last executing test programs:

36.227027612s ago: executing program 5 (id=560):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd701004000000050000000600010005b60000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

36.028763571s ago: executing program 5 (id=563):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mq_unlink(0x0)
mkdir(0x0, 0xa0)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0})
add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0)

30.159297583s ago: executing program 5 (id=572):
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0xb8)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r3, 0xffffffffffffffff, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r5 = socket$inet6(0xa, 0x2, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000280), &(0x7f0000000300)=@v1={0x2, "ff08505ac0d3"}, 0x7, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20)
sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)}, 0x0)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

28.121752017s ago: executing program 5 (id=577):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f00000004c0), 0xfd, 0x260, &(0x7f0000000980)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000002, 0x8005, 0x0, 0x0, 0xd, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, 0x0, 0x0)

27.058976244s ago: executing program 5 (id=580):
socket(0x1e, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r2, 0x5407, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000)
sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c)

25.200085764s ago: executing program 5 (id=584):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x8000, 0x0, 0xfff, 0x9, 0x8, 0x3, 0x3}, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0x8, &(0x7f0000000000))
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480))
getpid()
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)

24.295117638s ago: executing program 32 (id=584):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x8000, 0x0, 0xfff, 0x9, 0x8, 0x3, 0x3}, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0x8, &(0x7f0000000000))
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480))
getpid()
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)

15.098913525s ago: executing program 4 (id=608):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x4001, &(0x7f0000000680)={[{@gquota}, {@nolargeio}, {@uqnoenforce}, {@noalign}, {@nogrpid}]}, 0x5, 0x97d9, &(0x7f000001c700)="$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")
setuid(0xee00)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0)

12.133709973s ago: executing program 2 (id=613):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd701004000000050000000600010005b60000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

12.01505619s ago: executing program 0 (id=614):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000140)=0x27a8dfd3, 0x4)

11.952302397s ago: executing program 2 (id=615):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48)

11.65482776s ago: executing program 2 (id=617):
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_uring_setup(0xaae, 0x0)
mremap(&(0x7f000055a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000003000/0x1000)=nil)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000205000/0x3000)=nil, 0x6ffffffc, 0x0, 0x0, 0x201, 0x12, 0x0, 0x7})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)})
pipe2(&(0x7f0000000000)={<r1=>0x0, <r2=>0x0}, 0x0)
tee(r1, r0, 0x100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1}, 0x94)
vmsplice(r2, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x19}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0xddb, 0x0, 0x8}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)

11.640381292s ago: executing program 3 (id=618):
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x1}, &(0x7f0000000000), &(0x7f0000000080))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
landlock_create_ruleset(&(0x7f0000000180)={0x4642, 0x3, 0x2}, 0x18, 0x0)
syz_pidfd_open(0x0, 0x0)
mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3})

11.335783066s ago: executing program 4 (id=619):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20040840}, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'batadv_slave_1\x00', 0x45})
socket$isdn_base(0x22, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
r9 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r10=>0x0, &(0x7f0000000200)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1})
io_uring_enter(r9, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)

10.704553151s ago: executing program 0 (id=620):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0)

10.56496894s ago: executing program 3 (id=621):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
writev(r1, &(0x7f00000014c0)=[{&(0x7f0000000200)}], 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x44442, 0x104)
pwrite64(r2, 0x0, 0x0, 0xfece)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)

10.298079033s ago: executing program 4 (id=623):
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x800)

9.434849169s ago: executing program 0 (id=624):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x210004, &(0x7f00000002c0)=ANY=[@ANYBLOB='nointegrity,errors=continue,nodiscard,quota,quota,iocharset=maccenteuro,usrquota,usrquota,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c00aedd58953f0c5af6b9a68b0e78905ba541a4136c1db0c97add6e6185d4e044f01ed179b8404fd065301f8fe76fbf5fe19a9661581c6ad99ac971b3a3b817948e9fbeb0e1e4f6c5c8863869bbe44c8d9fbadeab256dec893e94612eb2c713c963b1a763678d1725d6f7c60d78"], 0x3, 0x62e5, &(0x7f000000cc80)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

9.327931214s ago: executing program 3 (id=625):
socket$nl_route(0x10, 0x3, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/48, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2})
syz_open_dev$vim2m(0x0, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, 0x0)

9.296598278s ago: executing program 4 (id=626):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x7}}}, 0x24}}, 0x0)

8.227837452s ago: executing program 1 (id=628):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10003}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x5008020, &(0x7f0000000000)=ANY=[@ANYBLOB="668ef13754da641d", @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000000100'], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='GPL\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

6.074390332s ago: executing program 3 (id=629):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0x5d0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'xfrm0\x00', 0x7101})
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
socket(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r6, 0x1, 0xffffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x620b}, 0x0)

6.065439112s ago: executing program 0 (id=630):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000007c0)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8no}, {@numtail}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlateno}]}, 0x2a, 0x34c, &(0x7f0000000400)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
getdents(r0, 0x0, 0x0)

5.808117593s ago: executing program 4 (id=631):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x47a200, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
syz_emit_ethernet(0x83, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000001d80), 0x47, 0x101201)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$usbfs(0x0, 0x400000001ff, 0x101381)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x289}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x77e, 0x0, 0x0, 0x0)

5.70488374s ago: executing program 1 (id=632):
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x1}, &(0x7f0000000000), &(0x7f0000000080))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
landlock_create_ruleset(&(0x7f0000000180)={0x4642, 0x3, 0x2}, 0x18, 0x0)
syz_pidfd_open(0x0, 0x0)
mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3})

4.930868547s ago: executing program 3 (id=633):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
io_submit(0x0, 0x0, 0x0)
r3 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000100)=0x9)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x11041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

4.590900534s ago: executing program 1 (id=634):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r2, &(0x7f00000000c0)=""/57, 0x39, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0)

3.348485201s ago: executing program 3 (id=635):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000240)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000003c0)=@buf)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0)
openat$comedi(0xffffff9c, 0x0, 0xa400, 0x0)

2.930820242s ago: executing program 1 (id=636):
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x4d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0xc000)
r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x68, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xbe, @link='syz0\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
pwritev2(r0, 0x0, 0x0, 0x2000, 0x0, 0x3)

2.025197489s ago: executing program 0 (id=637):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x8000)

1.934551058s ago: executing program 1 (id=638):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0xffffffff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x3, 0x3, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x4008cc0)
setxattr$security_ima(0x0, &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0)

1.895030615s ago: executing program 2 (id=639):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd701004000000050000000600010005b60000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

1.476623706s ago: executing program 2 (id=640):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000000)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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")
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x705, 0xfffffffffffffffb)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES32, @ANYBLOB="00000000000000000c001a8008000580040002"], 0x2c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000022c0)={&(0x7f0000002300)=ANY=[@ANYBLOB], &(0x7f00000020c0)=""/2, 0x2a, 0x2, 0x1, 0x1}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)

1.448116647s ago: executing program 0 (id=641):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xf2, 0x6, 0xa2b9, 0x6, 0x4000007, 0xe4, 0x9, 0x3000000, 0xfffff800, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x6, 0x12a3, 0x6, 0xa, 0x2, 0xa, 0x7, 0x81, 0x8a, 0x2, 0x558e0d31, 0x4, 0x0, 0x91, 0x5, 0x4, 0x7, 0x2, 0x8005, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x5, 0xc66, 0xa8a9, 0x73, 0x8e, 0xffff, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0xffffffff, 0x54f5bad8, 0x8000008, 0xfffffffd, 0x3fd, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x138, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x5fff, 0x8, 0x1cb, 0x0, 0x1, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x7, 0x2e6bf783, 0x7ffffffe, 0xb, 0x1, 0x491, 0x2, 0x6, 0x8, 0x3ff, 0xffffffff, 0x402, 0x40, 0x8, 0x3, 0x7, 0x5, 0x0, 0x2, 0x9, 0x0, 0x3, 0x9, 0x3, 0x800000c7, 0xffe, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x803, 0x60a2, 0x17fc, 0x9d2a, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x4, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff3, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x8, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x4, 0x8001, 0x7fff, 0x1000, 0x8, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x5, 0xfffffff6, 0x9, 0x4, 0x463f, 0xffff, 0xdab, 0x1, 0x8, 0x9, 0x1, 0x1b18]}, 0x45c)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_open_dev$swradio(0x0, 0x0, 0x2)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
writev(0xffffffffffffffff, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.184731644s ago: executing program 1 (id=642):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3M9rHGUfAPDvTJO2b5v33bzgQTwJFSvUTtJU7UmIeC4U+gfUsJmEkEk2ZDe1iQFbDx4EQUXwRy/6H3hRBC+l/4MieFPwIGhN40HwsLKT3a1ud9PYJl2onw/Mzvd5Zme+zzc7PGRgnw3gX+vJ1ksSMRYRFyKi0u5PI+JwGR2NuLrzvttbm9Xtrc1qEs3mxVtJ67Syr3OtpL0/HuUp8XhE3ByNOPXG3Xnr6xuLM0WRr7bbE42llYn6+sbphaWZ+Xw+X56anDx79oWp55+b3Lda337ts1/e+vLlrz8+t/THi7eenU1iuqw7eurYTzt/k9GY7ulfPohkQ9RsNpvDHgMAAPdWKf87jRgp95U4VEYAAADAo6R5pAkAAAA88pIY9ggAAACAg9X5HsDtrc1qZ3uY3z/4+aWIGL+ztni7m3+kXEMccbRcn3BsO/nbyoRk5zR4IFevRcSN6T73f9K+/+5f78r15AGvx/670Zp/pvvNf2l3/ok+889I57cTHlBn/tu+a/67k//QgPnvwh5zHFk9+c3A/Ncinhjplz/p5k8G5H9lj/k/H/vu+0HHmp9GnIz++f+aa5ffh5iYWyjy9mvfHCe+eP3UbvUfG5Q/2b3+lT3W/8P1qflBc0kr/zMndv/8++Vv3RPvtMeRRsS77X2r/V5PjqdvTn60W/2zA+q/1+f/yR7r/+rNjR/3+FYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAopRExFkmadeM0zbKI4xHxWBxLi1q9cWqutrY82zoWMR6j6dxCkU9GRGWnnbTaZ8r4Tnuqp302Iv4fEe9X/lO2s2qtmB128QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHQdj4ixSNIsItKI+K2Splk27FEBAAAA+2582AMAAAAADpznfwAAAHj0ef4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHoIL58+3tub21ma11Z69vL62WLt8ejavL2ZLa9WsWltdyeZrtfkiz6q1pXtdr6jVVs7F8tqViUZeb0zU1zcuLdXWlhuXFpZm5vNL+ehDqQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/aqzckjSLiLSM0zTLIv4bEeMxmswtFPlkRPwvIr6tjB5ptc8Me9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsu/r6xuJMUeSrAoFA0A2GPTMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM9fWNxZmiyFfrwx4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw5X+lEREaztZeWqs9+jh5PdKuY+IV69f/ODKTKOxeqbV/2u3v/Fhu39qGOMHAAAAenWe0zvP8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHtVX99YnCmKfPUAg2HXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3J8/AwAA//9cTs9l")
r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000005c0)={'pcl726\x00', [0x4f27, 0xfffffffc, 0x4, 0x4, 0x3, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x2, 0x7f, 0x3, 0x40000005, 0x8d, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x1000003, 0x100008, 0x4086, 0x0, 0xfffffff8]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x5, 0x7fff, 0x5, 0x7}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, r6}, 0x38)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x6, 0x2b3, &(0x7f00000007c0)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)

898.50273ms ago: executing program 4 (id=643):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x7}}}, 0x24}}, 0x0)

