last executing test programs:

15.122206532s ago: executing program 3 (id=189):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg$unix(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000900)="19", 0x1}], 0x1}, 0x0)

13.474897882s ago: executing program 3 (id=195):
syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000300)='./bus\x00', 0x2000002, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0], 0xfe, 0x60a1, &(0x7f0000006800)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x3010006, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES64, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRES64], 0xdb, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)

11.3418205s ago: executing program 4 (id=203):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0x200, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32=r0, @ANYRES64=r0], 0x0)

9.818464031s ago: executing program 3 (id=207):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
epoll_create1(0x0)

9.134937109s ago: executing program 1 (id=210):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f00000002c0)={[{@errors_remount}]}, 0xfe, 0x492, &(0x7f0000000f00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

8.012527862s ago: executing program 4 (id=212):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)

7.449679481s ago: executing program 1 (id=215):
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)

7.328789707s ago: executing program 4 (id=216):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg")
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd", 0x6a)
sendfile(r0, r1, 0x0, 0xe065)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x7248}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8800)

6.921616039s ago: executing program 3 (id=218):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffe, 0xfffffffd})

6.471101384s ago: executing program 4 (id=220):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@noinit_itable}, {@nobh}, {@acl}]}, 0x1, 0xb96, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={<r3=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0xffffffff, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x2}}}, 0x118)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r3, 0x2}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x438, 0x1a0, 0x0, 0x238, 0x0, 0x108, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@ipvs={{0x48}}, @common=@ttl={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x88}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'ipvlan1\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0xffee, 0xffd, @loopback={0x6c, 0xa8aaaafffeaaaa22}, 0x1002}, 0x1c)

5.938593454s ago: executing program 2 (id=222):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000480)={r1}, &(0x7f00000004c0)=0x8)

5.91057686s ago: executing program 1 (id=223):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x4, 0x4)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)

5.282765363s ago: executing program 2 (id=224):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000300)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x6, 0x2ba, &(0x7f0000000640)="$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")
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, "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"})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)

5.137622767s ago: executing program 0 (id=225):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142)
ioctl$FS_IOC_RESVSP(r0, 0x40044591, 0x0)
r1 = dup2(r0, r0)
read$hiddev(r1, 0x0, 0x0)

4.84427894s ago: executing program 4 (id=226):
r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_emit_ethernet(0x4f, &(0x7f0000000200)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0xfffffffd, [{0x0, 0x1, "a78ce540065980"}]}}}}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

4.439072002s ago: executing program 2 (id=227):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
r1 = dup(r0)
connect$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

4.401145837s ago: executing program 1 (id=228):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x47, 0x3, 0xfff9}, 0x8)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

4.212926809s ago: executing program 0 (id=229):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000900)="19", 0x1}], 0x1}, 0x0)

3.557075617s ago: executing program 0 (id=230):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd", 0x6a)
sendfile(r0, r1, 0x0, 0xe065)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x7248}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8800)

3.506864953s ago: executing program 2 (id=231):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27)

3.24402201s ago: executing program 3 (id=232):
r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$binfmt_register(r0, 0x0, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.034518489s ago: executing program 1 (id=233):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="646174615f6368653e5c069b9a2314d73b636b73756d3d63726336342c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c6e6f7265636f766572792c73686172645f696e6f05655f6e756d626572732c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6effff655f70726566657463682c6261636b67726f756e645f636f7072655434696f6e3d6e6f6e652c7265636f6e7374727563745f616c6c6f632c636f6d7072657373696f6e3d6e6f6e652c726174656c696d69745f658e080000732c00"], 0x1, 0x5949, &(0x7f000000b480)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)

2.381035128s ago: executing program 2 (id=234):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}]}, 0x3, 0x4cf, &(0x7f0000000740)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400, 0x0)

2.22446508s ago: executing program 0 (id=235):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x8)

1.481300363s ago: executing program 3 (id=236):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@noinit_itable}, {@nobh}, {@acl}]}, 0x1, 0xb96, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={<r3=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0xffffffff, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x2}}}, 0x118)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r3, 0x2}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x438, 0x1a0, 0x0, 0x238, 0x0, 0x108, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@ipvs={{0x48}}, @common=@ttl={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x88}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'ipvlan1\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0xffee, 0xffd, @loopback={0x6c, 0xa8aaaafffeaaaa22}, 0x1002}, 0x1c)

792.243829ms ago: executing program 0 (id=237):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000100000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

788.923026ms ago: executing program 2 (id=238):
set_mempolicy(0x6, &(0x7f0000000040)=0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_clone(0xc0001480, 0x0, 0x20, 0x0, 0x0, 0x0)

390.565563ms ago: executing program 4 (id=239):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40046629, &(0x7f0000000100)=@v1={0x2, @aes128, 0x0, @desc4})

