0 (unregistering): Port device team_slave_1 removed [ 1427.192800][ T198] team0 (unregistering): Port device team_slave_0 removed [ 1427.372997][T11730] loop6: detected capacity change from 0 to 512 [ 1427.406576][T11730] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1427.439561][T11730] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.930: bg 0: block 5: invalid block bitmap [ 1427.454688][T11730] loop6: lost filesystem error report for type 5 error -117 [ 1427.456791][T11730] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1427.457742][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1427.480232][ C1] EXT4-fs (loop6): initial error at time 1780193935: ext4_validate_block_bitmap:432 [ 1427.490306][ C1] EXT4-fs (loop6): last error at time 1780193935: ext4_validate_block_bitmap:432 [ 1427.502777][T11730] loop6: lost filesystem error report for type 5 error -117 [ 1427.505806][T11730] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.930: invalid indirect mapped block 3 (level 2) [ 1427.533521][T11730] fserror_report: 1 callbacks suppressed [ 1427.533630][T11730] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1427.554606][T11730] EXT4-fs (loop6): 2 truncates cleaned up [ 1427.575984][T11730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1427.656105][T11730] Bluetooth: MGMT ver 1.23 [ 1427.672179][T11730] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 1427.761867][T11612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1427.781759][T11612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.816413][T11612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1427.870631][ T7822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.009073][T11612] hsr_slave_0: entered promiscuous mode [ 1429.033308][T11612] hsr_slave_1: entered promiscuous mode [ 1429.610714][T11647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.671821][T11647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.040811][T11647] bridge_slave_0: entered allmulticast mode [ 1430.057019][T11647] bridge_slave_0: entered promiscuous mode [ 1430.228620][T11647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.254014][T11647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.287910][T11647] bridge_slave_1: entered allmulticast mode [ 1430.325034][T11647] bridge_slave_1: entered promiscuous mode [ 1430.663665][T11664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.675480][T11664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.685260][T11664] bridge_slave_0: entered allmulticast mode [ 1430.706601][T11664] bridge_slave_0: entered promiscuous mode [ 1430.807657][T11647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.829221][T11664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.841607][T11664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.851382][T11664] bridge_slave_1: entered allmulticast mode [ 1430.873676][T11664] bridge_slave_1: entered promiscuous mode [ 1431.011694][T11647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.608522][T11664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.664267][T11664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.799772][T11647] team0: Port device team_slave_0 added [ 1432.151512][T11647] team0: Port device team_slave_1 added [ 1432.470807][T11664] team0: Port device team_slave_0 added [ 1432.482667][T11647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.502155][T11647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.574448][T11647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.717301][T11664] team0: Port device team_slave_1 added [ 1432.829155][T11647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.837026][T11647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.863952][T11647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.908451][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.915332][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.051569][T11664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1433.085100][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.119030][T11664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.160346][T11664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1433.172893][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.201642][T11664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.219333][T11672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.228432][T11672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.236407][T11672] bridge_slave_0: entered allmulticast mode [ 1433.249743][T11672] bridge_slave_0: entered promiscuous mode [ 1433.344315][T11672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.352674][T11672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.360947][T11672] bridge_slave_1: entered allmulticast mode [ 1433.371122][T11672] bridge_slave_1: entered promiscuous mode [ 1433.656964][T11647] hsr_slave_0: entered promiscuous mode [ 1433.671016][T11647] hsr_slave_1: entered promiscuous mode [ 1433.682193][T11647] debugfs: 'hsr0' already exists in 'hsr' [ 1433.688693][T11647] Cannot create hsr debugfs directory [ 1433.777122][T11672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.963470][T11672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.042980][T11757] loop6: detected capacity change from 0 to 32768 [ 1434.120531][T11664] hsr_slave_0: entered promiscuous mode [ 1434.151208][T11664] hsr_slave_1: entered promiscuous mode [ 1434.165065][T11664] debugfs: 'hsr0' already exists in 'hsr' [ 1434.193754][T11664] Cannot create hsr debugfs directory [ 1434.526179][T11672] team0: Port device team_slave_0 added [ 1434.623239][T11672] team0: Port device team_slave_1 added [ 1434.989692][T11762] loop6: detected capacity change from 0 to 512 [ 1435.035812][T11762] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1435.071824][T11762] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.937: bg 0: block 5: invalid block bitmap [ 1435.117866][T11762] loop6: lost filesystem error report for type 5 error -117 [ 1435.119595][T11762] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1435.136402][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1435.136507][ C0] EXT4-fs (loop6): initial error at time 1780193943: ext4_validate_block_bitmap:432 [ 1435.136643][ C0] EXT4-fs (loop6): last error at time 1780193943: ext4_validate_block_bitmap:432 [ 1435.219344][T11762] loop6: lost filesystem error report for type 5 error -117 [ 1435.225847][T11762] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.937: invalid indirect mapped block 3 (level 2) [ 1435.267907][T11762] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1435.269715][T11762] EXT4-fs (loop6): 2 truncates cleaned up [ 1435.310555][T11762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1435.348756][T11672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.360640][T11672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.404397][T11762] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1435.415391][T11672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.559389][ T7822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.737953][T11672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.758525][T11672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.827947][T11672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1436.308615][T11612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1436.313974][T11769] loop6: detected capacity change from 0 to 256 [ 1436.355255][T11769] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 1436.365105][T11612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1436.569113][T11672] hsr_slave_0: entered promiscuous mode [ 1436.581316][T11672] hsr_slave_1: entered promiscuous mode [ 1436.592155][T11672] debugfs: 'hsr0' already exists in 'hsr' [ 1436.598981][T11672] Cannot create hsr debugfs directory [ 1436.609473][T11612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1436.661950][T11612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1436.815311][T11612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1436.849214][T11612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1436.942404][T11612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1436.966140][T11612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1436.977035][ T7945] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1437.188058][ T7945] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1437.203005][ T7945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.217012][ T7945] usb 7-1: Product: syz [ 1437.232321][ T7945] usb 7-1: Manufacturer: syz [ 1437.237939][ T7945] usb 7-1: SerialNumber: syz [ 1437.288282][ T7945] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1437.406583][ T7944] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1437.903720][ T9322] usb 7-1: USB disconnect, device number 28 [ 1438.278185][T11664] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1438.319193][T11664] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1438.339765][T11664] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1438.374373][T11664] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1438.398816][T11664] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1438.427215][T11664] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1438.506116][T11664] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1438.542519][T11664] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1438.568840][ T7944] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1438.595123][ T7944] ath9k_htc: Failed to initialize the device [ 1438.647146][ T9322] usb 7-1: ath9k_htc: USB layer deinitialized [ 