0s ago: executing program 2 (id=644):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x1, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)}], 0x1, &(0x7f0000000b40)=ANY=[], 0x108}}], 0x2, 0x0)

kernel console output (not intermixed with test programs):

em.
[   91.054935][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.074081][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.081079][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.106991][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.141518][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.148459][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.175610][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.225431][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.232635][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.258681][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.270739][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.277675][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.304457][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.351828][ T5862] hsr_slave_0: entered promiscuous mode
[   91.358004][ T5862] hsr_slave_1: entered promiscuous mode
[   91.364502][ T5862] debugfs: 'hsr0' already exists in 'hsr'
[   91.370992][ T5862] Cannot create hsr debugfs directory
[   91.396913][ T5864] hsr_slave_0: entered promiscuous mode
[   91.403367][ T5864] hsr_slave_1: entered promiscuous mode
[   91.409265][ T5864] debugfs: 'hsr0' already exists in 'hsr'
[   91.415166][ T5864] Cannot create hsr debugfs directory
[   91.423894][ T5872] hsr_slave_0: entered promiscuous mode
[   91.430351][ T5872] hsr_slave_1: entered promiscuous mode
[   91.436277][ T5872] debugfs: 'hsr0' already exists in 'hsr'
[   91.442321][ T5872] Cannot create hsr debugfs directory
[   91.484536][ T5866] hsr_slave_0: entered promiscuous mode
[   91.490703][ T5866] hsr_slave_1: entered promiscuous mode
[   91.496626][ T5866] debugfs: 'hsr0' already exists in 'hsr'
[   91.502615][ T5866] Cannot create hsr debugfs directory
[   91.791082][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.817010][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.844735][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.868175][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.898292][ T5863] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   91.922087][ T5863] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   91.931587][ T5863] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   91.942146][ T5863] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   91.983747][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.997101][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.006894][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.022039][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.087128][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.106527][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.116135][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.140168][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.202294][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.212493][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.238720][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.248378][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   92.275673][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.301972][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.348566][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   92.361555][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   92.375642][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.386232][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.395698][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.405826][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.420751][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.427853][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.444826][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.464590][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.471679][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.498424][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.505518][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.514546][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.521631][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.542316][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   92.578338][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.595542][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.614513][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.621596][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.643523][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.650609][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.685236][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   92.756491][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.786410][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.793519][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.812414][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   92.849354][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.856473][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.871554][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.878720][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.918644][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.925763][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.949810][ T5883] Bluetooth: hci3: command tx timeout
[   92.951374][ T5176] Bluetooth: hci2: command tx timeout
[   92.955200][ T5883] Bluetooth: hci0: command tx timeout
[   92.967845][ T5872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.978523][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.030511][ T5883] Bluetooth: hci1: command tx timeout
[   93.031143][ T5880] Bluetooth: hci4: command tx timeout
[   93.035914][ T5883] Bluetooth: hci5: command tx timeout
[   93.108953][ T5866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   93.151193][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.168346][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.217784][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.301468][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.314408][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   93.363878][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.370995][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.431526][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.438615][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.508701][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.536370][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.606938][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.696245][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.718417][ T5872] veth0_vlan: entered promiscuous mode
[   93.733944][ T5862] veth0_vlan: entered promiscuous mode
[   93.766799][ T5872] veth1_vlan: entered promiscuous mode
[   93.779202][ T5862] veth1_vlan: entered promiscuous mode
[   93.841074][ T5872] veth0_macvtap: entered promiscuous mode
[   93.872492][ T5872] veth1_macvtap: entered promiscuous mode
[   93.934475][ T5870] veth0_vlan: entered promiscuous mode
[   93.952157][ T5870] veth1_vlan: entered promiscuous mode
[   93.963201][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.976403][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.985474][ T5866] veth0_vlan: entered promiscuous mode
[   93.998974][ T5862] veth0_macvtap: entered promiscuous mode
[   94.024828][   T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.034050][   T63] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.048912][ T5862] veth1_macvtap: entered promiscuous mode
[   94.062035][   T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.072044][   T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.084303][ T5866] veth1_vlan: entered promiscuous mode
[   94.124501][ T5870] veth0_macvtap: entered promiscuous mode
[   94.136095][ T5870] veth1_macvtap: entered promiscuous mode
[   94.144902][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.153502][ T5863] veth0_vlan: entered promiscuous mode
[   94.169022][ T5866] veth0_macvtap: entered promiscuous mode
[   94.190797][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.204610][ T5866] veth1_macvtap: entered promiscuous mode
[   94.213490][ T3541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.234260][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.241844][ T5863] veth1_vlan: entered promiscuous mode
[   94.251960][ T3541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.261268][ T3541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.272961][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.290292][ T3541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.311823][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.321160][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.330236][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.363963][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.374605][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.396232][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.399747][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.411555][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.413210][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.448613][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.464220][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.489553][ T5863] veth0_macvtap: entered promiscuous mode
[   94.516974][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   94.535967][ T5864] veth0_vlan: entered promiscuous mode
[   94.548383][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.567099][ T5863] veth1_macvtap: entered promiscuous mode
[   94.590785][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.605448][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.647063][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.660254][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.668133][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.690881][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.703567][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.727177][ T5864] veth1_vlan: entered promiscuous mode
[   94.761501][ T1330] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.776932][ T1330] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.803247][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.825975][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.878553][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.888872][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.907264][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.921688][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.029729][ T5883] Bluetooth: hci2: command tx timeout
[   95.107903][ T5880] Bluetooth: hci3: command tx timeout
[   95.113574][ T5880] Bluetooth: hci0: command tx timeout
[   95.119580][ T5880] Bluetooth: hci5: command tx timeout
[   95.125209][ T5880] Bluetooth: hci4: command tx timeout
[   95.131294][ T5176] Bluetooth: hci1: command tx timeout
[   95.388029][ T1330] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.426356][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.433752][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.475985][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.486643][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.515524][   T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   95.565238][ T1330] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.565973][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.579451][ T1330] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.586908][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.601015][ T5864] veth0_macvtap: entered promiscuous mode
[   95.618077][ T1330] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.627197][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.631055][ T1330] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.635864][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.651676][ T1330] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.695777][ T5864] veth1_macvtap: entered promiscuous mode
[   95.703185][   T43] usb 3-1: Using ep0 maxpacket: 8
[   95.719292][   T43] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[   95.736786][   T43] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[   95.747059][   T43] usb 3-1: config 0 has no interface number 0
[   95.876473][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.909888][   T43] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   95.921641][   T43] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   95.933707][   T43] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   95.952654][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.962558][   T43] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[   95.964836][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.986686][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.326456][   T43] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[   96.470519][ T1204] cfg80211: failed to load regulatory.db
[   96.495170][   T43] usb 3-1: Product: syz
[   96.587535][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.603762][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.620664][ T1330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.720169][   T43] usb 3-1: config 0 descriptor??
[   97.235386][ T5876] Bluetooth: hci2: command tx timeout
[   97.235467][ T5883] Bluetooth: hci4: command tx timeout
[   97.241341][ T5876] Bluetooth: hci1: command tx timeout
[   97.246209][ T5880] Bluetooth: hci5: command tx timeout
[   97.246246][ T5880] Bluetooth: hci0: command tx timeout
[   97.251733][ T5176] Bluetooth: hci3: command tx timeout
[   97.258682][ T6012] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   97.303631][ T1330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.321368][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   97.349447][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   97.357742][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   97.429445][ T1330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.433860][ T6027] loop0: detected capacity change from 0 to 512
[   97.469477][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   97.517406][ T6027] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   97.656315][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.830055][ T1160] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   97.830211][ T6035] Zero length message leads to an empty skb
[   97.929872][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.938137][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.947461][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.956811][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.966150][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.970327][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   98.013859][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.069421][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.221902][ T1160] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   98.819804][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.935896][   T43] usb 3-1: USB disconnect, device number 2