309.142567ms ago: executing program 0 (id=240):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000300)={0x0, 0x17, 0x6, "eb0d0e4c9f1d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 1 (id=241):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x9, @local, 0xffffffff}}}, &(0x7f0000000080)=0x84)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts.
syzkaller login: [  211.252733][ T5765] cgroup: Unknown subsys name 'net'
[  211.430761][ T5765] cgroup: Unknown subsys name 'cpuset'
[  211.453863][ T5765] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  229.486805][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  229.493610][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  269.382612][ T5765] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  275.074380][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.078915][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  275.083376][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  275.092326][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.104837][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  275.113925][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  275.115397][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  275.132268][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  275.145422][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  275.155435][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  275.161384][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.167198][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  275.173007][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  275.180426][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  275.186667][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  275.199113][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  275.203812][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  275.212935][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  275.220314][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  275.225296][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  275.230683][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  275.245266][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.247254][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  275.256610][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  275.268338][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  275.275518][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  275.281034][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  275.298466][ T5080] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  275.308449][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  275.317202][ T5080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  276.846725][ T5783] chnl_net:caif_netlink_parms(): no params data found
[  276.994515][ T5789] chnl_net:caif_netlink_parms(): no params data found
[  277.396205][   T52] Bluetooth: hci4: command tx timeout
[  277.401953][   T52] Bluetooth: hci0: command tx timeout
[  277.408069][   T52] Bluetooth: hci2: command tx timeout
[  277.466414][   T52] Bluetooth: hci3: command tx timeout
[  277.472176][   T52] Bluetooth: hci1: command tx timeout
[  277.480602][ T5781] chnl_net:caif_netlink_parms(): no params data found
[  277.763212][ T5791] chnl_net:caif_netlink_parms(): no params data found
[  277.984310][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.993119][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.001191][ T5783] bridge_slave_0: entered allmulticast mode
[  278.010915][ T5783] bridge_slave_0: entered promiscuous mode
[  278.039984][ T5782] chnl_net:caif_netlink_parms(): no params data found
[  278.162329][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.170291][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.178250][ T5783] bridge_slave_1: entered allmulticast mode
[  278.187680][ T5783] bridge_slave_1: entered promiscuous mode
[  278.353651][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.362426][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.370598][ T5789] bridge_slave_0: entered allmulticast mode
[  278.379799][ T5789] bridge_slave_0: entered promiscuous mode
[  278.526767][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.534714][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.544349][ T5789] bridge_slave_1: entered allmulticast mode
[  278.553903][ T5789] bridge_slave_1: entered promiscuous mode
[  278.580183][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.618669][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.920017][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.118001][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.136351][ T5783] team0: Port device team_slave_0 added
[  279.192147][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.200302][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.208384][ T5781] bridge_slave_0: entered allmulticast mode
[  279.218046][ T5781] bridge_slave_0: entered promiscuous mode
[  279.326949][ T5783] team0: Port device team_slave_1 added
[  279.367664][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.375462][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.383547][ T5781] bridge_slave_1: entered allmulticast mode
[  279.393300][ T5781] bridge_slave_1: entered promiscuous mode
[  279.414471][ T5789] team0: Port device team_slave_0 added
[  279.469098][ T5787] Bluetooth: hci2: command tx timeout
[  279.474829][ T5787] Bluetooth: hci0: command tx timeout
[  279.482440][ T5787] Bluetooth: hci4: command tx timeout
[  279.501260][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.509530][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.517608][ T5791] bridge_slave_0: entered allmulticast mode
[  279.527028][ T5791] bridge_slave_0: entered promiscuous mode
[  279.573922][   T52] Bluetooth: hci1: command tx timeout
[  279.574122][ T5787] Bluetooth: hci3: command tx timeout
[  279.628650][ T5789] team0: Port device team_slave_1 added
[  279.673239][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.681027][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.689064][ T5791] bridge_slave_1: entered allmulticast mode
[  279.698082][ T5791] bridge_slave_1: entered promiscuous mode
[  279.711161][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.718591][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.745085][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.835260][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.932572][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.940341][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.966932][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.980519][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.988697][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.996795][ T5782] bridge_slave_0: entered allmulticast mode
[  280.005413][ T5782] bridge_slave_0: entered promiscuous mode
[  280.027388][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.037688][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.045491][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.053787][ T5782] bridge_slave_1: entered allmulticast mode
[  280.063305][ T5782] bridge_slave_1: entered promiscuous mode
[  280.075032][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.082585][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.109181][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.124739][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.132242][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.158650][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.354757][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.379512][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.436239][ T5781] team0: Port device team_slave_0 added
[  280.454014][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.543433][ T5781] team0: Port device team_slave_1 added
[  280.607444][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.804164][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.811708][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.838180][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.868606][ T5783] hsr_slave_0: entered promiscuous mode
[  280.881425][ T5783] hsr_slave_1: entered promiscuous mode
[  280.899424][ T5791] team0: Port device team_slave_0 added
[  280.980090][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.987593][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.014159][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.040841][ T5791] team0: Port device team_slave_1 added