1438.860184][T11647] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1438.942542][T11647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1438.981955][T11647] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1439.046307][T11647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1439.192773][T11647] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1439.242076][T11647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1439.321647][T11647] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1439.350347][T11647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1439.646592][T11672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1439.685958][T11672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1439.727721][T11781] loop6: detected capacity change from 0 to 512 [ 1439.763799][T11781] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1439.786394][T11612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.800015][T11781] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.944: bg 0: block 5: invalid block bitmap [ 1439.813352][T11672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1439.840446][T11781] loop6: lost filesystem error report for type 5 error -117 [ 1439.844338][T11781] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1439.852312][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1439.852411][ C0] EXT4-fs (loop6): initial error at time 1780193948: ext4_validate_block_bitmap:432 [ 1439.852546][ C0] EXT4-fs (loop6): last error at time 1780193948: ext4_validate_block_bitmap:432 [ 1439.900468][T11781] loop6: lost filesystem error report for type 5 error -117 [ 1439.902082][T11781] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.944: invalid indirect mapped block 3 (level 2) [ 1439.925147][T11672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1439.940453][T11672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1439.965418][T11672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1439.978871][T11672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1440.002430][T11781] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1440.004149][T11781] EXT4-fs (loop6): 2 truncates cleaned up [ 1440.036532][T11781] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1440.055139][T11672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1440.141886][T11781] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1440.409220][ T7822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.483519][T11612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.738808][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.746412][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.974608][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.982310][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.481618][T11664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.162292][T11664] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.549648][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.557243][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.824902][T11647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.943546][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.951356][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1445.111360][T11672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.640872][T11647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.812993][T11672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.830803][T11812] loop6: detected capacity change from 0 to 512 [ 1445.889610][T11812] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1445.936431][T11812] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.951: bg 0: block 5: invalid block bitmap [ 1445.987864][T11812] loop6: lost filesystem error report for type 5 error -117 [ 1445.995907][T11812] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1446.007608][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1446.019595][ C0] EXT4-fs (loop6): initial error at time 1780193954: ext4_validate_block_bitmap:432 [ 1446.029253][T11812] loop6: lost filesystem error report for type 5 error -117 [ 1446.029414][ C0] EXT4-fs (loop6): last error at time 1780193954: ext4_mb_clear_bb:6679 [ 1446.057071][T10770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.057101][T11812] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.951: invalid indirect mapped block 3 (level 2) [ 1446.064777][T10770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.124043][T11812] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1446.125894][T11812] EXT4-fs (loop6): 2 truncates cleaned up [ 1446.148180][T11812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1446.183803][T11812] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1446.300417][T10770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.308261][T10770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.484879][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.492612][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1446.557005][ T7822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.758078][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.765770][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.134826][T10552] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1447.348667][T10552] usb 7-1: Using ep0 maxpacket: 16 [ 1447.391789][T10552] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1447.437055][T10552] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1447.492990][T10552] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1447.514232][T10552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.560444][T10552] usb 7-1: Product: syz [ 1447.565290][T10552] usb 7-1: Manufacturer: syz [ 1447.579699][T10552] usb 7-1: SerialNumber: syz [ 1447.615760][T10552] usb 7-1: config 0 descriptor?? [ 1447.720370][T10552] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1447.730295][T10552] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1448.299955][T11612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.313961][T10552] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1448.340535][T10552] em28xx 7-1:0.0: Config register raw data: 0x00 [ 1450.231090][ T5687] usb 7-1: USB disconnect, device number 29 [ 1450.284263][ T5687] em28xx 7-1:0.0: Disconnecting em28xx [ 1450.344127][ T5687] em28xx 7-1:0.0: Freeing device [ 1451.751691][T11664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1452.187252][T11612] veth0_vlan: entered promiscuous mode [ 1452.340481][T11612] veth1_vlan: entered promiscuous mode [ 1452.484323][T11878] loop6: detected capacity change from 0 to 256 [ 1452.693281][T11878] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 1453.063522][T11612] veth0_macvtap: entered promiscuous mode [ 1453.190800][T11612] veth1_macvtap: entered promiscuous mode [ 1453.588742][T11647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.854593][T11612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1453.962215][T11889] loop6: detected capacity change from 0 to 1024 [ 1454.053720][T11612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1454.137208][T11672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.427020][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.456153][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.519652][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.562727][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.692807][T11672] veth0_vlan: entered promiscuous mode [ 1456.165174][T11672] veth1_vlan: entered promiscuous mode [ 1456.657010][T11664] veth0_vlan: entered promiscuous mode [ 1456.932531][T11664] veth1_vlan: entered promiscuous mode [ 1457.263063][T11672] veth0_macvtap: entered promiscuous mode [ 1457.450589][T11918] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 1457.514995][T11672] veth1_macvtap: entered promiscuous mode [ 1457.964011][T11647] veth0_vlan: entered promiscuous mode [ 1458.182931][T11664] veth0_macvtap: entered promiscuous mode [ 1458.276856][T11647] veth1_vlan: entered promiscuous mode [ 1458.365017][T11672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.394193][T11664] veth1_macvtap: entered promiscuous mode [ 1458.539825][T11672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.796958][ T114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.821335][ T114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.870136][ T114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.905369][ T114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.100968][T11664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.265703][T11664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.366504][T11647] veth0_macvtap: entered promiscuous mode [ 1459.510672][ T198] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.537208][ T1148] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.601468][T11647] veth1_macvtap: entered promiscuous mode [ 1459.647686][ T1148] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.663079][ T1148] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.128874][T11647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.415764][T11647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1460.427031][ T5687] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1460.628003][ T5687] usb 7-1: Using ep0 maxpacket: 16 [ 1460.683576][ T5687] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1460.756968][ T5687] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1460.871668][ T5687] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1460.902509][ T5687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.928803][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.954934][ T5687] usb 7-1: Product: syz [ 1460.975922][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.992309][ T5687] usb 7-1: Manufacturer: syz [ 1461.015705][ T5687] usb 7-1: SerialNumber: syz [ 1461.061907][ T5687] usb 7-1: config 0 descriptor?? [ 1461.184167][ T5687] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1461.233886][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.245135][ T5687] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1461.368452][ T1148] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.520726][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.777188][ T5687] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1461.810927][ T5687] em28xx 7-1:0.0: Config register raw data: 0x00 [ 1461.866883][T10356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1461.877262][T10356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1461.900325][T10356] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1461.925202][T10356] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1461.944242][T10356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1461.961399][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.282599][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.573667][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.602871][ T56] bridge_slave_1: left allmulticast mode [ 1463.651393][ T56] bridge_slave_1: left promiscuous mode [ 1463.679557][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.734153][ T6917] usb 7-1: USB disconnect, device number 30 [ 1463.764455][ T56] bridge_slave_0: left allmulticast mode [ 1463.794165][ T6917] em28xx 7-1:0.0: Disconnecting em28xx [ 1463.828015][ T56] bridge_slave_0: left promiscuous mode [ 1463.888318][ T6917] em28xx 7-1:0.0: Freeing device [ 1463.894155][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.008546][T10445] Bluetooth: hci3: command tx timeout [ 1465.121868][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.176513][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.193236][ T56] bond0 (unregistering): Released all slaves [ 1465.718948][ T56] hsr_slave_0: left promiscuous mode [ 1465.770844][ T56] hsr_slave_1: left promiscuous mode [ 1465.801805][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.852629][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.899156][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.944973][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1466.099626][T10445] Bluetooth: hci3: command tx timeout [ 1466.146965][ T56] veth1_macvtap: left promiscuous mode [ 1466.201188][ T56] veth0_macvtap: left promiscuous mode [ 1466.227161][ T56] veth1_vlan: left promiscuous mode [ 1466.264374][ T56] veth0_vlan: left promiscuous mode [ 1467.713713][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1467.753083][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1468.109881][T11984] loop6: detected capacity change from 0 to 32768 [ 1468.148483][T11984] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop6": -EINTR [ 1468.168277][T10445] Bluetooth: hci3: command tx timeout [ 1470.248345][T10445] Bluetooth: hci3: command tx timeout [ 1473.107293][T10356] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1473.118967][T10356] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1473.129423][T10356] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1473.148632][T10356] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1473.163358][T10356] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1474.680425][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.717497][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.022540][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.062944][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.209248][T10445] Bluetooth: hci4: command tx timeout [ 1475.819579][T12060] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 1476.999554][T11948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.060745][T11948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.068677][ T9322] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1477.118175][T11948] bridge_slave_0: entered allmulticast mode [ 1477.175738][T11948] bridge_slave_0: entered promiscuous mode [ 1477.277780][ T9322] usb 7-1: Using ep0 maxpacket: 16 [ 1477.288908][T10445] Bluetooth: hci4: command tx timeout [ 1477.297540][T11948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.305977][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.320692][ T9322] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1477.334550][T11948] bridge_slave_1: entered allmulticast mode [ 1477.345477][ T9322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1477.383043][ T9322] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1477.390674][T11948] bridge_slave_1: entered promiscuous mode [ 1477.405283][ T9322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.422541][T10356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1477.429695][ T9322] usb 7-1: Product: syz [ 1477.429809][ T9322] usb 7-1: Manufacturer: syz [ 1477.429920][ T9322] usb 7-1: SerialNumber: syz [ 1477.455862][T10356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1477.470494][T10356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1477.485696][ T9322] usb 7-1: config 0 descriptor?? [ 1477.513192][T10356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1477.535364][T10356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1477.685685][ T9322] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1477.740860][ T9322] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1477.751663][ T35] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.206821][ T9322] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1478.234627][ T9322] em28xx 7-1:0.0: Config register raw data: 0x00 [ 1478.383456][T11948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.418524][T10445] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1478.430009][T10445] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1478.445864][T10445] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1478.471062][T10445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1478.494788][T10445] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1478.509643][ T35] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.645726][T11948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.146590][ T35] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.261680][T11948] team0: Port device team_slave_0 added [ 1479.369203][T10445] Bluetooth: hci4: command tx timeout [ 1479.412342][T11948] team0: Port device team_slave_1 added [ 1479.625893][T10445] Bluetooth: hci0: command tx timeout [ 1479.707221][ T35] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.838941][T11948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.871208][T11948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.971926][T11948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.049321][ T9322] usb 7-1: USB disconnect, device number 31 [ 1480.062428][ T9322] em28xx 7-1:0.0: Disconnecting em28xx [ 1480.140484][ T9322] em28xx 7-1:0.0: Freeing device [ 1480.244560][T11948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.304684][T11948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.439702][T11948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.567924][T10445] Bluetooth: hci1: command tx timeout [ 1481.453584][T10445] Bluetooth: hci4: command tx timeout [ 1481.642510][T11948] hsr_slave_0: entered promiscuous mode [ 1481.673959][T11948] hsr_slave_1: entered promiscuous mode [ 1481.688963][T10445] Bluetooth: hci0: command tx timeout [ 1482.280864][T12112] loop6: detected capacity change from 0 to 1024 [ 1482.465858][ T35] bridge_slave_1: left allmulticast mode [ 1482.505338][ T35] bridge_slave_1: left promiscuous mode [ 1482.532697][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.590902][ T35] bridge_slave_0: left allmulticast mode [ 1482.611379][ T35] bridge_slave_0: left promiscuous mode [ 1482.634504][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.648106][T10445] Bluetooth: hci1: command tx timeout [ 1483.603478][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1483.635126][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1483.650642][ T35] bond0 (unregistering): Released all slaves [ 1483.745542][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.971'. [ 1483.769891][T10445] Bluetooth: hci0: command tx timeout [ 1483.808256][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.971'. [ 1483.822657][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.971'. [ 1483.842977][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.971'. [ 1483.856075][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.971'. [ 1483.914112][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.971'. [ 1483.923812][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.971'. [ 1483.954036][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.971'. [ 1483.963590][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.971'. [ 1483.986479][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.6.971'. [ 1484.087633][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.095940][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.353364][T12120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1484.383368][T12120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1484.732294][T10445] Bluetooth: hci1: command tx timeout [ 1484.937808][ T35] hsr_slave_0: left promiscuous mode [ 1484.966334][ T35] hsr_slave_1: left promiscuous mode [ 1484.972150][T12126] Bluetooth: MGMT ver 1.23 [ 1484.972269][T12126] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 1484.996448][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.018608][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.041235][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.077686][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.115299][ T35] veth1_macvtap: left promiscuous mode [ 