[   98.941798][ T1160] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[   98.957680][ T1160] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[   99.020243][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.056387][ T1160] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[   99.078632][ T1160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.199467][ T1160] usb 5-1: Product: syz
[   99.293240][ T1160] usb 5-1: Manufacturer: syz
[  100.926027][ T1160] usb 5-1: SerialNumber: syz
[  100.986095][ T1160] usb 5-1: config 0 descriptor??
[  101.047166][ T1160] usb 5-1: can't set config #0, error -71
[  101.116108][ T1160] usb 5-1: USB disconnect, device number 2
[  103.230832][ T5876] Bluetooth: hci5: unknown advertising packet type: 0x70
[  103.544863][ T6069] ceph: No source
[  103.991955][ T6074] loop4: detected capacity change from 0 to 256
[  104.036118][ T6074] vfat: Deprecated parameter 'posix'
[  104.172280][ T6074] FAT-fs: "posix" option is obsolete, not supported now
[  106.192110][ T6095] loop2: detected capacity change from 0 to 64
[  107.062318][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.069812][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.279543][ T1160] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  107.693652][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.705288][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.999504][ T1160] usb 4-1: Using ep0 maxpacket: 8
[  108.006395][ T1160] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  108.023161][ T1160] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  108.043824][ T1160] usb 4-1: config 0 has no interface number 0
[  108.051896][ T1160] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  108.550283][ T1160] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  108.562092][ T1160] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  108.652520][ T1160] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  108.744435][ T3576] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.804771][ T1160] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  108.821692][ T3576] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.843566][ T3576] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.857682][ T1160] usb 4-1: Product: syz
[  108.874573][ T1160] usb 4-1: config 0 descriptor??
[  108.974681][ T6100] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  108.986709][ T3576] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.329271][ T1160] usb 4-1: USB disconnect, device number 2
[  109.842560][ T5968] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  110.203999][ T5968] usb 6-1: config 0 has an invalid interface number: 76 but max is 0
[  111.187041][ T5968] usb 6-1: config 0 has no interface number 0
[  111.410548][ T6130] syz.3.29 (6130): drop_caches: 2
[  111.459419][ T5968] usb 6-1: config 0 interface 76 has no altsetting 0
[  111.461318][ T5968] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=e6.39
[  111.498519][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.519401][ T5968] usb 6-1: Product: syz
[  111.523610][ T5968] usb 6-1: Manufacturer: syz
[  111.528200][ T5968] usb 6-1: SerialNumber: syz
[  111.699512][ T6126] loop2: detected capacity change from 0 to 4096
[  111.707202][ T6126] =======================================================
[  111.707202][ T6126] WARNING: The mand mount option has been deprecated and
[  111.707202][ T6126]          and is ignored by this kernel. Remove the mand
[  111.707202][ T6126]          option from the mount to silence this warning.
[  111.707202][ T6126] =======================================================
[  112.335150][ T5968] usb 6-1: config 0 descriptor??
[  112.542598][ T5968] usb 6-1: can't set config #0, error -71
[  112.693611][ T6138] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.949310][ T6143] warning: `syz.1.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  113.057636][ T6143] loop1: detected capacity change from 0 to 1024
[  113.726722][ T5968] usb 6-1: USB disconnect, device number 2
[  115.095456][ T6143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.486442][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.823770][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'.
[  117.071929][ T6170] loop5: detected capacity change from 0 to 64
[  117.109043][ T6172] loop4: detected capacity change from 0 to 64
[  117.987320][ T5932] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  118.627817][ T6184] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  118.649025][ T6184] ubi31: attaching mtd0
[  118.661296][ T6184] ubi31: scanning is finished
[  118.666385][ T6184] ubi31: empty MTD device detected
[  119.079405][ T5932] usb 3-1: Using ep0 maxpacket: 32
[  119.117910][ T5932] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  120.917630][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.943283][ T6184] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  122.171283][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'.
[  123.167189][ T5932] usb 3-1: Product: syz
[  123.188819][ T5932] usb 3-1: Manufacturer: syz
[  123.559423][ T5932] usb 3-1: SerialNumber: syz
[  123.605620][ T5932] usb 3-1: config 0 descriptor??
[  123.834911][ T5932] usb 3-1: can't set config #0, error -71
[  123.985444][ T5932] usb 3-1: USB disconnect, device number 3
[  124.957946][ T6238] lo speed is unknown, defaulting to 1000
[  124.964431][ T6238] lo speed is unknown, defaulting to 1000
[  124.973338][ T6238] lo speed is unknown, defaulting to 1000
[  124.993339][ T6238] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  125.033877][ T6238] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98
[  125.179521][ T6238] lo speed is unknown, defaulting to 1000
[  125.186721][ T6238] lo speed is unknown, defaulting to 1000
[  125.193224][ T6238] lo speed is unknown, defaulting to 1000
[  125.199672][ T6238] lo speed is unknown, defaulting to 1000
[  125.206086][ T6238] lo speed is unknown, defaulting to 1000
[  125.212500][ T6238] lo speed is unknown, defaulting to 1000
[  125.218898][ T6238] lo speed is unknown, defaulting to 1000
[  126.879408][ T5932] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  126.902065][ T6245] loop0: detected capacity change from 0 to 64
[  129.156208][ T6261] vivid-007: =================  START STATUS  =================
[  129.163908][ T6261] vivid-007: Generate PTS: true
[  129.168866][ T6261] vivid-007: Generate SCR: true
[  129.173838][ T6261] tpg source WxH: 320x240 (Y'CbCr)
[  129.178991][ T6261] tpg field: 1
[  129.182496][ T6261] tpg crop: (0,0)/320x240
[  129.186861][ T6261] tpg compose: (0,0)/320x240
[  129.191548][ T6261] tpg colorspace: 8
[  129.195366][ T6261] tpg transfer function: 0/0
[  129.200002][ T6261] tpg Y'CbCr encoding: 0/0
[  129.204434][ T6261] tpg quantization: 0/0
[  129.208600][ T6261] tpg RGB range: 0/2
[  129.212563][ T6261] vivid-007: ==================  END STATUS  ==================
[  131.285096][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'.
[  132.194883][ T6283] loop0: detected capacity change from 0 to 4096
[  132.249539][ T6290] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  132.429467][ T5968] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  132.555982][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.67'.
[  133.158407][ T5968] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  133.180436][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.221995][ T6298] loop4: detected capacity change from 0 to 64
[  133.230300][ T5968] usb 3-1: config 0 descriptor??
[  133.374963][ T6300] loop1: detected capacity change from 0 to 512
[  133.394797][ T5968] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  133.925952][ T5968] gp8psk: usb in 128 operation failed.
[  133.955142][ T6300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.179525][ T6300] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.190463][ T5968] gp8psk: usb in 146 operation failed.
[  134.199869][ T5968] gp8psk: failed to get FW version
[  134.221225][ T5968] gp8psk: FPGA Version = 248
[  134.579530][ T5968] gp8psk: usb in 138 operation failed.
[  134.585025][ T5968] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  134.595397][ T5968] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  134.605878][ T5968] usb 3-1: USB disconnect, device number 5
[  134.935829][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.380478][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'.
[  135.437899][ T6322] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  135.468937][ T6324] vivid-007: =================  START STATUS  =================
[  135.476599][ T6324] vivid-007: Generate PTS: true
[  135.481514][ T6324] vivid-007: Generate SCR: true
[  135.486362][ T6324] tpg source WxH: 320x240 (Y'CbCr)
[  135.491550][ T6324] tpg field: 1
[  135.494905][ T6324] tpg crop: (0,0)/320x240
[  135.499221][ T6324] tpg compose: (0,0)/320x240
[  135.503837][ T6324] tpg colorspace: 8
[  135.507621][ T6324] tpg transfer function: 0/0
[  135.512247][ T6324] tpg Y'CbCr encoding: 0/0
[  135.516640][ T6324] tpg quantization: 0/0
[  135.520819][ T6324] tpg RGB range: 0/2
[  135.524694][ T6324] vivid-007: ==================  END STATUS  ==================
[  135.861739][ T6331] loop2: detected capacity change from 0 to 64
[  136.068859][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'.
[  137.119809][ T6342] loop5: detected capacity change from 0 to 4096
[  137.147126][ T6343] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  137.493966][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.85'.
[  138.459555][ T6338] netlink: 'syz.4.84': attribute type 14 has an invalid length.
[  139.002091][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'.
[  139.753549][ T6358] loop2: detected capacity change from 0 to 40427
[  139.774779][ T6358] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  139.782644][ T6358] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  139.830817][ T6358] F2FS-fs (loop2): invalid crc value
[  140.000047][ T6358] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  140.033441][ T6358] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  140.040513][ T6358] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  140.650036][   T30] audit: type=1800 audit(1755436113.983:2): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.89" name="file1" dev="loop2" ino=10 res=0 errno=0
[  140.800158][ T6371] loop5: detected capacity change from 0 to 1024
[  141.118188][ T6371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.539063][ T6385] loop3: detected capacity change from 0 to 1024
[  141.747638][ T6385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.761644][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.793098][   T36] kworker/u8:2: attempt to access beyond end of device
[  141.793098][   T36] loop2: rw=1, sector=77824, nr_sectors = 2480 limit=40427
[  141.829861][ T6385] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.014715][   T36] kworker/u8:2: attempt to access beyond end of device
[  142.014715][   T36] loop2: rw=1, sector=80304, nr_sectors = 1616 limit=40427
[  142.519789][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  142.526588][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  142.527692][   T36] kworker/u8:2: attempt to access beyond end of device
[  142.527692][   T36] loop2: rw=1, sector=49152, nr_sectors = 4096 limit=40427
[  142.607023][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.621312][ T6396] loop0: detected capacity change from 0 to 256
[  142.769645][ T6396] vfat: Deprecated parameter 'posix'
[  142.818879][ T6396] FAT-fs: "posix" option is obsolete, not supported now
[  142.957868][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.99'.
[  143.378913][ T6401] loop3: detected capacity change from 0 to 64
[  143.794879][   T36] kworker/u8:2: attempt to access beyond end of device
[  143.794879][   T36] loop2: rw=1, sector=57344, nr_sectors = 12184 limit=40427
[  145.381437][ T6422] loop5: detected capacity change from 0 to 65
[  145.414575][ T6422] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
[  145.599446][ T5960] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  145.869603][ T5960] usb 1-1: Using ep0 maxpacket: 16
[  145.927501][ T6424] QAT: Device 197 not found
[  146.452251][ T5960] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  146.464965][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.523556][ T5960] usb 1-1: Product: syz
[  146.527743][ T5960] usb 1-1: Manufacturer: syz
[  146.551585][ T5960] usb 1-1: SerialNumber: syz
[  146.813136][ T6428] loop5: detected capacity change from 0 to 40427
[  146.826782][ T6428] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  146.834559][ T6428] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  146.847388][ T6428] F2FS-fs (loop5): invalid crc value
[  146.869145][ T5960] usb 1-1: config 0 descriptor??
[  147.141598][ T6428] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  147.221486][ T6428] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  147.228593][ T6428] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  148.389736][ T5960] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110
[  148.407195][   T30] audit: type=1800 audit(1755436121.303:3): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.110" name="file1" dev="loop5" ino=10 res=0 errno=0
[  149.505918][ T5960] usb 1-1: USB disconnect, device number 2
[  149.602899][ T5863] syz-executor: attempt to access beyond end of device
[  149.602899][ T5863] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  149.629274][ T6445] loop4: detected capacity change from 0 to 1024
[  149.649450][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) 
[  149.649497][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  149.649518][ T5863] Call Trace:
[  149.649528][ T5863]  <TASK>
[  149.649541][ T5863]  dump_stack_lvl+0x16c/0x1f0
[  149.649592][ T5863]  f2fs_handle_critical_error+0x624/0x9f0
[  149.649640][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.649683][ T5863]  ? f2fs_build_fault_attr+0x53/0x1f0
[  149.649722][ T5863]  f2fs_write_end_io+0x958/0xcf0
[  149.649767][ T5863]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  149.649809][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.649856][ T5863]  ? rcu_is_watching+0x12/0xc0
[  149.649901][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.649940][ T5863]  ? lock_release+0x201/0x2f0
[  149.649996][ T5863]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  149.650039][ T5863]  bio_endio+0x70d/0x850
[  149.650088][ T5863]  submit_bio_noacct+0x306/0x1eb0
[  149.650129][ T5863]  __submit_merged_bio+0x33c/0x770
[  149.650181][ T5863]  __submit_merged_write_cond+0x319/0x3f0
[  149.650234][ T5863]  f2fs_sync_node_pages+0x1394/0x1620
[  149.650280][ T5863]  ? sync_inode_metadata+0xa4/0xe0
[  149.650332][ T5863]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  149.650394][ T5863]  ? lock_release+0x201/0x2f0
[  149.650447][ T5863]  ? down_write+0x14d/0x200
[  149.650499][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.650543][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.650586][ T5863]  ? up_write+0x1b2/0x520