[  281.120734][ T5789] hsr_slave_0: entered promiscuous mode
[  281.131028][ T5789] hsr_slave_1: entered promiscuous mode
[  281.140811][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  281.149013][ T5789] Cannot create hsr debugfs directory
[  281.162901][ T5782] team0: Port device team_slave_0 added
[  281.313509][ T5782] team0: Port device team_slave_1 added
[  281.324055][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.331471][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.357873][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.390711][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.398079][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.424643][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.552261][ T5787] Bluetooth: hci4: command tx timeout
[  281.558419][   T52] Bluetooth: hci0: command tx timeout
[  281.564102][   T52] Bluetooth: hci2: command tx timeout
[  281.626017][   T52] Bluetooth: hci3: command tx timeout
[  281.631762][   T52] Bluetooth: hci1: command tx timeout
[  281.835344][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.842768][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.869406][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.901092][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.908481][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.935042][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.962156][ T5791] hsr_slave_0: entered promiscuous mode
[  281.972930][ T5791] hsr_slave_1: entered promiscuous mode
[  281.982918][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  281.991027][ T5791] Cannot create hsr debugfs directory
[  282.016840][ T5781] hsr_slave_0: entered promiscuous mode
[  282.028070][ T5781] hsr_slave_1: entered promiscuous mode
[  282.037795][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  282.045828][ T5781] Cannot create hsr debugfs directory
[  282.664029][ T5782] hsr_slave_0: entered promiscuous mode
[  282.674163][ T5782] hsr_slave_1: entered promiscuous mode
[  282.684150][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  282.692230][ T5782] Cannot create hsr debugfs directory
[  283.303332][ T5789] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  283.344520][ T5789] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  283.425440][ T5789] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  283.509030][ T5789] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  283.633670][ T5787] Bluetooth: hci4: command tx timeout
[  283.640259][   T52] Bluetooth: hci2: command tx timeout
[  283.647885][ T5796] Bluetooth: hci0: command tx timeout
[  283.680059][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  283.706022][   T52] Bluetooth: hci1: command tx timeout
[  283.711792][ T5787] Bluetooth: hci3: command tx timeout
[  283.721966][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  283.859289][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  283.884233][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  283.958848][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  283.979379][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  284.116561][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  284.182541][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  284.222706][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  284.269561][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  284.342587][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  284.426871][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  284.721803][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  284.778933][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  284.825500][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  284.852591][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  285.461221][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.602660][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.747624][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.778092][ T5789] 8021q: adding VLAN 0 to HW filter on device team0
[  285.883875][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[  285.933816][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.941749][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.007648][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.015455][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.062818][ T5781] 8021q: adding VLAN 0 to HW filter on device team0
[  286.201939][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.209922][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.226861][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.234694][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.262193][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.270167][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.298034][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.451251][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.459176][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.606093][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.666961][ T5791] 8021q: adding VLAN 0 to HW filter on device team0
[  286.794622][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.802537][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.896547][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.904394][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.934788][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[  287.061143][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.069216][ T4393] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.192953][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  287.237954][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.245952][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.500827][ T5782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  287.512052][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  287.724019][ T5791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  287.736872][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  289.274002][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.410693][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.623037][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.784521][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.014041][ T5783] veth0_vlan: entered promiscuous mode
[  290.162394][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.178193][ T5783] veth1_vlan: entered promiscuous mode
[  290.498936][ T5781] veth0_vlan: entered promiscuous mode
[  290.543495][ T5782] veth0_vlan: entered promiscuous mode
[  290.593951][ T5781] veth1_vlan: entered promiscuous mode
[  290.686053][ T5783] veth0_macvtap: entered promiscuous mode
[  290.745810][ T5782] veth1_vlan: entered promiscuous mode
[  290.814562][ T5783] veth1_macvtap: entered promiscuous mode
[  290.957252][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  290.964090][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  291.081347][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.092594][ T5791] veth0_vlan: entered promiscuous mode
[  291.228703][ T5782] veth0_macvtap: entered promiscuous mode
[  291.244993][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.298837][ T5791] veth1_vlan: entered promiscuous mode
[  291.319177][ T5782] veth1_macvtap: entered promiscuous mode
[  291.343161][ T5781] veth0_macvtap: entered promiscuous mode
[  291.387954][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.398055][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.407417][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.416810][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.495231][ T5781] veth1_macvtap: entered promiscuous mode
[  291.511643][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.523707][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.539127][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.661148][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.673810][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.690583][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.793483][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.805047][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.816483][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.828960][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.844385][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.886221][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.895385][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.904768][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.914121][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.939040][ T5791] veth0_macvtap: entered promiscuous mode