1485.128028][ T35] veth0_macvtap: left promiscuous mode [ 1485.148146][ T35] veth1_vlan: left promiscuous mode [ 1485.155347][ T35] veth0_vlan: left promiscuous mode [ 1485.855933][T10445] Bluetooth: hci0: command tx timeout [ 1486.298897][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1486.342480][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1486.731894][ T6036] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.741641][ T6036] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.808172][T10445] Bluetooth: hci1: command tx timeout [ 1486.991405][ T6036] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.011116][ T6036] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.866799][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.073242][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.387059][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.688311][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.182739][T12141] loop6: detected capacity change from 0 to 32768 [ 1490.379270][T12037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.394916][T12037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.439800][T12037] bridge_slave_0: entered allmulticast mode [ 1490.500089][T12037] bridge_slave_0: entered promiscuous mode [ 1490.774365][T12037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.808638][T12037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.850589][T12037] bridge_slave_1: entered allmulticast mode [ 1490.876331][T12037] bridge_slave_1: entered promiscuous mode [ 1491.665683][T12037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1491.761127][T12037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1492.617091][T12037] team0: Port device team_slave_0 added [ 1492.758559][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.935956][T12037] team0: Port device team_slave_1 added [ 1493.027218][T12183] loop6: detected capacity change from 0 to 1024 [ 1493.214106][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.373892][T11948] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1493.470885][T11948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1493.512834][T11948] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1493.591607][T11948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1493.636415][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.661000][T12075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.696534][T12075] bridge_slave_0: entered allmulticast mode [ 1493.730019][T12075] bridge_slave_0: entered promiscuous mode [ 1493.825993][T11948] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1493.877122][T11948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1493.946165][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.980321][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.053238][T12075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.072618][T12075] bridge_slave_1: entered allmulticast mode [ 1494.083330][T12075] bridge_slave_1: entered promiscuous mode [ 1494.100831][T12037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1494.108547][T12037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.162312][T12037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1494.186519][T11948] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1494.227707][T11948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1494.346345][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.355470][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.372686][T12195] loop6: detected capacity change from 0 to 512 [ 1494.409863][T12037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1494.417032][T12037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.476547][T12037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1494.506095][T12195] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1494.550198][T12195] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.979: bg 0: block 5: invalid block bitmap [ 1494.598918][T12195] loop6: lost filesystem error report for type 5 error -117 [ 1494.601248][T12195] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1494.609108][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1494.609232][ C1] EXT4-fs (loop6): initial error at time 1780194002: ext4_validate_block_bitmap:432 [ 1494.609385][ C1] EXT4-fs (loop6): last error at time 1780194002: ext4_validate_block_bitmap:432 [ 1494.626607][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.630189][T12195] loop6: lost filesystem error report for type 5 error -117 [ 1494.682554][T12195] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.979: invalid indirect mapped block 3 (level 2) [ 1494.753413][T12195] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1494.756328][T12195] EXT4-fs (loop6): 2 truncates cleaned up [ 1494.807193][T12195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1494.879639][T12195] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1495.005682][ T7822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1495.176471][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1495.285472][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.479920][T12069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.501204][T12069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.542226][T12069] bridge_slave_0: entered allmulticast mode [ 1495.571865][T12069] bridge_slave_0: entered promiscuous mode [ 1495.882302][T12037] hsr_slave_0: entered promiscuous mode [ 1495.903985][T12037] hsr_slave_1: entered promiscuous mode [ 1495.932756][T12037] debugfs: 'hsr0' already exists in 'hsr' [ 1495.953601][T12037] Cannot create hsr debugfs directory [ 1495.978417][T12069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.014770][T12069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.024009][T12069] bridge_slave_1: entered allmulticast mode [ 1496.036044][T12069] bridge_slave_1: entered promiscuous mode [ 1496.159366][T12075] team0: Port device team_slave_0 added [ 1496.197650][T12075] team0: Port device team_slave_1 added [ 1496.367565][T12069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.595392][T12069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.809472][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.816726][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.856230][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.090195][T12069] team0: Port device team_slave_0 added [ 1497.169318][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1497.176484][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.237930][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.361430][T12069] team0: Port device team_slave_1 added [ 1497.593710][ T35] bridge_slave_1: left allmulticast mode [ 1497.609930][ T35] bridge_slave_1: left promiscuous mode [ 1497.634618][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.664019][ T35] bridge_slave_0: left allmulticast mode [ 1497.679365][ T35] bridge_slave_0: left promiscuous mode [ 1497.703335][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.745264][ T35] bridge_slave_1: left allmulticast mode [ 1497.751460][ T35] bridge_slave_1: left promiscuous mode [ 1497.759444][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.789955][ T35] bridge_slave_0: left allmulticast mode [ 1497.813381][ T35] bridge_slave_0: left promiscuous mode [ 1497.825482][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.184700][T12211] loop6: detected capacity change from 0 to 32768 [ 1498.198258][T12211] btrfs: Deprecated parameter 'usebackuproot' [ 1498.211801][T12211] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1498.235186][T12211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.983 (12211) [ 1498.285021][T12211] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1498.309089][T12211] BTRFS info (device loop6): using crc32c checksum algorithm [ 1498.450410][ T5891] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1498.492315][T12211] BTRFS error (device loop6): failed to load root extent [ 1498.508448][T12211] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1498.533121][ T6036] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1498.586297][T12211] BTRFS warning (device loop6): couldn't read tree root [ 1498.604860][T12211] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1498.641629][ T114] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1498.685833][T12211] BTRFS warning (device loop6): couldn't read tree root [ 1498.710067][T12211] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1498.823319][T12211] BTRFS info (device loop6): rebuilding free space tree [ 1498.933234][T12211] BTRFS info (device loop6): checking UUID tree [ 1498.951260][T12211] BTRFS info (device loop6): enabling ssd optimizations [ 1498.989457][T12211] BTRFS info (device loop6): turning on async discard [ 1499.017189][T12211] BTRFS info (device loop6): enabling free space tree [ 1499.044695][T12211] BTRFS info (device loop6): force clearing of disk cache [ 1499.070335][T12211] BTRFS info (device loop6): enabling auto defrag [ 1499.097990][T12211] BTRFS info (device loop6): trying to use backup root at mount time [ 1499.129499][T12211] BTRFS info (device loop6): use zstd compression, level 3 [ 1499.226604][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1499.280630][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.303779][ T35] bond0 (unregistering): Released all slaves [ 1499.545775][ T7822] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1499.893681][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1499.945166][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.997008][ T35] bond0 (unregistering): Released all slaves [ 