[  149.650622][ T5863]  block_operations+0x952/0xfe0
[  149.650685][ T5863]  ? __pfx_block_operations+0x10/0x10
[  149.650743][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.650808][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.650859][ T5863]  ? down_write+0x14d/0x200
[  149.650910][ T5863]  ? __pfx_down_write+0x10/0x10
[  149.650963][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.651005][ T5863]  ? rcu_is_watching+0x12/0xc0
[  149.651052][ T5863]  f2fs_write_checkpoint+0x2b8/0x4c60
[  149.651115][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.651158][ T5863]  ? kfree+0x2b4/0x4d0
[  149.651201][ T5863]  ? trace_irq_enable.constprop.0+0xd4/0x120
[  149.651246][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.651288][ T5863]  ? rcu_is_watching+0x12/0xc0
[  149.651331][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.651373][ T5863]  ? kthread_stop+0x273/0x630
[  149.651407][ T5863]  kill_f2fs_super+0x3c2/0x470
[  149.651441][ T5863]  ? __pfx_kill_f2fs_super+0x10/0x10
[  149.651483][ T5863]  deactivate_locked_super+0xc1/0x1a0
[  149.651538][ T5863]  deactivate_super+0xde/0x100
[  149.651589][ T5863]  cleanup_mnt+0x225/0x450
[  149.651644][ T5863]  task_work_run+0x150/0x240
[  149.651682][ T5863]  ? __pfx_task_work_run+0x10/0x10
[  149.651719][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.651763][ T5863]  ? __pfx___x64_sys_umount+0x10/0x10
[  149.651799][ T5863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.651853][ T5863]  exit_to_user_mode_loop+0xeb/0x110
[  149.651891][ T5863]  do_syscall_64+0x3f6/0x4c0
[  149.651941][ T5863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.651976][ T5863] RIP: 0033:0x7f5faa18ff17
[  149.652001][ T5863] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  149.652035][ T5863] RSP: 002b:00007ffffab14048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  149.652068][ T5863] RAX: 0000000000000000 RBX: 00007f5faa211c05 RCX: 00007f5faa18ff17
[  149.652091][ T5863] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffab14100
[  149.652113][ T5863] RBP: 00007ffffab14100 R08: 0000000000000000 R09: 0000000000000000
[  149.652135][ T5863] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffffab15190
[  149.652157][ T5863] R13: 00007f5faa211c05 R14: 00000000000247ee R15: 00007ffffab151d0
[  149.652191][ T5863]  </TASK>
[  149.656208][ T5863] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  149.724207][ T6445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.276801][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.667303][ T6470] syz.1.120 (6470): drop_caches: 2
[  152.304840][ T6458] loop4: detected capacity change from 0 to 32768
[  152.321087][ T6473] loop3: detected capacity change from 0 to 64
[  153.026446][ T6458] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  154.200916][ T6488] ref_ctr increment failed for inode: 0x80 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802ac29580
[  154.349501][ T5913] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  154.368764][ T6488] uprobe: syz.5.114:6488 failed to unregister, leaking uprobe
[  154.657500][ T5913] usb 2-1: Using ep0 maxpacket: 16
[  154.922142][ T5870] ocfs2: Unmounting device (7,4) on (node local)
[  154.973239][ T5913] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  155.007285][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.063281][ T5913] usb 2-1: Product: syz
[  155.075151][ T5913] usb 2-1: Manufacturer: syz
[  155.084529][ T5913] usb 2-1: SerialNumber: syz
[  155.096993][ T5913] usb 2-1: config 0 descriptor??
[  155.121406][ T6510] loop4: detected capacity change from 0 to 1024
[  155.215873][ T6510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.417588][ T6510] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.905758][ T5913] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110
[  155.952525][ T6519] loop3: detected capacity change from 0 to 1024
[  156.859863][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.870120][ T6519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.923433][ T1160] usb 2-1: USB disconnect, device number 2
[  158.551400][   T30] audit: type=1107 audit(1755436132.273:4): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I'
[  160.089389][ T6552] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  160.566306][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.895568][ T6570] overlayfs: missing 'lowerdir'
[  163.502280][ T6578] loop4: detected capacity change from 0 to 40427
[  163.553674][ T6578] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  163.561521][ T6578] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  163.572114][ T6578] F2FS-fs (loop4): invalid crc value
[  164.293690][ T6579] syz.3.149 (6579): drop_caches: 2
[  164.310031][ T6578] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  164.450603][ T6578] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  164.457687][ T6578] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  165.429102][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'.
[  165.981013][   T30] audit: type=1800 audit(1755436138.483:5): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.148" name="file1" dev="loop4" ino=10 res=0 errno=0
[  166.253945][ T6593] kworker/u8:11: attempt to access beyond end of device
[  166.253945][ T6593] loop4: rw=1, sector=77824, nr_sectors = 2048 limit=40427
[  166.487147][ T6593] kworker/u8:11: attempt to access beyond end of device
[  166.487147][ T6593] loop4: rw=1, sector=79872, nr_sectors = 2048 limit=40427
[  166.511042][ T6593] kworker/u8:11: attempt to access beyond end of device
[  166.511042][ T6593] loop4: rw=1, sector=49152, nr_sectors = 2048 limit=40427
[  166.606860][ T6616] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  167.020865][ T6593] kworker/u8:11: attempt to access beyond end of device
[  167.020865][ T6593] loop4: rw=1, sector=51200, nr_sectors = 2048 limit=40427
[  167.098217][ T6593] kworker/u8:11: attempt to access beyond end of device
[  167.098217][ T6593] loop4: rw=1, sector=57344, nr_sectors = 1056 limit=40427
[  167.868115][ T6626] ref_ctr increment failed for inode: 0x9d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880236b2b00
[  169.192886][ T6643] lo speed is unknown, defaulting to 1000
[  169.205270][ T6643] lo speed is unknown, defaulting to 1000
[  169.214336][ T6643] lo speed is unknown, defaulting to 1000
[  169.708020][ T6643] infiniband s
z1: set down
[  169.712563][ T6643] infiniband s
z1: added lo
[  169.719108][ T1160] lo speed is unknown, defaulting to 1000
[  169.765844][ T6643] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  169.766827][ T6643] infiniband s
z1: Couldn't open port 1
[  169.793125][ T6643] RDS/IB: s
z1: added
[  169.797156][ T6643] smc: adding ib device s
z1 with port count 1
[  169.805649][ T6643] smc:    ib device s
z1 port 1 has pnetid 
[  169.812037][ T6643] lo speed is unknown, defaulting to 1000
[  169.892648][ T6643] lo speed is unknown, defaulting to 1000
[  169.974928][ T6643] lo speed is unknown, defaulting to 1000
[  170.054746][ T6643] lo speed is unknown, defaulting to 1000
[  170.125921][ T1160] lo speed is unknown, defaulting to 1000
[  170.141146][ T6643] lo speed is unknown, defaulting to 1000
[  170.221685][ T6643] lo speed is unknown, defaulting to 1000
[  170.645777][ T6650] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  170.895015][ T6656] loop5: detected capacity change from 0 to 64
[  172.505706][ T6669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.168'.
[  172.850246][ T6677] overlayfs: missing 'lowerdir'
[  173.350534][ T6674] loop4: detected capacity change from 0 to 4096
[  173.574439][ T6681] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.854275][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.175'.
[  174.891679][ T6702] rdma_rxe: rxe_newlink: failed to add lo
[  177.184912][ T6722] loop4: detected capacity change from 0 to 1024
[  177.640467][ T6722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.673334][ T6730] loop1: detected capacity change from 0 to 256
[  177.694053][ T6730] vfat: Deprecated parameter 'posix'
[  177.751607][ T6730] FAT-fs: "posix" option is obsolete, not supported now
[  177.870837][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.140913][ T6735] loop1: detected capacity change from 0 to 4096
[  178.227141][ T6742] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  178.534537][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.192'.
[  181.816817][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'.
[  181.956866][ T6748] loop5: detected capacity change from 0 to 32768
[  182.003658][ T6748] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  182.240706][ T6782] loop0: detected capacity change from 0 to 1024
[  182.656695][ T6782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.826445][ T5863] ocfs2: Unmounting device (7,5) on (node local)
[  183.147772][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.244422][ T6807] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  183.253390][ T6807] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  183.733044][ T6803] loop4: detected capacity change from 0 to 4096
[  183.963108][ T6813] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  184.216896][ T6820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.209'.
[  184.801738][ T6835] loop4: detected capacity change from 0 to 64
[  184.964418][ T6837] siw: device registration error -23
[  185.386259][ T6844] loop2: detected capacity change from 0 to 1024
[  185.855560][ T6844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.194526][ T5872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.734404][ T6876] loop5: detected capacity change from 0 to 4096
[  187.801931][ T6881] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.969551][ T5913] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  188.117081][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.5.232'.
[  188.562535][ T5913] usb 1-1: Using ep0 maxpacket: 16
[  188.616233][ T5913] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  188.661466][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.702927][ T5913] usb 1-1: Product: syz
[  188.717509][ T6885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.229'.
[  188.745777][ T5913] usb 1-1: Manufacturer: syz
[  188.990501][ T5913] usb 1-1: SerialNumber: syz
[  189.000019][ T5913] usb 1-1: config 0 descriptor??
[  189.845774][ T5913] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  190.091175][ T5913] usb 1-1: USB disconnect, device number 3
[  190.134845][ T6898] loop5: detected capacity change from 0 to 64
[  191.288153][ T6905] loop2: detected capacity change from 0 to 40427
[  191.321983][ T6905] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  191.329751][ T6905] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  191.349731][ T6905] F2FS-fs (loop2): invalid crc value
[  191.442756][ T6905] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  191.471703][ T6905] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  191.479251][ T6905] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  193.448147][   T30] audit: type=1800 audit(1755436165.653:6): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.239" name="file1" dev="loop2" ino=10 res=0 errno=0
[  193.650896][ T5872] syz-executor: attempt to access beyond end of device
[  193.650896][ T5872] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  193.690714][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) 
[  193.690750][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  193.690771][ T5872] Call Trace:
[  193.690782][ T5872]  <TASK>
[  193.690793][ T5872]  dump_stack_lvl+0x16c/0x1f0
[  193.690850][ T5872]  f2fs_handle_critical_error+0x624/0x9f0
[  193.690900][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.690945][ T5872]  ? f2fs_build_fault_attr+0x53/0x1f0
[  193.690987][ T5872]  f2fs_write_end_io+0x958/0xcf0
[  193.691029][ T5872]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  193.691074][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.691107][ T5872]  ? rcu_is_watching+0x12/0xc0
[  193.691143][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.691174][ T5872]  ? lock_release+0x201/0x2f0
[  193.691218][ T5872]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  193.691252][ T5872]  bio_endio+0x70d/0x850
[  193.691292][ T5872]  submit_bio_noacct+0x306/0x1eb0
[  193.691324][ T5872]  __submit_merged_bio+0x33c/0x770
[  193.691362][ T5872]  __submit_merged_write_cond+0x319/0x3f0
[  193.691402][ T5872]  f2fs_sync_node_pages+0x1394/0x1620
[  193.691437][ T5872]  ? sync_inode_metadata+0xa4/0xe0
[  193.691476][ T5872]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  193.691523][ T5872]  ? lock_release+0x201/0x2f0
[  193.691563][ T5872]  ? down_write+0x14d/0x200
[  193.691601][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.691634][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.691669][ T5872]  ? up_write+0x1b2/0x520
[  193.691696][ T5872]  block_operations+0x952/0xfe0
[  193.691743][ T5872]  ? __pfx_block_operations+0x10/0x10
[  193.691786][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.691843][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.691875][ T5872]  ? down_write+0x14d/0x200
[  193.691913][ T5872]  ? __pfx_down_write+0x10/0x10
[  193.691952][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.691984][ T5872]  ? rcu_is_watching+0x12/0xc0
[  193.692018][ T5872]  f2fs_write_checkpoint+0x2b8/0x4c60
[  193.692071][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.692102][ T5872]  ? kfree+0x2b4/0x4d0
[  193.692135][ T5872]  ? trace_irq_enable.constprop.0+0xd4/0x120
[  193.692168][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.692199][ T5872]  ? rcu_is_watching+0x12/0xc0
[  193.692232][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.692263][ T5872]  ? kthread_stop+0x273/0x630
[  193.692288][ T5872]  kill_f2fs_super+0x3c2/0x470
[  193.692313][ T5872]  ? __pfx_kill_f2fs_super+0x10/0x10
[  193.692345][ T5872]  deactivate_locked_super+0xc1/0x1a0
[  193.692385][ T5872]  deactivate_super+0xde/0x100
[  193.692424][ T5872]  cleanup_mnt+0x225/0x450
[  193.692465][ T5872]  task_work_run+0x150/0x240
[  193.692494][ T5872]  ? __pfx_task_work_run+0x10/0x10
[  193.692521][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.692554][ T5872]  ? __pfx___x64_sys_umount+0x10/0x10
[  193.692579][ T5872]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.692614][ T5872]  exit_to_user_mode_loop+0xeb/0x110
[  193.692642][ T5872]  do_syscall_64+0x3f6/0x4c0
[  193.692680][ T5872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.692706][ T5872] RIP: 0033:0x7f5c2118ff17
[  193.692725][ T5872] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  193.692750][ T5872] RSP: 002b:00007ffca10e2fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  193.692775][ T5872] RAX: 0000000000000000 RBX: 00007f5c21211c05 RCX: 00007f5c2118ff17
[  193.692792][ T5872] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca10e3090
[  193.692808][ T5872] RBP: 00007ffca10e3090 R08: 0000000000000000 R09: 0000000000000000
[  193.692828][ T5872] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca10e4120
[  193.692845][ T5872] R13: 00007f5c21211c05 R14: 000000000002f44b R15: 00007ffca10e4160
[  193.692870][ T5872]  </TASK>