[  292.004743][ T5791] veth1_macvtap: entered promiscuous mode
[  292.055266][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.068805][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.079164][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.090165][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.105498][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.213295][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.222733][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.232170][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.241508][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.385025][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.399042][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.409999][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.420888][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.431914][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.442804][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.458267][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.617300][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.629694][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.640643][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.651582][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.661950][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.673756][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.691877][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.860707][ T5789] veth0_vlan: entered promiscuous mode
[  292.940719][ T5789] veth1_vlan: entered promiscuous mode
[  293.027062][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.039838][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.050355][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.059816][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.371132][ T5789] veth0_macvtap: entered promiscuous mode
[  293.456985][ T5789] veth1_macvtap: entered promiscuous mode
[  293.758108][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.769225][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.779517][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.792548][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.803360][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.814335][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.824527][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.836450][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.851476][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.905273][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.916568][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.927068][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.938048][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.948399][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.959382][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.969636][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.980527][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.995510][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.254219][ T5789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.265295][ T5789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.278164][ T5789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.289097][ T5789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.552315][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.560894][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.778290][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.787446][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.120656][ T5783] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  300.315089][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.323477][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.478589][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.487150][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.548438][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.556753][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.834158][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.842593][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.630261][ T5969] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  301.676826][ T4063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.685210][ T4063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.190486][ T1838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.198941][ T1838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.496514][ T5839] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  303.624918][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.634027][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.704537][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.720121][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.779897][ T5839] usb 3-1: config 0 has no interfaces?
[  303.786115][ T5839] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  303.795994][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.899041][ T5839] usb 3-1: config 0 descriptor??
[  304.183240][ T5839] usb 3-1: USB disconnect, device number 2
[  304.191644][ T5787] Bluetooth: hci0: ISO packet too small
[  305.168642][ T6001] loop3: detected capacity change from 0 to 256
[  305.191532][ T6001] =======================================================
[  305.191532][ T6001] WARNING: The mand mount option has been deprecated and
[  305.191532][ T6001]          and is ignored by this kernel. Remove the mand
[  305.191532][ T6001]          option from the mount to silence this warning.
[  305.191532][ T6001] =======================================================
[  305.226649][    C0] vkms_vblank_simulate: vblank timer overrun
[  305.456552][ T6007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18'.
[  305.806524][ T6001] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  305.984893][ T6014] random: crng reseeded on system resumption
[  306.216813][   T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  306.408061][   T25] usb 3-1: Using ep0 maxpacket: 16
[  306.476486][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024
[  306.488423][   T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  306.551828][   T25] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  306.561978][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.570478][   T25] usb 3-1: Product: syz
[  306.574941][   T25] usb 3-1: Manufacturer: syz
[  306.580555][   T25] usb 3-1: SerialNumber: syz
[  306.708051][   T25] usb 3-1: config 0 descriptor??
[  306.720366][ T6011] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  306.784444][   T25] hub 3-1:0.0: bad descriptor, ignoring hub
[  306.792268][   T25] hub 3-1:0.0: probe with driver hub failed with error -5
[  306.810604][   T25] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5
[  307.159356][    C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  307.169056][   T25] usb 3-1: USB disconnect, device number 3
[  309.456749][   T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  309.699967][   T25] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  309.711119][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.809072][   T25] usb 4-1: config 0 descriptor??
[  309.828357][   T25] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  309.965410][ T6047] loop2: detected capacity change from 0 to 1024
[  310.064525][   T25] gp8psk: usb in 128 operation failed.
[  310.084254][   T25] gp8psk: usb in 137 operation failed.
[  310.093231][   T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  310.107157][   T25] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  310.116336][   T25] usb 4-1: media controller created
[  310.174331][   T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  310.197481][ T6047] hfsplus: bad catalog entry type
[  310.357508][ T6045] loop1: detected capacity change from 0 to 2048
[  310.382837][ T6049] loop4: detected capacity change from 0 to 64
[  310.434867][   T25] gp8psk_fe: Frontend attached
[  310.440105][   T25] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  310.448827][   T25] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  310.531252][   T25] gp8psk: usb in 138 operation failed.