1500.592036][T12069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.629595][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.725188][T12069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.770487][T12069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.779905][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.816696][T12069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.133988][T12075] hsr_slave_0: entered promiscuous mode [ 1501.162367][T12075] hsr_slave_1: entered promiscuous mode [ 1501.197694][T12075] debugfs: 'hsr0' already exists in 'hsr' [ 1501.213383][T12075] Cannot create hsr debugfs directory [ 1501.248323][ T5687] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1501.462184][ T5687] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.497557][ T5687] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.508220][ T5687] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1501.529545][ T5687] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.562559][ T5687] usb 7-1: config 0 descriptor?? [ 1502.056792][ T5687] usbhid 7-1:0.0: can't add hid device: -71 [ 1502.100350][ T5687] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1502.136656][ T5687] usb 7-1: USB disconnect, device number 32 [ 1502.213078][ T35] hsr_slave_0: left promiscuous mode [ 1502.225248][ T35] hsr_slave_1: left promiscuous mode [ 1502.242445][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1502.256166][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.292043][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1502.302851][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.352697][ T35] hsr_slave_0: left promiscuous mode [ 1502.362211][ T35] hsr_slave_1: left promiscuous mode [ 1502.371042][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1502.387065][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.400583][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1502.423073][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.514206][ T35] veth1_macvtap: left promiscuous mode [ 1502.522960][ T35] veth0_macvtap: left promiscuous mode [ 1502.535954][ T35] veth1_vlan: left promiscuous mode [ 1502.542112][ T35] veth0_vlan: left promiscuous mode [ 1502.554305][ T35] veth1_macvtap: left promiscuous mode [ 1502.568282][ T35] veth0_macvtap: left promiscuous mode [ 1502.574356][ T35] veth1_vlan: left promiscuous mode [ 1502.581007][ T35] veth0_vlan: left promiscuous mode [ 1503.201882][T12267] loop6: detected capacity change from 0 to 512 [ 1503.301649][T12267] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1503.354733][T12267] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.986: bg 0: block 5: invalid block bitmap [ 1503.426355][T12267] loop6: lost filesystem error report for type 5 error -117 [ 1503.427521][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1503.442276][ C0] EXT4-fs (loop6): initial error at time 1780194011: ext4_validate_block_bitmap:432 [ 1503.452255][ C0] EXT4-fs (loop6): last error at time 1780194011: ext4_validate_block_bitmap:432 [ 1503.492773][T12267] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1503.521656][T12267] loop6: lost filesystem error report for type 5 error -117 [ 1503.529562][T12267] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.986: invalid indirect mapped block 3 (level 2) [ 1503.660039][T12267] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1503.664537][T12267] EXT4-fs (loop6): 2 truncates cleaned up [ 1503.702815][T12267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1503.841290][T12267] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1504.060952][ T7822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.711979][T12278] loop6: detected capacity change from 0 to 1024 [ 1504.915786][T12278] hfsplus: cannot replace xattr [ 1505.097053][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1505.173307][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1505.357817][T12281] loop6: detected capacity change from 0 to 128 [ 1505.378385][T12281] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1505.391272][T12281] hpfs: filesystem error: improperly stopped [ 1505.418029][T12281] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1505.426262][T12281] hpfs: You really don't want any checks? You are crazy... [ 1505.436490][T12281] hpfs: Code page index out of array [ 1505.454960][T12281] hpfs: code page support is disabled [ 1505.462584][T12281] hpfs: hpfs_map_4sectors(): unaligned read [ 1505.470232][T12281] hpfs: hpfs_map_4sectors(): unaligned read [ 1505.476920][T12281] hpfs: filesystem error: unable to find root dir [ 1506.456313][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1506.486363][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1506.897974][T12283] loop6: detected capacity change from 0 to 32768 [ 1506.915486][T12283] btrfs: Deprecated parameter 'usebackuproot' [ 1506.953694][T12283] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1506.996707][T12283] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.990 (12283) [ 1507.087817][T12283] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1507.122207][T12283] BTRFS info (device loop6): using crc32c checksum algorithm [ 1507.208315][T12069] hsr_slave_0: entered promiscuous mode [ 1507.224978][T12069] hsr_slave_1: entered promiscuous mode [ 1507.258699][T12069] debugfs: 'hsr0' already exists in 'hsr' [ 1507.295056][T12069] Cannot create hsr debugfs directory [ 1507.321146][ T5891] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1507.371263][T12283] BTRFS error (device loop6): failed to load root extent [ 1507.388317][T12283] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1507.455001][ T5891] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1507.477895][T12283] BTRFS warning (device loop6): couldn't read tree root [ 1507.514709][T12283] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1507.546922][T10770] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1507.576675][T12283] BTRFS warning (device loop6): couldn't read tree root [ 1507.596958][T12283] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1507.727065][T12283] BTRFS info (device loop6): rebuilding free space tree [ 1507.829015][T12283] BTRFS info (device loop6): checking UUID tree [ 1507.847025][T12283] BTRFS info (device loop6): enabling ssd optimizations [ 1507.869336][T12283] BTRFS info (device loop6): turning on async discard [ 1507.890798][T12283] BTRFS info (device loop6): enabling free space tree [ 1507.920109][T12283] BTRFS info (device loop6): force clearing of disk cache [ 1507.940003][T12283] BTRFS info (device loop6): enabling auto defrag [ 1507.962523][T12283] BTRFS info (device loop6): trying to use backup root at mount time [ 1507.984533][T12283] BTRFS info (device loop6): use zstd compression, level 3 [ 1508.225131][ T7822] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1509.694334][T12306] loop6: detected capacity change from 0 to 512 [ 1509.754011][T11948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.764827][T12037] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1509.773574][T12306] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1509.787747][T12306] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.993: bg 0: block 5: invalid block bitmap [ 1509.812566][T12037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1509.822069][T12306] loop6: lost filesystem error report for type 5 error -117 [ 1509.826776][T12306] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1509.834631][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1509.834733][ C0] EXT4-fs (loop6): initial error at time 1780194018: ext4_validate_block_bitmap:432 [ 1509.834865][ C0] EXT4-fs (loop6): last error at time 1780194018: ext4_validate_block_bitmap:432 [ 1509.874989][T12306] loop6: lost filesystem error report for type 5 error -117 [ 1509.878705][T12306] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.993: invalid indirect mapped block 3 (level 2) [ 1509.905183][T12306] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1509.911075][T12306] EXT4-fs (loop6): 2 truncates cleaned up [ 1509.931375][T12037] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1509.970129][T12306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1510.034611][T12037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1510.084276][T12037] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1510.110779][T12306] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1510.149179][T12037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1510.232121][T12037] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1510.325964][T12037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1510.375166][ T7822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.546248][T11948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.733985][T10770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.741650][T10770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.940790][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.948437][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.428059][T12075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1511.449435][ T5687] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1511.464964][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1511.499951][T12075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1511.538349][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1511.549899][T12075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1511.568872][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1511.609487][ T5687] usb 7-1: Using ep0 maxpacket: 32 [ 1511.665161][ T5687] usb 7-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 1511.683464][ T5687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.695310][ T5687] usb 7-1: Product: syz [ 1511.707144][ T5687] usb 7-1: Manufacturer: syz [ 1511.713601][ T5687] usb 7-1: SerialNumber: syz [ 1511.722931][T12075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1511.740984][ T5687] usb 7-1: config 0 descriptor?? [ 1511.806205][ T5687] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 1511.827157][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1513.073725][T12069] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1513.130982][T12069] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1513.179451][T12037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.229232][T12069] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1513.305114][T12069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1513.326268][T10552] usb 7-1: USB disconnect, device number 33 [ 1513.340829][T12069] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1513.426985][T12069] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1513.473102][T12069] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1513.516359][T12069] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1513.793798][T12037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.032614][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.040384][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1514.200582][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.208327][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.086864][T12075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1515.589327][T12075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1515.916774][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.924502][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.018846][T11948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1516.196931][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.204785][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.377827][T12069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.783008][T12069] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.033969][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.041705][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.264800][T12359] loop6: detected capacity change from 0 to 512 [ 1517.304560][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.312205][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.355041][T12359] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1517.375163][T12359] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1000: bg 0: block 5: invalid block bitmap [ 1517.391625][T12359] loop6: lost filesystem error report for type 5 error -117 [ 1517.397483][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1517.411771][ C1] EXT4-fs (loop6): initial error at time 1780194025: ext4_validate_block_bitmap:432 [ 1517.421531][ C1] EXT4-fs (loop6): last error at time 1780194025: ext4_validate_block_bitmap:432 [ 1517.441209][T12359] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1517.455485][T12359] loop6: lost filesystem error report for type 5 error -117 [ 1517.490770][T12359] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1000: invalid indirect mapped block 3 (level 2) [ 1517.549170][T12359] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1517.551051][T12359] EXT4-fs (loop6): 2 truncates cleaned up [ 1517.622186][T12359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1517.740952][T12359] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1518.091834][ T7822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.399176][T11948] veth0_vlan: entered promiscuous mode [ 1519.579066][ T808] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1519.623593][T11948] veth1_vlan: entered promiscuous mode [ 1519.761755][ T808] usb 7-1: Using ep0 maxpacket: 32 [ 1519.818414][ T808] usb 7-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 1519.851255][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.874211][ T808] usb 7-1: Product: syz [ 1519.894390][ T808] usb 7-1: Manufacturer: syz [ 1519.911273][ T808] usb 7-1: SerialNumber: syz [ 1519.965925][ T808] usb 7-1: config 0 descriptor?? [ 1520.028626][ T808] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 1520.716297][T12037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.948462][T12075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.170900][ T6917] usb 7-1: USB disconnect, device number 34 [ 1533.304073][T12075] veth0_vlan: entered promiscuous mode [ 1533.424365][T12069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1533.492815][T10356] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1533.508443][T10356] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1533.531650][T10356] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1533.566071][T10356] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1533.595064][T10356] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1533.656478][T12075] veth1_vlan: entered promiscuous mode [ 1534.480086][T12075] veth0_macvtap: entered promiscuous mode [ 1534.710017][T12075] veth1_macvtap: entered promiscuous mode [ 1535.423220][ T6917] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1535.446259][T12075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.687882][T10445] Bluetooth: hci2: command tx timeout [ 1535.711793][ T6917] usb 7-1: not running at top speed; connect to a high speed hub [ 1535.745132][T12075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1535.802019][ T6917] usb 7-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1535.877038][ T6917] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1535.940393][ T6917] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1535.984792][ T6917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.054106][ T6917] usb 7-1: Product: syz [ 1536.082004][ T6917] usb 7-1: Manufacturer: syz [ 1536.108438][ T6917] usb 7-1: SerialNumber: syz [ 1536.251197][ T6086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.324298][ T6086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.511417][ T6917] usblp0: Disabling reads from problematic bidirectional printer [ 1536.535607][ T6086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.596342][ T6086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.615175][ T6917] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 5 proto 1 vid 0x03F0 pid 0x0004 [ 1536.747604][ T6917] usb 7-1: USB disconnect, device number 35 [ 1536.835825][ T6917] usblp0: removed [ 1536.879635][T10356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1536.894153][T10356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1536.908544][T10356] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1536.951276][T10356] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1536.974325][T10356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1537.125153][ T35] bridge_slave_1: left allmulticast mode [ 1537.161074][ T35] bridge_slave_1: left promiscuous mode [ 1537.184688][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.279147][ T35] bridge_slave_0: left allmulticast mode [ 1537.330033][ T35] bridge_slave_0: left promiscuous mode [ 1537.382161][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.767958][T10445] Bluetooth: hci2: command tx timeout [ 1539.032841][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.134461][T10445] Bluetooth: hci3: command tx timeout [ 1539.158367][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.270175][ T35] bond0 (unregistering): Released all slaves [ 1539.327801][T10356] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1539.339346][T10356] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1539.349288][T10356] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1539.378883][T10356] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1539.399741][T10356] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1539.586787][T12471] loop6: detected capacity change from 0 to 512 [ 1539.811429][T12471] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1539.849824][T10445] Bluetooth: hci2: command tx timeout [ 1539.898086][T12471] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1007: bg 0: block 5: invalid block bitmap [ 1540.004242][T12471] loop6: lost filesystem error report for type 5 error -117 [ 1540.007432][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1540.021589][ C0] EXT4-fs (loop6): initial error at time 1780194048: ext4_validate_block_bitmap:432 [ 1540.031506][ C0] EXT4-fs (loop6): last error at time 1780194048: ext4_validate_block_bitmap:432 [ 1540.056957][T12471] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1540.097173][ T35] hsr_slave_0: left promiscuous mode [ 1540.135614][ T35] hsr_slave_1: left promiscuous mode [ 1540.152010][T12471] loop6: lost filesystem error report for type 5 error -117 [ 1540.156851][T12471] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1007: invalid indirect mapped block 3 (level 2) [ 1540.205731][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.255817][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.274024][T12471] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1540.275874][T12471] EXT4-fs (loop6): 2 truncates cleaned up [ 1540.373101][T12471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1540.432139][ T35] veth1_vlan: left promiscuous mode [ 1540.474273][ T35] veth0_vlan: left promiscuous mode [ 1540.621715][T12471] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1540.743565][T10356] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1540.755839][T10356] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1540.773227][T10356] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1540.812139][T10356] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1540.837500][T10356] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1541.148164][ T7822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.208047][T10356] Bluetooth: hci3: command tx timeout [ 1541.458057][T10356] Bluetooth: hci4: command tx timeout [ 1541.927855][T10356] Bluetooth: hci2: command tx timeout [ 1542.378026][ T6917] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1542.543446][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1542.549471][ T6917] usb 7-1: Using ep0 maxpacket: 32 [ 1542.609459][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1542.621225][ T6917] usb 7-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 1542.643003][ T6917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.652235][ T6917] usb 7-1: Product: syz [ 1542.656690][ T6917] usb 7-1: Manufacturer: syz [ 1542.662043][ T6917] usb 7-1: SerialNumber: syz [ 1542.700559][ T6917] usb 7-1: config 0 descriptor?? [ 1542.733377][ T6917] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 1542.888761][T10356] Bluetooth: hci5: command tx timeout [ 1543.287959][T10356] Bluetooth: hci3: command tx timeout [ 1543.527826][T10356] Bluetooth: hci4: command tx timeout [ 1544.655982][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.914421][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.969814][T10356] Bluetooth: hci5: command tx timeout [ 1545.012683][ T9322] usb 7-1: USB disconnect, device number 36 [ 1545.313492][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.372348][T10356] Bluetooth: hci3: command tx timeout [ 1545.464562][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.611916][T10356] Bluetooth: hci4: command tx timeout [ 1547.052264][T10356] Bluetooth: hci5: command tx timeout [ 1547.429059][T12536] loop6: detected capacity change from 0 to 4096 [ 1547.461226][T12536] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1547.688629][T10356] Bluetooth: hci4: command tx timeout [ 1547.715597][T12536] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1547.784469][T12536] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1547.924530][T12536] ntfs3(loop6): ino=1e, mi_enum_attr [ 1547.967663][T12536] ntfs3(loop6): ino=1e, mi_enum_attr [ 1548.010171][T12536] ntfs3(loop6): ino=1e, mi_enum_attr [ 1548.785717][T12553] loop6: detected capacity change from 0 to 512 [ 1548.854259][T12553] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1548.878469][T12553] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1014: bg 0: block 5: invalid block bitmap [ 1548.898077][T12553] loop6: lost filesystem error report for type 5 error -117 [ 1548.899633][T12553] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1548.907459][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1548.907563][ C0] EXT4-fs (loop6): initial error at time 1780194057: ext4_validate_block_bitmap:432 [ 1548.907702][ C0] EXT4-fs (loop6): last error at time 1780194057: ext4_validate_block_bitmap:432 [ 1548.965009][T12553] loop6: lost filesystem error report for type 5 error -117 [ 1548.966450][T12553] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1014: invalid indirect mapped block 3 (level 2) [ 1548.996113][T12553] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1548.999686][T12553] EXT4-fs (loop6): 2 truncates cleaned up [ 1549.040545][T12553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1549.129229][T10356] Bluetooth: hci5: command tx timeout [ 1549.436746][T12420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.476075][T12420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.502993][T12420] bridge_slave_0: entered allmulticast mode [ 1549.526994][T12420] bridge_slave_0: entered promiscuous mode [ 1549.545125][ T7822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.731996][T12420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.753159][T12420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.791294][T12420] bridge_slave_1: entered allmulticast mode [ 1549.821205][T12420] bridge_slave_1: entered promiscuous mode [ 1550.358958][T12420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.539143][ T9322] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1550.559426][T12420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.738438][ T9322] usb 7-1: Using ep0 maxpacket: 32 [ 1550.803532][ T9322] usb 7-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 1550.833674][ T9322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.867867][ T9322] usb 7-1: Product: syz [ 1550.883481][ T9322] usb 7-1: Manufacturer: syz [ 1550.901392][ T9322] usb 7-1: SerialNumber: syz [ 1550.938724][ T9322] usb 7-1: config 0 descriptor?? [ 1551.009813][ T9322] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 1551.044361][T12420] team0: Port device team_slave_0 added [ 1551.293515][T12420] team0: Port device team_slave_1 added [ 1551.826775][T12420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1551.854124][T12420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1551.919241][T12420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.145706][T12420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.153068][T12420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.201951][T12420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.391656][T12449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.401077][T12449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.414110][T12449] bridge_slave_0: entered allmulticast mode [ 1552.450826][T12449] bridge_slave_0: entered promiscuous mode [ 1552.470556][ T9322] usb 7-1: USB disconnect, device number 37 [ 1552.676814][T12449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.686766][T12449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.705466][T12449] bridge_slave_1: entered allmulticast mode [ 1552.716961][T12449] bridge_slave_1: entered promiscuous mode [ 1553.321347][T12449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.512847][T12420] hsr_slave_0: entered promiscuous mode [ 1553.570107][T12420] hsr_slave_1: entered promiscuous mode [ 1553.680608][T12449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.082884][T12449] team0: Port device team_slave_0 added [ 1554.153761][T12449] team0: Port device team_slave_1 added [ 1554.463682][T12613] loop6: detected capacity change from 0 to 128 [ 1555.034512][T12449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1555.042585][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.071593][T12449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1555.229748][T12449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.239257][ T9322] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 1555.240589][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.276237][T12449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.291444][T12467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.301300][T12467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.310821][T12467] bridge_slave_0: entered allmulticast mode [ 1555.322401][T12467] bridge_slave_0: entered promiscuous mode [ 1555.462752][ T9322] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1555.487143][T12480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.488829][ T9322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.503895][ T9322] usb 7-1: Product: syz [ 1555.512987][ T9322] usb 7-1: Manufacturer: syz [ 1555.518294][ T9322] usb 7-1: SerialNumber: syz [ 1555.519211][T12480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.541321][T12480] bridge_slave_0: entered allmulticast mode [ 1555.550131][ T9322] usb 7-1: config 0 descriptor?? [ 1555.572018][T12480] bridge_slave_0: entered promiscuous mode [ 1555.642738][T12467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.652818][T12467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.665013][T12467] bridge_slave_1: entered allmulticast mode [ 1555.676086][T12467] bridge_slave_1: entered promiscuous mode [ 1555.791098][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.798951][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.821523][T12480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.826039][ T9322] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1555.844049][T12480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.854865][T12480] bridge_slave_1: entered allmulticast mode [ 1555.870979][T12480] bridge_slave_1: entered promiscuous mode [ 1556.237983][ T35] bridge_slave_1: left allmulticast mode [ 1556.246974][ T35] bridge_slave_1: left promiscuous mode [ 1556.256202][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.288721][ T35] bridge_slave_0: left allmulticast mode [ 1556.294725][ T35] bridge_slave_0: left promiscuous mode [ 1556.308496][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.337858][ T35] bridge_slave_1: left allmulticast mode [ 1556.344118][ T35] bridge_slave_1: left promiscuous mode [ 1556.352831][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.378020][ T35] bridge_slave_0: left allmulticast mode [ 1556.395625][ T35] bridge_slave_0: left promiscuous mode [ 1556.404299][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.442667][ T35] bridge_slave_1: left allmulticast mode [ 1556.449534][ T35] bridge_slave_1: left promiscuous mode [ 1556.456220][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.477044][ T35] bridge_slave_0: left allmulticast mode [ 1556.483619][ T35] bridge_slave_0: left promiscuous mode [ 1556.492265][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.062874][ T9322] ===================================================== [ 1557.070456][ T9322] BUG: KMSAN: uninit-value in irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 1557.079499][ T9322] irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 1557.086370][ T9322] irqentry_exit+0x82/0xa00 [ 1557.091522][ T9322] sysvec_apic_timer_interrupt+0x52/0x90 [ 1557.097430][ T9322] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1557.103767][ T9322] rtl28xxu_read_config+0x1fae/0x3950 [ 1557.109535][ T9322] dvb_usbv2_probe+0xff4/0x61f0 [ 1557.114685][ T9322] usb_probe_interface+0xd51/0x1440 [ 1557.120190][ T9322] really_probe+0x4d5/0xe40 [ 1557.125075][ T9322] __driver_probe_device+0x2fb/0x410 [ 1557.130624][ T9322] driver_probe_device+0x70/0x8f0 [ 1557.135895][ T9322] __device_attach_driver+0x4ee/0x950 [ 1557.141534][ T9322] bus_for_each_drv+0x3e3/0x680 [ 1557.146600][ T9322] __device_attach+0x3c5/0x5f0 [ 1557.151607][ T9322] device_initial_probe+0x126/0x170 [ 1557.157067][ T9322] bus_probe_device+0x287/0x530 [ 1557.162138][ T9322] device_add+0x12e3/0x1c90 [ 1557.166923][ T9322] usb_set_configuration+0x3484/0x3b60 [ 1557.172570][ T9322] usb_generic_driver_probe+0xfc/0x290 [ 1557.178377][ T9322] usb_probe_device+0x38d/0x690 [ 1557.183516][ T9322] really_probe+0x4d5/0xe40 [ 1557.188234][ T9322] __driver_probe_device+0x2fb/0x410 [ 1557.193846][ T9322] driver_probe_device+0x70/0x8f0 [ 1557.199113][ T9322] __device_attach_driver+0x4ee/0x950 [ 1557.204721][ T9322] bus_for_each_drv+0x3e3/0x680 [ 1557.209770][ T9322] __device_attach+0x3c5/0x5f0 [ 1557.214751][ T9322] device_initial_probe+0x126/0x170 [ 1557.220246][ T9322] bus_probe_device+0x287/0x530 [ 1557.225456][ T9322] device_add+0x12e3/0x1c90 [ 1557.230252][ T9322] usb_new_device+0x106a/0x2120 [ 1557.235400][ T9322] hub_event+0x5404/0x77c0 [ 1557.239999][ T9322] process_scheduled_works+0xb65/0x1e40 [ 1557.245811][ T9322] worker_thread+0xee4/0x1590 [ 1557.250774][ T9322] kthread+0x53a/0x5f0 [ 1557.255114][ T9322] ret_from_fork+0x20f/0x8d0 [ 1557.259947][ T9322] ret_from_fork_asm+0x1a/0x30 [ 1557.264945][ T9322] [ 1557.267363][ T9322] Local variable tmp.i492.i created at: [ 1557.273015][ T9322] rtl28xxu_read_config+0x1161/0x3950 [ 1557.278586][ T9322] dvb_usbv2_probe+0xff4/0x61f0 [ 1557.283629][ T9322] [ 1557.286119][ T9322] CPU: 0 UID: 0 PID: 9322 Comm: kworker/0:9 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1557.297267][ T9322] Tainted: [L]=SOFTLOCKUP [ 1557.301717][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1557.311934][ T9322] Workqueue: usb_hub_wq hub_event [ 1557.317154][ T9322] ===================================================== [ 1557.324194][ T9322] Disabling lock debugging due to kernel taint [ 1557.330463][ T9322] Kernel panic - not syncing: kmsan.panic set ... [ 1557.337115][ T9322] CPU: 0 UID: 0 PID: 9322 Comm: kworker/0:9 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 1557.348475][ T9322] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1557.354128][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1557.364335][ T9322] Workqueue: usb_hub_wq hub_event [ 1557.369670][ T9322] Call Trace: [ 1557.373059][ T9322] [ 1557.376104][ T9322] __dump_stack+0x26/0x30 [ 1557.380631][ T9322] dump_stack_lvl+0x50/0x1c0 [ 1557.385412][ T9322] ? dump_stack+0x12/0x25 [ 1557.389926][ T9322] dump_stack+0x1e/0x25 [ 1557.394251][ T9322] vpanic+0x7b4/0x1430 [ 1557.398608][ T9322] panic+0x15d/0x160 [ 1557.402750][ T9322] kmsan_report+0x31a/0x320 [ 1557.407504][ T9322] ? rtl28xxu_read_config+0x1f20/0x3950 [ 1557.413281][ T9322] ? __msan_warning+0x1b/0x30 [ 1557.418183][ T9322] ? irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 1557.425098][ T9322] ? irqentry_exit+0x82/0xa00 [ 1557.429996][ T9322] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 1557.436117][ T9322] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1557.442463][ T9322] ? rtl28xxu_read_config+0x1fae/0x3950 [ 1557.448233][ T9322] ? dvb_usbv2_probe+0xff4/0x61f0 [ 1557.453460][ T9322] ? usb_probe_interface+0xd51/0x1440 [ 1557.459026][ T9322] ? really_probe+0x4d5/0xe40 [ 1557.463937][ T9322] ? __driver_probe_device+0x2fb/0x410 [ 1557.469679][ T9322] ? driver_probe_device+0x70/0x8f0 [ 1557.475149][ T9322] ? __device_attach_driver+0x4ee/0x950 [ 1557.480930][ T9322] ? bus_for_each_drv+0x3e3/0x680 [ 1557.486145][ T9322] ? __device_attach+0x3c5/0x5f0 [ 1557.491303][ T9322] ? device_initial_probe+0x126/0x170 [ 1557.496900][ T9322] ? bus_probe_device+0x287/0x530 [ 1557.502114][ T9322] ? device_add+0x12e3/0x1c90 [ 1557.506993][ T9322] ? usb_set_configuration+0x3484/0x3b60 [ 1557.512818][ T9322] ? usb_generic_driver_probe+0xfc/0x290 [ 1557.518636][ T9322] ? usb_probe_device+0x38d/0x690 [ 1557.523978][ T9322] ? really_probe+0x4d5/0xe40 [ 1557.528902][ T9322] ? __driver_probe_device+0x2fb/0x410 [ 1557.534646][ T9322] ? driver_probe_device+0x70/0x8f0 [ 1557.540117][ T9322] ? __device_attach_driver+0x4ee/0x950 [ 1557.545958][ T9322] ? bus_for_each_drv+0x3e3/0x680 [ 1557.551188][ T9322] ? __device_attach+0x3c5/0x5f0 [ 1557.556365][ T9322] ? device_initial_probe+0x126/0x170 [ 1557.561972][ T9322] ? bus_probe_device+0x287/0x530 [ 1557.567194][ T9322] ? device_add+0x12e3/0x1c90 [ 1557.572088][ T9322] ? usb_new_device+0x106a/0x2120 [ 1557.577344][ T9322] ? hub_event+0x5404/0x77c0 [ 1557.582118][ T9322] ? process_scheduled_works+0xb65/0x1e40 [ 1557.588045][ T9322] ? worker_thread+0xee4/0x1590 [ 1557.593097][ T9322] ? kthread+0x53a/0x5f0 [ 1557.597577][ T9322] ? ret_from_fork+0x20f/0x8d0 [ 1557.602545][ T9322] ? ret_from_fork_asm+0x1a/0x30 [ 1557.607692][ T9322] ? stack_depot_save_flags+0x35/0x790 [ 1557.613460][ T9322] ? kmsan_get_metadata+0xf1/0x160 [ 1557.618804][ T9322] ? kmsan_get_metadata+0xf1/0x160 [ 1557.624147][ T9322] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1557.630718][ T9322] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1557.636995][ T9322] ? kmsan_get_metadata+0xf1/0x160 [ 1557.642430][ T9322] __msan_warning+0x1b/0x30 [ 1557.647148][ T9322] irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 1557.653788][ T9322] irqentry_exit+0x82/0xa00 [ 1557.658614][ T9322] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1557.665164][ T9322] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1557.671457][ T9322] sysvec_apic_timer_interrupt+0x52/0x90 [ 1557.677341][ T9322] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1557.683535][ T9322] RIP: 0010:rtl28xxu_read_config+0x1fae/0x3950 [ 1557.689936][ T9322] Code: 38 8b 02 c6 03 00 44 88 7b 08 89 45 c0 89 83 90 0c 00 00 bf 38 00 00 00 44 89 f6 e8 fc 97 6e f6 45 84 ff 0f 95 c0 41 80 f6 c7 <45> 08 fe 41 80 fe ff 0f 94 c1 20 c1 44 89 e0 20 c8 0f b6 55 d0 08 [ 1557.709827][ T9322] RSP: 0018:ffff8880189eaa00 EFLAGS: 00010202 [ 1557.716080][ T9322] RAX: ffffffff8b91cf01 RBX: ffff888104db0bd8 RCX: 0000000000000002 [ 1557.724348][ T9322] RDX: ffff888104db0000 RSI: 00000000000000ff RDI: 0000000000000038 [ 1557.732488][ T9322] RBP: ffff8880189eab98 R08: ffffea000000000f R09: 0000000000000000 [ 1557.740610][ T9322] R10: ffff888052a98068 R11: ffffffff813471ba R12: 00000000053e0000 [ 1557.748738][ T9322] R13: 0000000000000000 R14: 0000000000000038 R15: 00000000000000ff [ 1557.756868][ T9322] ? ret_from_fork_asm+0x1a/0x30 [ 1557.762026][ T9322] ? rtl28xxu_read_config+0x1eb1/0x3950 [ 1557.767902][ T9322] ? __pfx_rtl28xxu_read_config+0x10/0x10 [ 1557.773836][ T9322] dvb_usbv2_probe+0xff4/0x61f0 [ 1557.778909][ T9322] ? __pm_runtime_set_status+0x16e9/0x1ab0 [ 1557.785061][ T9322] ? kmsan_get_metadata+0xf1/0x160 [ 1557.790532][ T9322] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1557.796118][ T9322] usb_probe_interface+0xd51/0x1440 [ 1557.801569][ T9322] ? __pfx_usb_probe_interface+0x10/0x10 [ 1557.807436][ T9322] really_probe+0x4d5/0xe40 [ 1557.812205][ T9322] __driver_probe_device+0x2fb/0x410 [ 1557.818012][ T9322] driver_probe_device+0x70/0x8f0 [ 1557.823273][ T9322] ? kmsan_get_metadata+0xf1/0x160 [ 1557.828620][ T9322] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1557.834666][ T9322] __device_attach_driver+0x4ee/0x950 [ 1557.840294][ T9322] bus_for_each_drv+0x3e3/0x680 [ 1557.845463][ T9322] ? __pfx___device_attach_driver+0x10/0x10 [ 1557.851617][ T9322] __device_attach+0x3c5/0x5f0 [ 1557.856730][ T9322] device_initial_probe+0x126/0x170 [ 1557.862170][ T9322] bus_probe_device+0x287/0x530 [ 1557.867227][ T9322] device_add+0x12e3/0x1c90 [ 1557.871979][ T9322] usb_set_configuration+0x3484/0x3b60 [ 1557.877733][ T9322] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1557.883866][ T9322] usb_generic_driver_probe+0xfc/0x290 [ 1557.889522][ T9322] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1557.895962][ T9322] usb_probe_device+0x38d/0x690 [ 1557.901048][ T9322] ? __pfx_usb_probe_device+0x10/0x10 [ 1557.906628][ T9322] really_probe+0x4d5/0xe40 [ 1557.911394][ T9322] __driver_probe_device+0x2fb/0x410 [ 1557.916935][ T9322] driver_probe_device+0x70/0x8f0 [ 1557.922242][ T9322] ? kmsan_get_metadata+0xf1/0x160 [ 1557.927599][ T9322] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1557.933745][ T9322] __device_attach_driver+0x4ee/0x950 [ 1557.939375][ T9322] bus_for_each_drv+0x3e3/0x680 [ 1557.944421][ T9322] ? __pfx___device_attach_driver+0x10/0x10 [ 1557.950640][ T9322] __device_attach+0x3c5/0x5f0 [ 1557.955644][ T9322] device_initial_probe+0x126/0x170 [ 1557.961072][ T9322] bus_probe_device+0x287/0x530 [ 1557.966137][ T9322] device_add+0x12e3/0x1c90 [ 1557.970963][ T9322] usb_new_device+0x106a/0x2120 [ 1557.976090][ T9322] hub_event+0x5404/0x77c0 [ 1557.980815][ T9322] ? kmsan_get_metadata+0xf1/0x160 [ 1557.986214][ T9322] ? __pfx_hub_event+0x10/0x10 [ 1557.991275][ T9322] process_scheduled_works+0xb65/0x1e40 [ 1557.997184][ T9322] worker_thread+0xee4/0x1590 [ 1558.002133][ T9322] kthread+0x53a/0x5f0 [ 1558.006527][ T9322] ? __pfx_worker_thread+0x10/0x10 [ 1558.011856][ T9322] ? __pfx_kthread+0x10/0x10 [ 1558.016667][ T9322] ret_from_fork+0x20f/0x8d0 [ 1558.021445][ T9322] ? __switch_to+0x573/0x7a0 [ 1558.026489][ T9322] ? __pfx_kthread+0x10/0x10 [ 1558.031309][ T9322] ret_from_fork_asm+0x1a/0x30 [ 1558.036330][ T9322] [ 1558.040148][ T9322] Kernel Offset: disabled [ 1558.044574][ T9322] Rebooting in 86400 seconds..