[  194.239951][ T5872] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  196.841694][ T6944] loop1: detected capacity change from 0 to 256
[  196.867230][ T6944] vfat: Deprecated parameter 'posix'
[  196.963133][ T6944] FAT-fs: "posix" option is obsolete, not supported now
[  198.997656][ T6959] loop1: detected capacity change from 0 to 40427
[  199.044009][ T6959] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  199.052363][ T6959] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  199.063386][ T6959] F2FS-fs (loop1): invalid crc value
[  199.079753][ T6966] loop2: detected capacity change from 0 to 64
[  199.113544][ T6959] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  199.239018][ T6959] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  199.246159][ T6959] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  200.082220][ T1160] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  200.089759][   T30] audit: type=1800 audit(1755436173.473:7): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.253" name="file1" dev="loop1" ino=10 res=0 errno=0
[  201.739790][ T5862] syz-executor: attempt to access beyond end of device
[  201.739790][ T5862] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  201.829778][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) 
[  201.829829][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  201.829850][ T5862] Call Trace:
[  201.829860][ T5862]  <TASK>
[  201.829872][ T5862]  dump_stack_lvl+0x16c/0x1f0
[  201.829924][ T5862]  f2fs_handle_critical_error+0x624/0x9f0
[  201.829972][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.830016][ T5862]  ? f2fs_build_fault_attr+0x53/0x1f0
[  201.830058][ T5862]  f2fs_write_end_io+0x958/0xcf0
[  201.830112][ T5862]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  201.830157][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.830200][ T5862]  ? rcu_is_watching+0x12/0xc0
[  201.830249][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.830292][ T5862]  ? lock_release+0x201/0x2f0
[  201.830354][ T5862]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  201.830401][ T5862]  bio_endio+0x70d/0x850
[  201.830454][ T5862]  submit_bio_noacct+0x306/0x1eb0
[  201.830498][ T5862]  __submit_merged_bio+0x33c/0x770
[  201.830548][ T5862]  __submit_merged_write_cond+0x319/0x3f0
[  201.830603][ T5862]  f2fs_sync_node_pages+0x1394/0x1620
[  201.830649][ T5862]  ? sync_inode_metadata+0xa4/0xe0
[  201.830702][ T5862]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  201.830765][ T5862]  ? lock_release+0x201/0x2f0
[  201.830819][ T5862]  ? down_write+0x14d/0x200
[  201.830871][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.830915][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.830958][ T5862]  ? up_write+0x1b2/0x520
[  201.830994][ T5862]  block_operations+0x952/0xfe0
[  201.831056][ T5862]  ? __pfx_block_operations+0x10/0x10
[  201.831120][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.831186][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.831228][ T5862]  ? down_write+0x14d/0x200
[  201.831278][ T5862]  ? __pfx_down_write+0x10/0x10
[  201.831330][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.831372][ T5862]  ? rcu_is_watching+0x12/0xc0
[  201.831418][ T5862]  f2fs_write_checkpoint+0x2b8/0x4c60
[  201.831480][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.831524][ T5862]  ? kfree+0x2b4/0x4d0
[  201.831567][ T5862]  ? trace_irq_enable.constprop.0+0xd4/0x120
[  201.831612][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.831655][ T5862]  ? rcu_is_watching+0x12/0xc0
[  201.831699][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.831742][ T5862]  ? kthread_stop+0x273/0x630
[  201.831776][ T5862]  kill_f2fs_super+0x3c2/0x470
[  201.831810][ T5862]  ? __pfx_kill_f2fs_super+0x10/0x10
[  201.831852][ T5862]  deactivate_locked_super+0xc1/0x1a0
[  201.831907][ T5862]  deactivate_super+0xde/0x100
[  201.831960][ T5862]  cleanup_mnt+0x225/0x450
[  201.832015][ T5862]  task_work_run+0x150/0x240
[  201.832054][ T5862]  ? __pfx_task_work_run+0x10/0x10
[  201.832096][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.832142][ T5862]  ? __pfx___x64_sys_umount+0x10/0x10
[  201.832176][ T5862]  ? srso_alias_return_thunk+0x5/0xfbef5
[  201.832223][ T5862]  exit_to_user_mode_loop+0xeb/0x110
[  201.832261][ T5862]  do_syscall_64+0x3f6/0x4c0
[  201.832312][ T5862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.832348][ T5862] RIP: 0033:0x7f951158ff17
[  201.832374][ T5862] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  201.832408][ T5862] RSP: 002b:00007ffcbdf96418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  201.832442][ T5862] RAX: 0000000000000000 RBX: 00007f9511611c05 RCX: 00007f951158ff17
[  201.832465][ T5862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbdf964d0
[  201.832487][ T5862] RBP: 00007ffcbdf964d0 R08: 0000000000000000 R09: 0000000000000000
[  201.832510][ T5862] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbdf97560
[  201.832532][ T5862] R13: 00007f9511611c05 R14: 000000000003136b R15: 00007ffcbdf975a0
[  201.832566][ T5862]  </TASK>
[  202.309578][ T5862] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  202.322355][ T1160] usb 4-1: Using ep0 maxpacket: 16
[  202.659496][ T6976] loop2: detected capacity change from 0 to 1024
[  202.666903][ T6976] EXT4-fs: Ignoring removed i_version option
[  202.673365][ T6976] EXT4-fs: inline encryption not supported
[  202.759699][ T1160] usb 4-1: device descriptor read/all, error -71
[  202.789068][ T6976] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  202.886441][ T6976] EXT4-fs (loop2): Test dummy encryption mode enabled
[  203.083899][ T6976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.294795][ T6976] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[  203.833354][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  203.839698][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  204.127986][ T5872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.377788][ T6983] loop0: detected capacity change from 0 to 32768
[  204.858231][ T6983] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.260 (6983)
[  205.470645][ T6983] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.533322][ T6983] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  205.600982][ T6983] BTRFS info (device loop0): using free-space-tree
[  206.763900][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'.
[  207.050233][   T63] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  208.540143][ T1160] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  208.909429][ T1160] usb 3-1: Using ep0 maxpacket: 16
[  208.953466][ T1160] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  209.042262][ T1160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.104023][ T1160] usb 3-1: Product: syz
[  209.140433][ T1160] usb 3-1: Manufacturer: syz
[  209.152673][ T1160] usb 3-1: SerialNumber: syz
[  209.171341][ T1160] usb 3-1: config 0 descriptor??
[  209.192555][ T5866] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.770199][ T1160] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  210.081404][ T1160] usb 3-1: USB disconnect, device number 6
[  211.029397][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  211.029709][ T5881] Bluetooth: hci1: command 0x0406 tx timeout
[  211.036135][ T5886] Bluetooth: hci2: command 0x0406 tx timeout
[  211.041998][ T5868] Bluetooth: hci0: command 0x0406 tx timeout
[  211.042039][ T5868] Bluetooth: hci4: command 0x0406 tx timeout
[  211.288697][ T7073] loop5: detected capacity change from 0 to 128
[  211.519934][ T7075] loop0: detected capacity change from 0 to 40427
[  211.569519][ T7075] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  211.577251][ T7075] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  211.586639][ T7075] F2FS-fs (loop0): invalid crc value
[  211.641330][ T7073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  211.651087][ T7075] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  211.659409][ T7073] System zones: 1-3, 19-19, 35-36
[  211.661315][ T7075] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  211.672413][ T7075] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  211.832383][ T7073] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  212.539515][   T30] audit: type=1800 audit(1755436185.663:8): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.279" name="file1" dev="loop0" ino=10 res=0 errno=0
[  212.603072][ T7073] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  212.640794][   T63] kworker/u8:4: attempt to access beyond end of device
[  212.640794][   T63] loop0: rw=1, sector=77824, nr_sectors = 2048 limit=40427
[  212.710606][   T63] kworker/u8:4: attempt to access beyond end of device
[  212.710606][   T63] loop0: rw=1, sector=79872, nr_sectors = 2048 limit=40427
[  212.843722][   T63] kworker/u8:4: attempt to access beyond end of device
[  212.843722][   T63] loop0: rw=1, sector=49152, nr_sectors = 3848 limit=40427
[  212.971302][   T63] kworker/u8:4: attempt to access beyond end of device
[  212.971302][   T63] loop0: rw=1, sector=53000, nr_sectors = 248 limit=40427
[  212.983793][ T5863] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  213.034140][   T63] kworker/u8:4: attempt to access beyond end of device
[  213.034140][   T63] loop0: rw=1, sector=57344, nr_sectors = 896 limit=40427
[  216.397497][ T6009] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  216.559686][ T6009] usb 1-1: Using ep0 maxpacket: 8
[  216.620489][ T6009] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  216.659445][ T6009] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  216.698438][ T6009] usb 1-1: config 0 has no interface number 0
[  216.724269][ T6009] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  216.778682][ T6009] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  216.840425][ T6009] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  216.915990][ T6009] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  216.962821][ T6009] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  216.991018][ T6009] usb 1-1: Product: syz
[  217.012417][ T6009] usb 1-1: config 0 descriptor??
[  217.028154][ T7118] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  217.349237][ T7137] capability: warning: `syz.5.296' uses 32-bit capabilities (legacy support in use)
[  218.184190][ T7136] ref_ctr increment failed for inode: 0x111 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802590a040
[  218.466195][ T6009] usb 1-1: USB disconnect, device number 4
[  218.649165][ T7136] uprobe: syz.4.297:7136 failed to unregister, leaking uprobe
[  218.933167][ T6137] udevd[6137]: setting mode of /dev/bus/usb/001/004 to 020664 failed: No such file or directory
[  218.958441][ T6137] udevd[6137]: setting owner of /dev/bus/usb/001/004 to uid=0, gid=0 failed: No such file or directory
[  220.187191][ T7176] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8
[  220.805019][ T7182] tipc: Started in network mode
[  220.809962][ T7182] tipc: Node identity 4, cluster identity 4711
[  220.816116][ T7182] tipc: Node number set to 4
[  222.603635][ T7200] ref_ctr increment failed for inode: 0x117 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807b650000
[  223.774647][ T7206] loop1: detected capacity change from 0 to 1024
[  223.941479][ T7206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.354626][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.837053][ T7224] overlayfs: missing 'lowerdir'
[  225.706316][ T7227] loop0: detected capacity change from 0 to 32768
[  225.846130][ T7227] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  225.846177][ T7227]   allowing incompatible features above 0.0: (unknown version)
[  225.846198][ T7227]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  225.891429][ T7227] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  225.899724][ T7227] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  225.907867][ T7227] bcachefs (loop0): Version upgrade required:
[  225.907867][ T7227] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  225.907867][ T7227] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  225.907867][ T7227]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  225.982299][ T7227] bcachefs (loop0): dropping and reconstructing all alloc info
[  226.010322][ T7227] bcachefs (loop0): accounting_read...
[  226.019519][   T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  226.053319][ T7227]  done
[  226.056090][ T7227] bcachefs (loop0): alloc_read... done
[  226.062002][ T7227] bcachefs (loop0): snapshots_read... done
[  226.068971][ T7227] bcachefs (loop0): done starting filesystem
[  227.069864][   T43] usb 6-1: Using ep0 maxpacket: 16
[  227.224848][   T43] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  227.266899][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.287610][ T7245] loop1: detected capacity change from 0 to 256
[  227.430511][ T5866] bcachefs (loop0): shutting down
[  227.460695][   T43] usb 6-1: Product: syz
[  227.464938][   T43] usb 6-1: Manufacturer: syz
[  227.469946][   T43] usb 6-1: SerialNumber: syz
[  227.485908][ T7245] FAT-fs (loop1): Directory bread(block 64) failed
[  227.489300][   T43] usb 6-1: config 0 descriptor??
[  227.513799][ T7245] FAT-fs (loop1): Directory bread(block 65) failed
[  227.642183][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'.
[  227.671103][ T7245] FAT-fs (loop1): Directory bread(block 66) failed
[  227.944399][ T7245] FAT-fs (loop1): Directory bread(block 67) failed
[  227.953333][ T7245] FAT-fs (loop1): Directory bread(block 68) failed
[  227.954563][ T5866] bcachefs (loop0): shutdown complete
[  227.959994][ T7245] FAT-fs (loop1): Directory bread(block 69) failed
[  227.973365][ T7245] FAT-fs (loop1): Directory bread(block 70) failed
[  228.019603][ T7245] FAT-fs (loop1): Directory bread(block 71) failed
[  228.026360][ T7245] FAT-fs (loop1): Directory bread(block 72) failed
[  228.284096][   T43] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  228.328196][ T7245] FAT-fs (loop1): Directory bread(block 73) failed
[  228.355989][   T43] usb 6-1: USB disconnect, device number 3
[  228.400074][ T6496] udevd[6496]: setting mode of /dev/bus/usb/006/003 to 020664 failed: No such file or directory
[  228.550015][ T5883] Bluetooth: hci3: command 0x0406 tx timeout
[  228.802313][ T6496] udevd[6496]: setting owner of /dev/bus/usb/006/003 to uid=0, gid=0 failed: No such file or directory
[  231.010376][ T7283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.340'.
[  232.184208][ T7300] loop5: detected capacity change from 0 to 1024
[  232.285957][ T7300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.889726][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.191174][ T1160] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  233.409564][ T1160] usb 6-1: Using ep0 maxpacket: 16
[  233.428417][ T1160] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  233.437577][ T1160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.976042][ T1160] usb 6-1: Product: syz
[  233.984497][ T1160] usb 6-1: Manufacturer: syz
[  233.994341][ T1160] usb 6-1: SerialNumber: syz
[  234.416469][ T1160] usb 6-1: config 0 descriptor??
[  234.911388][ T1160] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  234.948209][ T1160] usb 6-1: USB disconnect, device number 4