[  310.537348][   T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  310.547258][   T25] gp8psk: found Genpix USB device pID = 203 (hex)
[  310.566661][   T25] usb 4-1: USB disconnect, device number 2
[  310.589304][ T6045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.620345][ T3017] hfsplus: b-tree write err: -5, ino 4
[  311.236976][ T6055] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  311.285795][   T29] audit: type=1800 audit(1737254284.626:2): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.34" name="file2" dev="loop1" ino=16 res=0 errno=0
[  312.319731][   T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  312.719682][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.067376][ T6073] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  314.200941][ T6087] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  314.439388][ T6082] sctp: failed to load transform for md5: -2
[  314.803176][ T6093] Bluetooth: MGMT ver 1.23
[  315.294112][ T6097] loop1: detected capacity change from 0 to 128
[  315.650306][ T6097] FAT-fs (loop1): Directory bread(block 32) failed
[  315.657545][ T6097] FAT-fs (loop1): Directory bread(block 33) failed
[  315.664561][ T6097] FAT-fs (loop1): Directory bread(block 34) failed
[  315.671851][ T6097] FAT-fs (loop1): Directory bread(block 35) failed
[  315.679149][ T6097] FAT-fs (loop1): Directory bread(block 36) failed
[  315.686169][ T6097] FAT-fs (loop1): Directory bread(block 37) failed
[  315.693188][ T6097] FAT-fs (loop1): Directory bread(block 38) failed
[  315.700270][ T6097] FAT-fs (loop1): Directory bread(block 39) failed
[  315.707503][ T6097] FAT-fs (loop1): Directory bread(block 40) failed
[  315.714457][ T6097] FAT-fs (loop1): Directory bread(block 41) failed
[  315.962538][ T6105] capability: warning: `syz.2.51' uses deprecated v2 capabilities in a way that may be insecure
[  316.358846][ T6109] xt_hashlimit: size too large, truncated to 1048576
[  317.143084][ T6115] loop4: detected capacity change from 0 to 256
[  317.454736][ T6116] loop2: detected capacity change from 0 to 1024
[  317.763459][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'.
[  317.823904][ T6115] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  319.012237][ T4063] hfsplus: b-tree write err: -5, ino 4
[  319.509323][ T6127] loop1: detected capacity change from 0 to 1024
[  320.928273][ T6129] loop4: detected capacity change from 0 to 4096
[  320.955573][ T6129] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  321.416421][ T6135] warning: `syz.1.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  323.432371][ T6152] loop2: detected capacity change from 0 to 1024
[  324.104196][ T6156] loop1: detected capacity change from 0 to 512
[  324.137868][ T6156] EXT4-fs: Ignoring removed oldalloc option
[  324.144306][ T6156] EXT4-fs: Ignoring removed i_version option
[  324.632978][ T6156] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.70: corrupted xattr block 95: invalid header
[  324.727771][ T6165] netlink: 'syz.3.73': attribute type 1 has an invalid length.
[  324.782476][ T6156] EXT4-fs (loop1): Remounting filesystem read-only
[  324.789707][ T6156] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  324.803330][ T6156] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[  324.814288][ T6156] EXT4-fs (loop1): 1 orphan inode deleted
[  324.883093][ T6165] vlan2: entered promiscuous mode
[  325.042726][ T6156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.117413][ T6168] loop0: detected capacity change from 0 to 4096
[  325.132102][ T6168] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  325.417761][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.053193][ T6175] loop4: detected capacity change from 0 to 512
[  326.266925][ T6175] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  326.289828][ T6175] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  326.347196][   T29] audit: type=1800 audit(1737254299.966:3): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.77" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=30 res=0 errno=0
[  326.549843][ T6175] EXT4-fs (loop4): 1 truncate cleaned up
[  326.557970][ T6175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.757819][ T6175] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.78: corrupted in-inode xattr: overlapping e_value 
[  326.889593][ T6175] EXT4-fs (loop4): Remounting filesystem read-only
[  326.897031][ T6175] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1772: inode #15: comm syz.4.78: unable to update i_inline_off
[  326.897731][ T6187] loop1: detected capacity change from 0 to 512
[  326.944215][ T6187] EXT4-fs: Ignoring removed i_version option
[  327.260831][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  327.274542][ T6187] ext4 filesystem being mounted at /15/w��5�T��)�`)Y�F�nA��@T<�3�ڂ$���r�cnH�<�p�r��>�wC�" ��-������8 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.300175][ T6191] loop0: detected capacity change from 0 to 512
[  327.368006][ T6191] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  327.440610][ T5789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.451219][ T6191] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.83: bad orphan inode 131083
[  327.524900][ T6191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.177240][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.263384][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  328.842341][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.89'.
[  329.815383][ T6210] loop4: detected capacity change from 0 to 512
[  329.937423][ T6213] netlink: 'syz.0.90': attribute type 1 has an invalid length.
[  330.067778][ T6213] vlan2: entered promiscuous mode
[  330.216439][ T6214] loop1: detected capacity change from 0 to 512
[  330.307436][ T6214] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  330.450815][ T6210] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.91: casefold flag without casefold feature
[  330.521170][ T6210] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.91: couldn't read orphan inode 15 (err -117)
[  330.536232][ T6214] EXT4-fs (loop1): 1 truncate cleaned up
[  330.544013][ T6214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.961880][ T6210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.095074][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.630075][ T6226] loop1: detected capacity change from 0 to 256
[  331.642055][ T5789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.725153][ T6226] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  331.840412][ T6226] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  332.036044][ T6229] loop0: detected capacity change from 0 to 1024
[  332.132917][ T6232] netlink: 132 bytes leftover after parsing attributes in process `syz.4.98'.
[  332.159573][ T6230] loop2: detected capacity change from 0 to 1024
[  332.213482][ T6229] hfsplus: bad catalog entry type
[  332.268893][ T6230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.606047][ T6239] capability: warning: `syz.4.101' uses 32-bit capabilities (legacy support in use)
[  332.774489][ T3017] hfsplus: b-tree write err: -5, ino 4
[  333.710247][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.337090][ T6241] loop4: detected capacity change from 0 to 32768
[  334.383017][ T6241] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  334.392257][ T6241] gfs2: fsid=syz:syz: unknown hostdata (&)
[  335.208311][ T6256] netlink: 'syz.1.107': attribute type 1 has an invalid length.
[  335.302827][ T6256] vlan2: entered promiscuous mode
[  335.765143][ T6254] loop0: detected capacity change from 0 to 4096
[  336.124007][ T6258] program syz.4.108 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  337.103729][ T6275] loop4: detected capacity change from 0 to 1024
[  337.130949][ T6269] loop3: detected capacity change from 0 to 2048
[  337.826191][ T6269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.957304][ T6269] EXT4-fs error (device loop3): ext4_lookup:1813: inode #12: comm syz.3.111: iget: immutable or append flags not allowed on symlinks
[  338.461379][ T5839] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  338.677047][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.688752][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.699172][ T5839] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  338.708782][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.083039][ T4393] hfsplus: b-tree write err: -5, ino 4
[  339.501323][ T6285] loop1: detected capacity change from 0 to 4096
[  339.539481][ T5839] usb 1-1: config 0 descriptor??