[  236.728850][   T30] audit: type=1107 audit(1755436210.453:9): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I'
[  237.807221][ T7354] ref_ctr increment failed for inode: 0x15b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888032ea4b40
[  238.161071][ T7354] uprobe: syz.1.362:7354 failed to unregister, leaking uprobe
[  239.923482][ T7388] capability: warning: `syz.4.373' uses deprecated v2 capabilities in a way that may be insecure
[  240.302079][ T7390] loop4: detected capacity change from 0 to 2048
[  240.397344][ T7377] loop1: detected capacity change from 0 to 32768
[  240.439604][ T7395] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  241.233787][   T30] audit: type=1107 audit(1755436214.613:10): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I'
[  241.246954][ T5960] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  241.437900][ T5960] usb 5-1: Using ep0 maxpacket: 32
[  241.459939][ T5960] usb 5-1: config 0 has an invalid interface number: 74 but max is 1
[  241.472733][ T7377] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  241.481639][ T5960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.492169][ T5960] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  241.503059][ T5960] usb 5-1: config 0 has no interface number 0
[  241.512398][ T5960] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  241.544808][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.571017][ T5960] usb 5-1: Product: syz
[  241.638787][ T7377] XFS (loop1): Ending clean mount
[  241.687656][ T5960] usb 5-1: Manufacturer: syz
[  241.729376][ T5960] usb 5-1: SerialNumber: syz
[  241.775605][ T5960] usb 5-1: config 0 descriptor??
[  242.019373][ T7411] orangefs_mount: mount request failed with -4
[  242.671395][ T5862] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  243.361438][ T7410] loop5: detected capacity change from 0 to 32768
[  243.450766][ T7410] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  243.548392][ T7410] XFS (loop5): Ending clean mount
[  243.981406][ T5960] usb 5-1: USB disconnect, device number 3
[  244.001969][ T7410] XFS (loop5): Quotacheck needed: Please wait.
[  244.009234][ T7395] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  244.021998][ T7395] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  244.043167][ T7395] Remounting filesystem read-only
[  244.052534][ T7410] XFS (loop5): Quotacheck: Done.
[  244.063266][ T5870] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  244.310236][ T7435] loop1: detected capacity change from 0 to 64
[  244.623602][ T5863] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  244.686582][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'.
[  244.727419][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'.
[  246.615901][   T30] audit: type=1107 audit(1755436220.353:11): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I'
[  246.949271][ T7464] ref_ctr increment failed for inode: 0x178 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888032d05600
[  246.970505][ T7441] loop2: detected capacity change from 0 to 32768
[  247.025546][ T7441] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  247.274081][ T7441] OCFS2: ERROR (device loop2): ocfs2_reserve_suballoc_bits: Invalid chain allocator 73
[  247.331556][ T7441] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  247.406586][ T7441] OCFS2: Returning error to the calling process.
[  247.435490][ T7441] (syz.2.383,7441,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5
[  247.462599][ T7441] (syz.2.383,7441,1):ocfs2_reserve_new_metadata_blocks:996 ERROR: status = -5
[  247.546817][ T7441] (syz.2.383,7441,0):ocfs2_reserve_new_metadata_blocks:1019 ERROR: status = -5
[  247.556313][ T7441] (syz.2.383,7441,0):ocfs2_mknod:353 ERROR: status = -5
[  247.564185][ T7441] (syz.2.383,7441,0):ocfs2_mknod:505 ERROR: status = -5
[  247.577182][ T7441] (syz.2.383,7441,0):ocfs2_mkdir:661 ERROR: status = -5
[  247.879061][ T5872] ocfs2: Unmounting device (7,2) on (node local)
[  249.549583][ T7499] loop0: detected capacity change from 0 to 40427
[  249.655469][ T7499] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  249.663960][ T7499] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  249.690059][ T7499] F2FS-fs (loop0): invalid crc value
[  249.776117][ T7499] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  249.789840][ T7499] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  249.796946][ T7499] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  249.984391][ T7506] loop1: detected capacity change from 0 to 256
[  250.497114][ T7506] vfat: Deprecated parameter 'posix'
[  250.518409][ T7506] FAT-fs: "posix" option is obsolete, not supported now
[  250.521400][   T30] audit: type=1800 audit(1755436223.793:12): pid=7509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.399" name="file1" dev="loop0" ino=10 res=0 errno=0
[  250.779185][ T3576] kworker/u8:7: attempt to access beyond end of device
[  250.779185][ T3576] loop0: rw=1, sector=77824, nr_sectors = 2048 limit=40427
[  251.010222][ T3576] kworker/u8:7: attempt to access beyond end of device
[  251.010222][ T3576] loop0: rw=1, sector=79872, nr_sectors = 2048 limit=40427
[  252.113449][ T3576] kworker/u8:7: attempt to access beyond end of device
[  252.113449][ T3576] loop0: rw=1, sector=49152, nr_sectors = 4032 limit=40427
[  252.561602][ T7526] ubi31: attaching mtd0
[  252.573631][ T7526] ubi31: scanning is finished
[  252.987937][ T7526] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  252.995557][ T7526] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  253.002886][ T7526] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  253.009967][ T7526] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  253.017821][ T7526] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  253.024807][ T7526] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  253.032939][ T7526] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 351427461
[  253.042948][ T7526] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  253.562422][ T7528] ubi31: background thread "ubi_bgt31d" started, PID 7528
[  253.797753][ T7534] netlink: 240 bytes leftover after parsing attributes in process `syz.4.408'.
[  254.060548][ T7540] netlink: 'syz.4.408': attribute type 10 has an invalid length.
[  254.089379][ T7540] team0: Port device dummy0 added
[  254.257611][ T7540] netlink: 'syz.4.408': attribute type 10 has an invalid length.
[  254.521998][ T7540] team0: Port device dummy0 removed
[  255.044939][ T7540] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  257.512571][ T7567] loop3: detected capacity change from 0 to 32768
[  257.589381][   T30] audit: type=1107 audit(1755436231.323:13): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I'
[  257.761763][ T7567] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  257.761819][ T7567]   allowing incompatible features above 0.0: (unknown version)
[  257.761840][ T7567]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  257.806354][ T7567] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  257.814699][ T7567] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  257.822895][ T7567] bcachefs (loop3): Version upgrade required:
[  257.822895][ T7567] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  257.822895][ T7567] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  257.822895][ T7567]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  257.896533][ T7567] bcachefs (loop3): dropping and reconstructing all alloc info
[  257.932682][ T7567] bcachefs (loop3): accounting_read... done
[  257.971841][ T7567] bcachefs (loop3): alloc_read... done
[  257.977543][ T7567] bcachefs (loop3): snapshots_read... done
[  257.984225][ T7567] bcachefs (loop3): done starting filesystem
[  259.138849][ T5864] bcachefs (loop3): shutting down
[  259.195147][ T5864] bcachefs (loop3): shutdown complete
[  259.814947][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.423'.
[  260.870122][ T5883] Bluetooth: hci2: command 0x0406 tx timeout
[  261.779368][ T5932] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  262.029981][ T5932] usb 6-1: Using ep0 maxpacket: 16
[  262.062032][ T5932] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  262.183235][ T7610] loop4: detected capacity change from 0 to 32768
[  262.194097][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.299393][ T5932] usb 6-1: Product: syz
[  262.304452][ T5932] usb 6-1: Manufacturer: syz
[  262.321407][ T5932] usb 6-1: SerialNumber: syz
[  262.327551][ T5932] usb 6-1: config 0 descriptor??
[  262.653342][ T5932] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  262.673997][ T5932] usb 6-1: USB disconnect, device number 5
[  262.998830][ T7610] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  262.998865][ T7610]   allowing incompatible features above 0.0: (unknown version)
[  262.998880][ T7610]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  263.273162][ T7610] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  263.342417][ T7610] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  263.536260][ T7639] loop1: detected capacity change from 0 to 32768
[  263.553994][ T7610] bcachefs (loop4): Version upgrade required:
[  263.553994][ T7610] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  263.553994][ T7610] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  263.553994][ T7610]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  263.799776][ T7610] bcachefs (loop4): dropping and reconstructing all alloc info
[  264.020785][ T7610] bcachefs (loop4): accounting_read... done
[  264.043219][ T7610] bcachefs (loop4): alloc_read... done
[  264.088475][ T7610] bcachefs (loop4): snapshots_read... done
[  264.100723][ T7610] bcachefs (loop4): done starting filesystem
[  264.108398][ T7639] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  264.108431][ T7639]   allowing incompatible features above 0.0: (unknown version)
[  264.108446][ T7639]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  264.153003][ T7639] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  264.161237][ T7639] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  264.169382][ T7639] bcachefs (loop1): Version upgrade required:
[  264.169382][ T7639] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  264.169382][ T7639] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  264.169382][ T7639]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  264.243085][ T7639] bcachefs (loop1): dropping and reconstructing all alloc info
[  264.281019][ T7639] bcachefs (loop1): accounting_read... done
[  264.292917][ T7639] bcachefs (loop1): alloc_read... done
[  264.298629][ T7639] bcachefs (loop1): snapshots_read... done
[  264.305254][ T7639] bcachefs (loop1): done starting filesystem
[  264.479009][ T5870] bcachefs (loop4): shutting down
[  264.995988][ T5862] bcachefs (loop1): shutting down
[  265.075360][ T5870] bcachefs (loop4): shutdown complete
[  265.122561][ T5862] bcachefs (loop1): shutdown complete
[  265.281554][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  265.287959][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  266.812385][ T5883] Bluetooth: hci1: command 0x0406 tx timeout
[  270.843125][ T7704] loop4: detected capacity change from 0 to 512
[  270.876240][ T7704] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  270.899664][ T7704] EXT4-fs (loop4): orphan cleanup on readonly fs
[  270.950682][ T7704] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:516: comm syz.4.449: Block bitmap for bg 0 marked uninitialized
[  271.076915][ T7704] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  271.086383][ T7696] loop0: detected capacity change from 0 to 32768
[  271.096953][ T7704] EXT4-fs (loop4): 1 orphan inode deleted
[  271.184885][ T7704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  271.322074][ T7696] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  271.322121][ T7696]   allowing incompatible features above 0.0: (unknown version)
[  271.322141][ T7696]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  271.468712][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.478162][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.540450][ T7696] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  271.574138][ T7696] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  271.614316][ T7696] bcachefs (loop0): Version upgrade required:
[  271.614316][ T7696] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  271.614316][ T7696] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  271.614316][ T7696]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  271.687191][    C1] vkms_vblank_simulate: vblank timer overrun
[  271.727931][ T7696] bcachefs (loop0): dropping and reconstructing all alloc info
[  272.006167][ T7696] bcachefs (loop0): accounting_read... done
[  272.035694][ T7696] bcachefs (loop0): alloc_read... done
[  272.044568][ T7696] bcachefs (loop0): snapshots_read... done
[  272.051296][ T7696] bcachefs (loop0): done starting filesystem
[  273.175578][ T5968] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  273.382391][ T5866] bcachefs (loop0): shutting down
[  273.410081][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.424207][ T5968] usb 2-1: New USB device found, idVendor=809b, idProduct=0110, bcdDevice=bf.ad
[  273.449252][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.466315][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.492658][ T5866] bcachefs (loop0): shutdown complete
[  273.499121][ T5968] usb 2-1: config 0 descriptor??
[  273.822139][   T63] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.832407][ T5960] usb 2-1: USB disconnect, device number 3
[  273.859535][   T63] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.890473][   T63] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.926334][   T63] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.322955][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.438425][ T7739] loop5: detected capacity change from 0 to 256
[  274.590658][ T7739] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  278.101444][ T7759] ubi: mtd0 is already attached to ubi31
[  280.453592][ T7778] loop3: detected capacity change from 0 to 4096
[  280.512439][ T7778] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  284.180910][ T7813] loop4: detected capacity change from 0 to 1024
[  284.412933][ T7791] loop3: detected capacity change from 0 to 32768
[  284.954498][ T7791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.472 (7791)
[  285.015349][ T7813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.057995][ T7791] BTRFS error (device loop3): open_ctree failed: -4
[  285.491053][ T7826] loop1: detected capacity change from 0 to 40427
[  285.510436][ T7826] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  285.518191][ T7826] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  285.542646][ T7826] F2FS-fs (loop1): invalid crc value
[  285.651163][ T7826] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  285.673298][ T7826] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  285.680366][ T7826] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  285.896293][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.549038][   T30] audit: type=1800 audit(1755436515.684:14): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.482" name="file1" dev="loop1" ino=10 res=0 errno=0
[  286.638934][ T7836] loop3: detected capacity change from 0 to 1024
[  286.798087][   T36] kworker/u8:2: attempt to access beyond end of device
[  286.798087][   T36] loop1: rw=1, sector=77824, nr_sectors = 2048 limit=40427
[  286.820183][ T7836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.870585][   T36] kworker/u8:2: attempt to access beyond end of device
[  286.870585][   T36] loop1: rw=1, sector=79872, nr_sectors = 2048 limit=40427
[  286.895056][   T36] kworker/u8:2: attempt to access beyond end of device
[  286.895056][   T36] loop1: rw=1, sector=49152, nr_sectors = 2048 limit=40427
[  286.920682][   T36] kworker/u8:2: attempt to access beyond end of device
[  286.920682][   T36] loop1: rw=1, sector=51200, nr_sectors = 2048 limit=40427
[  286.932952][   T30] audit: type=1800 audit(1755436516.675:15): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.485" name="file1" dev="loop3" ino=15 res=0 errno=0
[  286.986605][   T36] kworker/u8:2: attempt to access beyond end of device
[  286.986605][   T36] loop1: rw=1, sector=57344, nr_sectors = 1064 limit=40427
[  287.019954][ T7836] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4182: comm syz.3.485: Allocating blocks 449-513 which overlap fs metadata
[  287.062302][ T7836] EXT4-fs (loop3): Remounting filesystem read-only
[  287.086235][ T7835] EXT4-fs (loop3): pa ffff8880312c22b8: logic 256, phys. 385, len 8
[  287.886743][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.415191][ T7863] loop4: detected capacity change from 0 to 64
[  289.533280][   T30] audit: type=1800 audit(1755436519.276:16): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.491" name="file1" dev="loop4" ino=8 res=0 errno=0
[  289.640375][   T30] audit: type=1800 audit(1755436519.276:17): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.491" name="file1" dev="loop4" ino=8 res=0 errno=0
[  290.536595][ T7855] loop1: detected capacity change from 0 to 32768
[  290.721919][ T7880] loop5: detected capacity change from 0 to 40427
[  290.746799][ T7880] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  290.754535][ T7880] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  290.766746][ T7880] F2FS-fs (loop5): invalid crc value
[  290.825916][ T7880] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  290.837763][ T7880] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  290.844797][ T7880] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  290.987428][ T7855] XFS: noikeep mount option is deprecated.
[  291.035080][ T7891] loop4: detected capacity change from 0 to 128
[  291.710074][   T30] audit: type=1800 audit(1755436520.857:18): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.497" name="file1" dev="loop5" ino=10 res=0 errno=0
[  291.710593][ T7891] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  291.755200][ T7855] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  291.791225][   T63] kworker/u8:4: attempt to access beyond end of device
[  291.791225][   T63] loop5: rw=1, sector=77824, nr_sectors = 2048 limit=40427
[  291.805876][ T7855] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR
[  291.806147][ T7855] XFS (loop1): log mount failed
[  291.825385][ T7891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.868850][   T63] kworker/u8:4: attempt to access beyond end of device
[  291.868850][   T63] loop5: rw=1, sector=79872, nr_sectors = 2048 limit=40427
[  292.026502][   T30] audit: type=1800 audit(1755436521.787:19): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.499" name="file2" dev="loop4" ino=105 res=0 errno=0
[  292.054365][   T63] kworker/u8:4: attempt to access beyond end of device
[  292.054365][   T63] loop5: rw=1, sector=49152, nr_sectors = 2072 limit=40427
[  292.464515][   T63] kworker/u8:4: attempt to access beyond end of device
[  292.464515][   T63] loop5: rw=1, sector=51224, nr_sectors = 2024 limit=40427
[  292.613606][   T63] kworker/u8:4: attempt to access beyond end of device
[  292.613606][   T63] loop5: rw=1, sector=57344, nr_sectors = 672 limit=40427
[  295.147854][   T30] audit: type=1107 audit(1755436524.909:20): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I'
[  295.822141][ T7940] Bluetooth: MGMT ver 1.23
[  296.478326][ T7953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.516'.
[  296.883855][ T5932] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  297.093668][ T5932] usb 5-1: Using ep0 maxpacket: 8
[  297.152685][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  297.203173][ T5932] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  297.262870][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.314581][ T5932] usb 5-1: config 0 descriptor??
[  297.364154][ T5932] gspca_main: vc032x-2.14.0 probing 046d:0892
[  298.464896][ T7969] infiniband syz!: set down
[  298.469488][ T7969] infiniband syz!: added team_slave_0
[  298.940637][ T7969] RDS/IB: syz!: added
[  298.944987][ T7969] smc: adding ib device syz! with port count 1
[  298.951182][ T7969] smc:    ib device syz! port 1 has pnetid 
[  299.860830][ T7973] siw: device registration error -23
[  300.008422][ T5932] gspca_vc032x: reg_r err -110
[  300.018372][ T5932] vc032x 5-1:0.0: probe with driver vc032x failed with error -110
[  300.263077][ T5932] usb 5-1: USB disconnect, device number 4
[  303.181431][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.527'.
[  303.994501][ T8001] loop2: detected capacity change from 0 to 40427
[  304.389471][ T8001] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  304.397431][ T8001] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  304.408253][ T8001] F2FS-fs (loop2): invalid crc value
[  304.467505][ T8001] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  304.481693][ T8001] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  304.488730][ T8001] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  305.390043][   T30] audit: type=1800 audit(1755436534.523:21): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.529" name="file1" dev="loop2" ino=10 res=0 errno=0
[  305.767859][ T1330] kworker/u8:5: attempt to access beyond end of device
[  305.767859][ T1330] loop2: rw=1, sector=77824, nr_sectors = 2656 limit=40427
[  305.790333][ T1330] kworker/u8:5: attempt to access beyond end of device
[  305.790333][ T1330] loop2: rw=1, sector=80480, nr_sectors = 1440 limit=40427
[  305.874816][ T1330] kworker/u8:5: attempt to access beyond end of device
[  305.874816][ T1330] loop2: rw=1, sector=49152, nr_sectors = 3856 limit=40427
[  305.967562][ T1330] kworker/u8:5: attempt to access beyond end of device
[  305.967562][ T1330] loop2: rw=1, sector=53008, nr_sectors = 240 limit=40427
[  306.157290][ T1330] kworker/u8:5: attempt to access beyond end of device
[  306.157290][ T1330] loop2: rw=1, sector=57344, nr_sectors = 1408 limit=40427
[  306.411666][ T8034] loop5: detected capacity change from 0 to 1024
[  306.418955][ T8034] ext4: Unknown parameter 'smackfstransmute'
[  306.783853][ T8038] loop5: detected capacity change from 0 to 256
[  306.849729][ T8038] vfat: Deprecated parameter 'posix'
[  306.875387][ T8038] FAT-fs: "posix" option is obsolete, not supported now
[  306.879616][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.5.541'.
[  308.231383][ T8036] loop0: detected capacity change from 0 to 32768
[  308.376877][ T8036] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  308.488064][ T8059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.544'.
[  308.954341][ T8052] loop4: detected capacity change from 0 to 2048
[  308.992663][ T8052] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  309.151967][ T8065] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  309.191880][ T8036] XFS (loop0): Ending clean mount
[  309.214158][ T8036] XFS (loop0): Quotacheck needed: Please wait.
[  309.438182][ T8036] XFS (loop0): Quotacheck: Done.
[  310.067592][ T5866] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  310.344313][ T8078] loop2: detected capacity change from 0 to 512
[  310.356242][ T8078] EXT4-fs: Ignoring removed i_version option
[  310.504288][ T8078] EXT4-fs: Ignoring removed bh option
[  310.592676][ T8086] loop1: detected capacity change from 0 to 512
[  310.631012][ T8078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.823901][ T8089] loop0: detected capacity change from 0 to 32768
[  310.891402][ T8078] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  310.903717][ T8086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.940247][ T8078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.949867][ T8086] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  311.014508][ T8089] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  311.014546][ T8089]   allowing incompatible features above 0.0: (unknown version)
[  311.014567][ T8089]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  311.054186][ T8089] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  311.062754][ T8089] bcachefs (loop0): initializing new filesystem
[  311.073883][ T8089] bcachefs (loop0): going read-write
[  311.116698][ T8086] EXT4-fs error (device loop1): ext4_readdir:262: inode #12: block 32: comm syz.1.551: path /85/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  311.197839][ T8089] bcachefs (loop0): marking superblocks
[  311.211297][ T8089] bcachefs (loop0): initializing freespace
[  311.219607][ T8089] bcachefs (loop0): done initializing freespace
[  311.227506][ T8089] bcachefs (loop0): reading snapshots table
[  311.233424][ T8089] bcachefs (loop0): reading snapshots done
[  311.300993][ T8089] bcachefs (loop0): done starting filesystem
[  311.657667][ T8086] EXT4-fs (loop1): Remounting filesystem read-only
[  311.825860][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.158069][ T8089] syz.0.549 (8089) used greatest stack depth: 18296 bytes left
[  312.472574][ T8113] loop1: detected capacity change from 0 to 256
[  312.496940][ T5866] bcachefs (loop0): shutting down
[  312.512289][ T5866] bcachefs (loop0): going read-only
[  312.526968][ T8113] vfat: Deprecated parameter 'posix'
[  312.536255][ T5866] bcachefs (loop0): finished waiting for writes to stop
[  312.545985][ T8113] FAT-fs: "posix" option is obsolete, not supported now
[  312.558671][ T5866] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  312.665963][ T5866] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  312.711558][ T5866] bcachefs (loop0): clean shutdown complete, journal seq 5
[  312.730411][ T8111] loop2: detected capacity change from 0 to 32768
[  312.746357][ T5866] bcachefs (loop0): marking filesystem clean
[  312.828191][ T5866] bcachefs (loop0): shutdown complete
[  312.853028][ T8111] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  313.860214][ T5872] ocfs2: Unmounting device (7,2) on (node local)
[  314.056148][ T8107] loop3: detected capacity change from 0 to 32768
[  314.233914][ T8128] process 'syz.4.562' launched './file0' with NULL argv: empty string added
[  315.215454][ T8107] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop3": -EINTR
[  315.316363][ T8140] loop5: detected capacity change from 0 to 64
[  316.178490][ T8149] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  316.928771][ T8153] loop4: detected capacity change from 0 to 40427
[  317.051917][ T8153] F2FS-fs (loop4): invalid crc value
[  317.238765][ T8153] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  317.251301][ T8153] F2FS-fs (loop4): Start checkpoint disabled!
[  317.263968][ T8153] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  320.341338][ T3576] kworker/u8:7: attempt to access beyond end of device
[  320.341338][ T3576] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  320.404221][ T3576] CPU: 0 UID: 0 PID: 3576 Comm: kworker/u8:7 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) 
[  320.404271][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  320.404294][ T3576] Workqueue: writeback wb_workfn (flush-7:4)
[  320.404354][ T3576] Call Trace:
[  320.404364][ T3576]  <TASK>
[  320.404376][ T3576]  dump_stack_lvl+0x16c/0x1f0
[  320.404426][ T3576]  f2fs_handle_critical_error+0x624/0x9f0
[  320.404476][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.404520][ T3576]  ? f2fs_build_fault_attr+0x53/0x1f0
[  320.404562][ T3576]  f2fs_write_end_io+0x958/0xcf0
[  320.404612][ T3576]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  320.404658][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.404702][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.404750][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.404794][ T3576]  ? lock_release+0x201/0x2f0
[  320.404854][ T3576]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  320.404910][ T3576]  bio_endio+0x70d/0x850
[  320.404962][ T3576]  submit_bio_noacct+0x306/0x1eb0
[  320.405007][ T3576]  __submit_merged_bio+0x33c/0x770
[  320.405058][ T3576]  __submit_merged_write_cond+0x319/0x3f0
[  320.405113][ T3576]  f2fs_write_cache_pages+0x2067/0x2570
[  320.405181][ T3576]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  320.405238][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.405284][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.405331][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.405375][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.405419][ T3576]  ? lock_release+0x201/0x2f0
[  320.405475][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.405519][ T3576]  ? do_raw_spin_unlock+0x172/0x230
[  320.405566][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.405609][ T3576]  ? f2fs_available_free_memory+0x279/0xa30
[  320.405676][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.405721][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.405766][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.405813][ T3576]  f2fs_write_data_pages+0x4ad/0xd90
[  320.405879][ T3576]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  320.405935][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.405984][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.406027][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.406071][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.406114][ T3576]  ? lock_release+0x201/0x2f0
[  320.406170][ T3576]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  320.406229][ T3576]  do_writepages+0x27a/0x600
[  320.406279][ T3576]  ? __pfx_do_writepages+0x10/0x10
[  320.406325][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.406370][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.406413][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.406459][ T3576]  __writeback_single_inode+0x160/0xfb0
[  320.406508][ T3576]  ? lock_release+0x201/0x2f0
[  320.406564][ T3576]  ? __pfx___writeback_single_inode+0x10/0x10
[  320.406613][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.406656][ T3576]  ? do_raw_spin_unlock+0x172/0x230
[  320.406695][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.406742][ T3576]  writeback_sb_inodes+0x60d/0xfa0
[  320.406800][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.406844][ T3576]  ? do_raw_spin_lock+0x12c/0x2b0