[  339.774219][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.994926][ T6291] loop4: detected capacity change from 0 to 256
[  340.045149][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  340.088017][ T5839] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[  340.108384][ T5839] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[  340.121034][ T5839] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[  340.131794][ T5839] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[  340.141373][ T5839] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[  340.209438][ T5839] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  340.417755][ T6291] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe1843155, utbl_chksum : 0xe619d30d)
[  340.453703][   T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  340.466028][   T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  340.476669][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  340.486612][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.537340][ T5839] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 32: -71
[  340.547460][ T5839] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense firmware info: -71
[  340.557776][ T5839] playstation 0003:054C:0DF2.0001: Failed to get firmware info from DualSense
[  340.567221][ T5839] playstation 0003:054C:0DF2.0001: Failed to create dualsense.
[  340.620216][ T5839] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -71
[  340.652543][ T6289] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  340.653378][ T5839] usb 1-1: USB disconnect, device number 2
[  340.741806][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  340.987717][   T29] audit: type=1800 audit(1737254314.646:4): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.118" name="file1" dev="loop1" ino=33 res=0 errno=0
[  341.172854][   T10] usb 3-1: USB disconnect, device number 4
[  341.755287][ T6297] loop4: detected capacity change from 0 to 1024
[  341.950826][ T6299] loop0: detected capacity change from 0 to 1024
[  342.207226][ T6301] loop1: detected capacity change from 0 to 4096
[  342.343082][ T6301] NILFS (loop1): invalid segment: Checksum error in segment payload
[  342.359384][ T6301] NILFS (loop1): trying rollback from an earlier position
[  342.519385][ T6301] NILFS (loop1): recovery cancelled because norecovery option was specified for a read/write mount
[  342.650537][ T6293] loop3: detected capacity change from 0 to 32768
[  342.938959][ T6299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.042528][ T6297] hfsplus: found bad thread record in catalog
[  343.049209][ T6297] hfsplus: catalog searching failed
[  343.112139][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  343.118733][ T6293] jfs_rmdir: dtDelete returned -116
[  343.135394][ T6293] jfs_rmdir: dtDelete returned -116
[  343.666985][ T6306] loop2: detected capacity change from 0 to 4096
[  343.696641][   T60] hfsplus: found bad thread record in catalog
[  343.703305][   T60] hfsplus: found bad thread record in catalog
[  343.821282][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.671984][ T6306] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  345.896693][ T5839] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  346.248960][ T5839] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  346.259081][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.276462][ T5839] usb 5-1: config 0 descriptor??
[  346.406114][ T5839] gspca_main: sunplus-2.14.0 probing 055f:c420
[  347.396297][ T6337] loop2: detected capacity change from 0 to 256
[  347.406828][ T6337] exfat: Deprecated parameter 'utf8'
[  347.452189][ T6337] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  347.572027][ T5836] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  347.696924][ T5839] gspca_sunplus: reg_w_riv err -110
[  347.702753][ T5839] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[  348.074366][ T5836] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  348.085993][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.094338][ T5836] usb 4-1: Product: syz
[  348.099825][ T5836] usb 4-1: Manufacturer: syz
[  348.104756][ T5836] usb 4-1: SerialNumber: syz
[  348.208099][ T5836] usb 4-1: config 0 descriptor??
[  348.533574][ T5839] usb 5-1: USB disconnect, device number 2
[  348.778452][ T5836] usb 4-1: Firmware version (0.0) predates our first public release.
[  348.787128][ T5836] usb 4-1: Please update to version 0.2 or newer
[  348.917781][ T5836] usb 4-1: USB disconnect, device number 3
[  349.099574][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.107520][ T6347] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.863644][ T6356] loop4: detected capacity change from 0 to 128
[  349.879735][ T6356] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  350.087783][ T6356] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  350.680994][ T6358] loop0: detected capacity change from 0 to 2048
[  350.884063][ T6366] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  350.913485][ T6367] loop2: detected capacity change from 0 to 1024
[  351.037004][   T29] audit: type=1800 audit(1737254324.676:5): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.145" name="bus" dev="loop0" ino=2097152 res=0 errno=0
[  351.233036][   T50] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  351.547240][ T6374] /dev/loop0: Can't open blockdev
[  351.840476][ T6377] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96
[  352.096656][ T6381] netlink: 11 bytes leftover after parsing attributes in process `syz.3.158'.
[  352.469557][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  352.476525][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  352.505584][ T6387] usb usb4: usbfs: process 6387 (syz.1.159) did not claim interface 0 before use
[  354.175396][ T6406] bridge_slave_0: left allmulticast mode
[  354.181920][ T6406] bridge_slave_0: left promiscuous mode
[  354.190628][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.069972][ T6416] loop1: detected capacity change from 0 to 1024
[  355.253457][ T6419] loop3: detected capacity change from 0 to 512
[  355.353592][ T6419] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  355.490344][ T6423] loop2: detected capacity change from 0 to 1024
[  355.534317][ T6419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.548717][ T6419] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.904854][ T6428] loop4: detected capacity change from 0 to 2048
[  356.351320][ T6428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.497626][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.519079][ T6439] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  357.339606][ T6445] loop3: detected capacity change from 0 to 256
[  357.711464][ T6445] exFAT-fs (loop3): failed to load alloc-bitmap
[  357.720221][ T6445] exFAT-fs (loop3): failed to recognize exfat type
[  357.890276][ T5789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.908593][ T6443] loop0: detected capacity change from 0 to 40427
[  358.065382][ T6443] F2FS-fs (loop0): invalid crc value
[  358.129539][ T6423] EXT4-fs: Ignoring removed orlov option
[  358.149649][ T6443] F2FS-fs (loop0): Found nat_bits in checkpoint
[  358.340008][ T6423] EXT4-fs (loop2): Test dummy encryption mode enabled
[  358.440144][ T6423] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  358.440442][ T6423] EXT4-fs: failed to create workqueue
[  358.456827][ T6423] EXT4-fs (loop2): mount failed
[  358.603700][ T6443] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  358.806679][ T3017] kworker/u8:9: attempt to access beyond end of device
[  358.806679][ T3017] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  358.821509][ T3017] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  359.736137][ T5839] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  360.378320][ T5839] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  360.389149][ T5839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  360.503152][ T5839] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  360.513013][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  360.521634][ T5839] usb 3-1: SerialNumber: syz
[  360.814354][ T5839] usb 3-1: 0:2 : does not exist
[  361.037521][ T5839] usb 3-1: USB disconnect, device number 5
[  362.191387][ T6487] loop1: detected capacity change from 0 to 128
[  362.224409][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  362.279442][ T6487] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  362.496237][ T6487] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  362.956697][ T6500] loop2: detected capacity change from 0 to 512
[  362.964145][ T5839] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  362.996301][ T6500] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  363.067627][ T6500] EXT4-fs (loop2): 1 truncate cleaned up
[  363.075485][ T6500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  363.126135][ T5839] usb 5-1: Using ep0 maxpacket: 16
[  363.161149][ T5839] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  363.173023][ T5839] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  363.183386][ T5839] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  363.217091][ T5839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  363.229399][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  363.245444][ T5839] usb 5-1: SerialNumber: syz
[  363.277515][ T6489] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  363.569080][ T3530] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  363.579772][ T5839] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  363.654374][ T5839] usb 5-1: USB disconnect, device number 3
[  363.823419][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.887341][ T5836] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  364.092791][ T5836] usb 1-1: Using ep0 maxpacket: 16
[  364.118334][ T5836] usb 1-1: config 4 has an invalid interface number: 98 but max is 0
[  364.127729][ T5836] usb 1-1: config 4 has no interface number 0
[  364.134167][ T5836] usb 1-1: config 4 interface 98 has no altsetting 0
[  364.338848][ T5836] usb 1-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=2e.17
[  364.349197][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.357862][ T5836] usb 1-1: Product: syz
[  364.364273][ T5836] usb 1-1: Manufacturer: syz
[  364.369889][ T5836] usb 1-1: SerialNumber: syz
[  364.404744][ T6509] syz.2.201[6509] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  364.405226][ T6509] syz.2.201[6509] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  364.514931][ T5836] gspca_main: gspca_pac7302-2.14.0 probing 093a:262a
[  364.572924][ T6509] syz.2.201[6509] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  365.701305][ T5839] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  365.709413][ T6499] loop3: detected capacity change from 0 to 32768
[  365.747693][ T6518] loop2: detected capacity change from 0 to 256
[  365.837878][ T5836] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[  365.845262][ T5836] gspca_pac7302 1-1:4.98: probe with driver gspca_pac7302 failed with error -71
[  365.860863][ T6499] read_mapping_page failed!
[  365.866032][ T6499] jfs_mount: Failed to read AGGREGATE_I
[  365.872168][ T6499] Mount JFS Failure: -5
[  365.877988][ T6499] jfs_mount failed w/return code = -5
[  365.981636][ T5836] usb 1-1: USB disconnect, device number 3
[  366.324704][ T5839] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  366.333418][ T5839] usb 5-1: config 0 has no interface number 0
[  366.340139][ T5839] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  366.349857][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.388315][ T6518] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  366.418305][ T5839] usb 5-1: config 0 descriptor??
[  366.442427][ T5839] ums-realtek 5-1:0.6: USB Mass Storage device detected
[  366.762542][ T5839] usb 5-1: USB disconnect, device number 4
[  367.154814][ T6530] loop1: detected capacity change from 0 to 512
[  367.319971][ T6530] EXT4-fs (loop1): 1 truncate cleaned up
[  367.328086][ T6530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.564060][ T6536] loop2: detected capacity change from 0 to 512
[  367.719843][ T6530] EXT4-fs error (device loop1): ext4_add_entry:2444: inode #2: comm syz.1.210: Directory hole found for htree leaf block 0
[  367.801425][ T6530] EXT4-fs (loop1): Remounting filesystem read-only
[  367.965017][ T6536] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.211: iget: bogus i_mode (0)
[  367.998865][ T6536] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.211: couldn't read orphan inode 17 (err -117)
[  368.077738][ T6536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.543184][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.026847][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.152353][ T6551] loop4: detected capacity change from 0 to 256
[  369.267401][   T29] audit: type=1804 audit(1737254342.936:6): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.216" name="/newroot/44/file1/file0" dev="loop4" ino=1048607 res=1 errno=0
[  370.267929][ T6557] loop4: detected capacity change from 0 to 4096
[  370.330716][ T6557] EXT4-fs: Ignoring removed nobh option
[  370.390795][ T6557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.661211][ T6569] loop2: detected capacity change from 0 to 256
[  370.780372][ T6557] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks
[  370.788430][ T6557] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  370.869792][ T6557] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  371.081333][ T5789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.174666][ T5839] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  372.392851][ T5839] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  372.404028][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  372.415839][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  372.426057][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  372.552197][ T5839] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  372.568793][ T5839] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  372.581671][ T5839] usb 5-1: Manufacturer: syz
[  372.654265][ T6582] loop0: detected capacity change from 0 to 256
[  372.701943][ T5839] usb 5-1: config 0 descriptor??
[  372.967212][   T29] audit: type=1804 audit(1737254346.606:7): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.230" name="/newroot/46/file1/file0" dev="loop0" ino=1048608 res=1 errno=0
[  373.970901][ T6589] loop1: detected capacity change from 0 to 32768
[  374.198814][ T6592] loop2: detected capacity change from 0 to 512
[  374.223877][ T6589] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,norecovery,reconstruct_alloc
[  374.239151][ T6589] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  374.247843][ T6589] bcachefs (loop1): superblock requires following recovery passes to be run:
[  374.247843][ T6589]   check_directory_structure
[  374.263274][ T6589] bcachefs (loop1): Version upgrade required:
[  374.263274][ T6589] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  374.263274][ T6589] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  374.263274][ T6589]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_nlinks,set_fs_needs_rebalance
[  374.383139][ T6589] bcachefs (loop1): dropping and reconstructing all alloc info
[  374.556126][ T6592] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.234: invalid indirect mapped block 4294967295 (level 1)
[  374.656027][ T6592] EXT4-fs (loop2): Remounting filesystem read-only
[  374.662149][ T6589] bcachefs (loop1): accounting_read... done
[  374.677184][ T6589] bcachefs (loop1): alloc_read... done
[  374.683217][ T6589] bcachefs (loop1): stripes_read... done
[  374.689916][ T6589] bcachefs (loop1): snapshots_read... done
[  374.692592][ T6592] EXT4-fs (loop2): 2 truncates cleaned up
[  374.696838][ T6589] bcachefs (loop1): check_allocations...
[  374.707862][ T6592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.763663][ T5839] rc_core: IR keymap rc-hauppauge not found
[  374.770316][ T5839] Registered IR keymap rc-empty
[  374.776389][ T5839] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  374.796705][ T5839] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  374.821319][ T5839] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  374.837839][ T5839] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6
[  374.872840][ T6592] overlayfs: failed to get redirect (-5)
[  375.047221][ T5839] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  375.107724][ T5839] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  375.347153][ T6589]  done
[  375.352888][ T5839] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  375.399469][ T5839] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  375.413762][ T6589] bcachefs (loop1): going read-write
[  375.431573][ T5839] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  375.456531][ T5839] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  375.476234][ T5839] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  375.486121][ T6609] loop3: detected capacity change from 0 to 4096
[  375.498223][ T5839] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  375.500740][ T6609] EXT4-fs: Ignoring removed nobh option
[  375.592146][ T5839] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  375.624379][ T5839] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  375.679144][ T6589] bcachefs (loop1): done starting filesystem
[  375.757176][ T5839] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  375.766762][ T5839] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  375.848898][ T6612] loop4: detected capacity change from 0 to 128
[  375.872817][ T5839] usb 5-1: USB disconnect, device number 5
[  375.902625][ T6612] EXT4-fs: Ignoring removed nobh option
[  375.943546][ T6609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.013066][ T5791] bcachefs (loop1): shutting down
[  376.020355][ T5791] bcachefs (loop1): going read-only
[  376.026070][ T5791] bcachefs (loop1): finished waiting for writes to stop
[  376.072948][ T5791] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11
[  376.079135][ T6612] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  376.087069][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  376.112247][ T6609] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks
[  376.114174][ T6603] =====================================================
[  376.120915][ T6609] EXT4-fs warning (device loop3): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  376.127622][ T6603] BUG: KMSAN: uninit-value in bch2_inode_v3_validate+0x481/0x5a0
[  376.148866][ T6612] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  376.159574][ T6603]  bch2_inode_v3_validate+0x481/0x5a0
[  376.165365][ T6603]  bch2_bkey_val_validate+0x2b5/0x440
[  376.171158][ T6603]  validate_bset_keys+0x1531/0x2080
[  376.177138][ T6603]  validate_bset_for_write+0x142/0x290
[  376.182901][ T6603]  __bch2_btree_node_write+0x53df/0x6830
[  376.188978][ T6603]  bch2_btree_node_write+0xa5/0x2e0
[  376.194532][ T6603]  __btree_node_flush+0x606/0x680
[  376.202997][ T6603]  bch2_btree_node_flush1+0x38/0x60
[  376.210292][ T6603]  journal_flush_pins+0xce6/0x1780
[  376.217131][ T6603]  __bch2_journal_reclaim+0xda8/0x1670
[  376.222879][ T6603]  bch2_journal_reclaim_thread+0x18e/0x760
[  376.230233][ T6603]  kthread+0x3e2/0x540
[  376.234554][ T6603]  ret_from_fork+0x6d/0x90
[  376.242645][ T6603]  ret_from_fork_asm+0x1a/0x30
[  376.249660][ T6603] 
[  376.252140][ T6603] Uninit was stored to memory at:
[  376.258847][ T6603]  bch2_sort_keys_keep_unwritten_whiteouts+0x12d5/0x19d0
[  376.267815][ T6603]  __bch2_btree_node_write+0x3ae8/0x6830
[  376.273787][ T6603]  bch2_btree_node_write+0xa5/0x2e0
[  376.280407][ T6603]  __btree_node_flush+0x606/0x680
[  376.285838][ T6603]  bch2_btree_node_flush1+0x38/0x60
[  376.291329][ T6603]  journal_flush_pins+0xce6/0x1780
[  376.296908][ T6603]  __bch2_journal_reclaim+0xda8/0x1670
[  376.302639][ T6603]  bch2_journal_reclaim_thread+0x18e/0x760
[  376.308844][ T6603]  kthread+0x3e2/0x540
[  376.313144][ T6603]  ret_from_fork+0x6d/0x90
[  376.317909][ T6603]  ret_from_fork_asm+0x1a/0x30
[  376.322981][ T6603] 
[  376.325448][ T6603] Uninit was created at:
[  376.330180][ T6603]  ___kmalloc_large_node+0x22c/0x370
[  376.335869][ T6603]  __kmalloc_large_node_noprof+0x3f/0x1e0
[  376.344292][ T6603]  __kmalloc_node_noprof+0xc96/0x1250
[  376.350723][ T6603]  __kvmalloc_node_noprof+0xc0/0x2d0
[  376.353450][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  376.356411][ T6603]  btree_node_sort+0x78a/0x1d30
[  376.366547][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  376.371154][ T6603]  bch2_btree_post_write_cleanup+0x1b0/0xf20
[  376.387623][ T6603]  bch2_btree_node_write+0x21c/0x2e0
[  376.393225][ T6603]  __btree_node_flush+0x606/0x680
[  376.398664][ T6603]  bch2_btree_node_flush0+0x35/0x60
[  376.404140][ T6603]  journal_flush_pins+0xce6/0x1780
[  376.409616][ T6603]  __bch2_journal_reclaim+0xda8/0x1670
[  376.415329][ T6603]  bch2_journal_reclaim_thread+0x18e/0x760
[  376.422133][ T6603]  kthread+0x3e2/0x540
[  376.426573][ T6603]  ret_from_fork+0x6d/0x90
[  376.431254][ T6603]  ret_from_fork_asm+0x1a/0x30
[  376.436437][ T6603] 
[  376.438933][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: bch-reclaim/loo Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[  376.453210][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  376.464227][ T6603] =====================================================
[  376.471429][ T6603] Disabling lock debugging due to kernel taint
[  376.478442][ T6603] Kernel panic - not syncing: kmsan.panic set ...
[  376.485067][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: bch-reclaim/loo Tainted: G    B              6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[  376.497951][ T6603] Tainted: [B]=BAD_PAGE
[  376.502274][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  376.512549][ T6603] Call Trace:
[  376.516010][ T6603]  <TASK>
[  376.519114][ T6603]  dump_stack_lvl+0x216/0x2d0
[  376.524079][ T6603]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  376.530168][ T6603]  dump_stack+0x1e/0x24
[  376.534610][ T6603]  panic+0x4e2/0xcf0
[  376.538833][ T6603]  ? kmsan_get_metadata+0x111/0x1c0
[  376.544321][ T6603]  kmsan_report+0x2c7/0x2d0
[  376.549078][ T6603]  ? kmsan_get_metadata+0x13e/0x1c0
[  376.554536][ T6603]  ? kmsan_get_metadata+0x13e/0x1c0
[  376.559989][ T6603]  ? __msan_warning+0x95/0x120
[  376.565075][ T6603]  ? bch2_inode_v3_validate+0x481/0x5a0
[  376.570923][ T6603]  ? bch2_bkey_val_validate+0x2b5/0x440
[  376.576784][ T6603]  ? validate_bset_keys+0x1531/0x2080
[  376.582477][ T6603]  ? validate_bset_for_write+0x142/0x290
[  376.588450][ T6603]  ? __bch2_btree_node_write+0x53df/0x6830
[  376.594584][ T6603]  ? bch2_btree_node_write+0xa5/0x2e0
[  376.600264][ T6603]  ? __btree_node_flush+0x606/0x680
[  376.605749][ T6603]  ? bch2_btree_node_flush1+0x38/0x60
[  376.611399][ T6603]  ? journal_flush_pins+0xce6/0x1780
[  376.616964][ T6603]  ? __bch2_journal_reclaim+0xda8/0x1670
[  376.622866][ T6603]  ? bch2_journal_reclaim_thread+0x18e/0x760
[  376.629133][ T6603]  ? kthread+0x3e2/0x540
[  376.633629][ T6603]  ? ret_from_fork+0x6d/0x90
[  376.638477][ T6603]  ? ret_from_fork_asm+0x1a/0x30
[  376.643747][ T6603]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  376.649818][ T6603]  ? kmsan_get_metadata+0x13e/0x1c0
[  376.655270][ T6603]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  376.661924][ T6603]  ? kmsan_get_metadata+0x13e/0x1c0
[  376.667391][ T6603]  ? kmsan_get_metadata+0x13e/0x1c0
[  376.672848][ T6603]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  376.678931][ T6603]  ? kmsan_get_metadata+0x13e/0x1c0
[  376.684390][ T6603]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  376.690473][ T6603]  ? kmsan_get_metadata+0x13e/0x1c0
[  376.695941][ T6603]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  376.702035][ T6603]  __msan_warning+0x95/0x120
[  376.706933][ T6603]  bch2_inode_v3_validate+0x481/0x5a0
[  376.712634][ T6603]  ? __pfx_bch2_inode_v3_validate+0x10/0x10
[  376.718844][ T6603]  bch2_bkey_val_validate+0x2b5/0x440
[  376.724576][ T6603]  validate_bset_keys+0x1531/0x2080
[  376.730175][ T6603]  validate_bset_for_write+0x142/0x290
[  376.735968][ T6603]  __bch2_btree_node_write+0x53df/0x6830
[  376.741958][ T6603]  ? __update_load_avg_se+0x179/0x11a0
[  376.747814][ T6603]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  376.753963][ T6603]  bch2_btree_node_write+0xa5/0x2e0
[  376.759484][ T6603]  __btree_node_flush+0x606/0x680
[  376.764768][ T6603]  ? __btree_node_flush+0xd3/0x680
[  376.770183][ T6603]  ? __pfx_bch2_btree_node_flush1+0x10/0x10
[  376.776380][ T6603]  bch2_btree_node_flush1+0x38/0x60
[  376.781878][ T6603]  journal_flush_pins+0xce6/0x1780
[  376.787322][ T6603]  __bch2_journal_reclaim+0xda8/0x1670
[  376.793074][ T6603]  ? __try_to_del_timer_sync+0x3d3/0x420
[  376.799064][ T6603]  bch2_journal_reclaim_thread+0x18e/0x760
[  376.805189][ T6603]  kthread+0x3e2/0x540
[  376.809514][ T6603]  ? __pfx_bch2_journal_reclaim_thread+0x10/0x10
[  376.816140][ T6603]  ? __pfx_kthread+0x10/0x10
[  376.821001][ T6603]  ret_from_fork+0x6d/0x90
[  376.825733][ T6603]  ? __pfx_kthread+0x10/0x10
[  376.830611][ T6603]  ret_from_fork_asm+0x1a/0x30
[  376.835691][ T6603]  </TASK>
[  376.839316][ T6603] Kernel Offset: disabled
[  376.843757][ T6603] Rebooting in 86400 seconds..