[  320.406888][ T3576]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  320.406936][ T3576]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  320.406976][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.407020][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.407064][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.407133][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.407176][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.407221][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.407264][ T3576]  ? queue_io+0x3f6/0x520
[  320.407305][ T3576]  wb_writeback+0x419/0xb70
[  320.407357][ T3576]  ? __pfx_wb_writeback+0x10/0x10
[  320.407406][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.407452][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.407495][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.407543][ T3576]  wb_workfn+0x14d/0xbe0
[  320.407592][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.407636][ T3576]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  320.407681][ T3576]  ? __pfx_wb_workfn+0x10/0x10
[  320.407728][ T3576]  ? __pfx_debug_object_deactivate+0x10/0x10
[  320.407768][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.407812][ T3576]  ? trace_sched_exit_tp+0xd1/0x120
[  320.407853][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.407927][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.407971][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.408015][ T3576]  ? lock_acquire+0x2cd/0x350
[  320.408070][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.408116][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.408158][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.408207][ T3576]  process_one_work+0x9cf/0x1b70
[  320.408252][ T3576]  ? __pfx_wb_workfn+0x10/0x10
[  320.408301][ T3576]  ? __pfx_process_one_work+0x10/0x10
[  320.408340][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.408389][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.408432][ T3576]  ? assign_work+0x1a0/0x250
[  320.408468][ T3576]  worker_thread+0x6c8/0xf10
[  320.408516][ T3576]  ? __pfx_worker_thread+0x10/0x10
[  320.408555][ T3576]  kthread+0x3c5/0x780
[  320.408590][ T3576]  ? __pfx_kthread+0x10/0x10
[  320.408623][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.408667][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.408712][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.408756][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.408801][ T3576]  ? __pfx_kthread+0x10/0x10
[  320.408835][ T3576]  ret_from_fork+0x5d7/0x6f0
[  320.408869][ T3576]  ? __pfx_kthread+0x10/0x10
[  320.408909][ T3576]  ret_from_fork_asm+0x1a/0x30
[  320.408963][ T3576]  </TASK>
[  320.408976][ T3576] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  320.963904][ T3576] CPU: 0 UID: 0 PID: 3576 Comm: kworker/u8:7 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) 
[  320.963954][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  320.963979][ T3576] Workqueue: writeback wb_workfn (flush-7:4)
[  320.964040][ T3576] Call Trace:
[  320.964051][ T3576]  <TASK>
[  320.964063][ T3576]  dump_stack_lvl+0x16c/0x1f0
[  320.964113][ T3576]  f2fs_handle_critical_error+0x624/0x9f0
[  320.964166][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.964211][ T3576]  ? f2fs_build_fault_attr+0x53/0x1f0
[  320.964254][ T3576]  f2fs_write_end_io+0x958/0xcf0
[  320.964304][ T3576]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  320.964351][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.964395][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.964442][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.964484][ T3576]  ? lock_release+0x201/0x2f0
[  320.964543][ T3576]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  320.964578][ T3576]  bio_endio+0x70d/0x850
[  320.964618][ T3576]  submit_bio_noacct+0x306/0x1eb0
[  320.964652][ T3576]  __submit_merged_bio+0x33c/0x770
[  320.964691][ T3576]  __submit_merged_write_cond+0x319/0x3f0
[  320.964733][ T3576]  f2fs_write_cache_pages+0x2067/0x2570
[  320.964786][ T3576]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  320.964827][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.964862][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.964903][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.964936][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.964968][ T3576]  ? lock_release+0x201/0x2f0
[  320.965009][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.965041][ T3576]  ? do_raw_spin_unlock+0x172/0x230
[  320.965077][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.965109][ T3576]  ? f2fs_available_free_memory+0x279/0xa30
[  320.965165][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.965198][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.965231][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.965267][ T3576]  f2fs_write_data_pages+0x4ad/0xd90
[  320.965312][ T3576]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  320.965353][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.965390][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.965422][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.965455][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.965487][ T3576]  ? lock_release+0x201/0x2f0
[  320.965528][ T3576]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  320.965572][ T3576]  do_writepages+0x27a/0x600
[  320.965609][ T3576]  ? __pfx_do_writepages+0x10/0x10
[  320.965643][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.965676][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.965708][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.965743][ T3576]  __writeback_single_inode+0x160/0xfb0
[  320.965779][ T3576]  ? lock_release+0x201/0x2f0
[  320.965820][ T3576]  ? __pfx___writeback_single_inode+0x10/0x10
[  320.965856][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.965891][ T3576]  ? do_raw_spin_unlock+0x172/0x230
[  320.965921][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.965956][ T3576]  writeback_sb_inodes+0x60d/0xfa0
[  320.965998][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.966030][ T3576]  ? do_raw_spin_lock+0x12c/0x2b0
[  320.966058][ T3576]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  320.966093][ T3576]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  320.966123][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.966155][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.966187][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.966244][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.966276][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.966308][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.966341][ T3576]  ? queue_io+0x3f6/0x520
[  320.966372][ T3576]  wb_writeback+0x419/0xb70
[  320.966411][ T3576]  ? __pfx_wb_writeback+0x10/0x10
[  320.966449][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.966483][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.966515][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.966551][ T3576]  wb_workfn+0x14d/0xbe0
[  320.966588][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.966619][ T3576]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  320.966653][ T3576]  ? __pfx_wb_workfn+0x10/0x10
[  320.966689][ T3576]  ? __pfx_debug_object_deactivate+0x10/0x10
[  320.966719][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.966757][ T3576]  ? trace_sched_exit_tp+0xd1/0x120
[  320.966788][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.966819][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.966852][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.966886][ T3576]  ? lock_acquire+0x2cd/0x350
[  320.966926][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.966960][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.966992][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.967027][ T3576]  process_one_work+0x9cf/0x1b70
[  320.967062][ T3576]  ? __pfx_wb_workfn+0x10/0x10
[  320.967098][ T3576]  ? __pfx_process_one_work+0x10/0x10
[  320.967127][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.967164][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.967196][ T3576]  ? assign_work+0x1a0/0x250
[  320.967223][ T3576]  worker_thread+0x6c8/0xf10
[  320.967260][ T3576]  ? __pfx_worker_thread+0x10/0x10
[  320.967289][ T3576]  kthread+0x3c5/0x780
[  320.967315][ T3576]  ? __pfx_kthread+0x10/0x10
[  320.967339][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.967371][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.967404][ T3576]  ? srso_alias_return_thunk+0x5/0xfbef5
[  320.967436][ T3576]  ? rcu_is_watching+0x12/0xc0
[  320.967470][ T3576]  ? __pfx_kthread+0x10/0x10
[  320.967496][ T3576]  ret_from_fork+0x5d7/0x6f0
[  320.967521][ T3576]  ? __pfx_kthread+0x10/0x10
[  320.967547][ T3576]  ret_from_fork_asm+0x1a/0x30
[  320.967590][ T3576]  </TASK>
[  320.967600][ T3576] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  322.062313][ T8170] loop1: detected capacity change from 0 to 32768
[  322.145879][ T8185] loop5: detected capacity change from 0 to 128
[  322.223937][ T8170] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  322.286966][ T8185] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  322.315080][ T8185] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.712448][ T8185] loop5: detected capacity change from 128 to 0
[  322.740199][ T8192] syz.5.577: attempt to access beyond end of device
[  322.740199][ T8192] loop5: rw=12288, sector=8, nr_sectors = 2 limit=0
[  322.794996][ T8192] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.5.577: error -5 reading directory block
[  322.907764][ T8194] loop3: detected capacity change from 0 to 64
[  322.921288][ T5862] ocfs2: Unmounting device (7,1) on (node local)
[  323.016846][ T5863] syz-executor: attempt to access beyond end of device
[  323.016846][ T5863] loop5: rw=12288, sector=8, nr_sectors = 2 limit=0
[  323.457133][ T5863] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  324.126428][ T5863] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  324.804391][ T5863] syz-executor: attempt to access beyond end of device
[  324.804391][ T5863] loop5: rw=145409, sector=2, nr_sectors = 2 limit=0
[  324.833075][ T5863] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  324.852095][ T5863] EXT4-fs (loop5): I/O error while writing superblock
[  326.125860][ T8221] netlink: 148 bytes leftover after parsing attributes in process `syz.0.556'.
[  326.692312][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  327.020556][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  327.306551][ T6595] bridge_slave_1: left allmulticast mode
[  327.335843][ T6595] bridge_slave_1: left promiscuous mode
[  327.352248][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.412802][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  327.420284][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  327.427552][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  327.435864][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  327.446479][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  328.456251][ T6595] bridge_slave_0: left allmulticast mode
[  328.649282][ T6595] bridge_slave_0: left promiscuous mode
[  329.202586][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.481829][ T5883] Bluetooth: hci0: command tx timeout
[  329.596297][ T8244] loop1: detected capacity change from 0 to 4096
[  329.730351][ T6595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  329.734205][ T8244] ntfs3(loop1): ino=19, mi_enum_attr
[  329.800425][ T6595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  329.830165][ T6043] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  329.851276][ T8244] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  329.967252][ T6595] bond0 (unregistering): Released all slaves
[  330.623348][ T8244] ntfs3(loop1): failed to convert "0080" to cp860
[  330.640294][ T8244] ntfs3(loop1): failed to convert name for inode 1e.
[  330.669324][ T8244] ntfs3(loop1): ino=1f, mi_enum_attr
[  330.676467][ T8229] lo speed is unknown, defaulting to 1000
[  330.796841][ T6043] usb 1-1: config 4 has an invalid descriptor of length 115, skipping remainder of the config
[  330.815730][ T6043] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  330.859258][ T8229] lo speed is unknown, defaulting to 1000
[  330.868524][ T6043] usb 1-1: New USB device found, idVendor=1941, idProduct=2255, bcdDevice=92.00
[  330.921095][ T6043] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.578138][ T5883] Bluetooth: hci0: command tx timeout
[  331.615822][ T6043] usb 1-1: Product: syz
[  331.621186][ T6043] usb 1-1: Manufacturer: syz
[  331.629703][ T6043] usb 1-1: SerialNumber: syz
[  331.922485][ T8249] netlink: 72 bytes leftover after parsing attributes in process `syz.0.592'.
[  333.374574][ T8292] loop4: detected capacity change from 0 to 256
[  333.635347][ T5883] Bluetooth: hci0: command tx timeout
[  333.641675][ T8292] FAT-fs (loop4): Directory bread(block 64) failed
[  333.714465][ T8292] FAT-fs (loop4): Directory bread(block 65) failed
[  333.733139][ T8292] FAT-fs (loop4): Directory bread(block 66) failed
[  333.815368][ T8292] FAT-fs (loop4): Directory bread(block 67) failed
[  333.822722][ T8292] FAT-fs (loop4): Directory bread(block 68) failed
[  333.985324][ T8292] FAT-fs (loop4): Directory bread(block 69) failed
[  334.057271][ T8292] FAT-fs (loop4): Directory bread(block 70) failed
[  334.138191][ T8292] FAT-fs (loop4): Directory bread(block 71) failed
[  334.248331][ T8292] FAT-fs (loop4): Directory bread(block 72) failed
[  334.283330][ T6595] hsr_slave_0: left promiscuous mode
[  334.291136][ T8292] FAT-fs (loop4): Directory bread(block 73) failed
[  334.350319][ T6595] hsr_slave_1: left promiscuous mode
[  334.655420][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0
[  334.739438][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.258409][ T6043] usb 1-1: USB disconnect, device number 5
[  335.714360][ T5883] Bluetooth: hci0: command tx timeout
[  337.076204][ T6595] team0 (unregistering): Port device team_slave_1 removed
[  337.348559][ T8327] ubi: mtd0 is already attached to ubi31
[  337.807753][ T8329] loop0: detected capacity change from 0 to 256
[  337.833536][ T6595] team0 (unregistering): Port device team_slave_0 removed
[  337.896752][ T6593] smc: removing ib device syz!
[  338.448447][ T8337] loop1: detected capacity change from 0 to 64
[  342.661111][ T8229] chnl_net:caif_netlink_parms(): no params data found
[  342.862335][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'.
[  343.507999][ T8373] loop0: detected capacity change from 0 to 32768
[  343.597875][ T8373] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  343.597875][ T8373] 
[  344.884073][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.942626][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.993676][ T8229] bridge_slave_0: entered allmulticast mode
[  345.054660][ T8229] bridge_slave_0: entered promiscuous mode
[  345.166935][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.179658][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.186816][ T8229] bridge_slave_1: entered allmulticast mode
[  345.204197][ T8229] bridge_slave_1: entered promiscuous mode
[  345.572182][ T8419] loop0: detected capacity change from 0 to 256
[  345.592562][ T8229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.662245][ T8229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.819195][ T8419] FAT-fs (loop0): Directory bread(block 64) failed
[  346.349100][ T8419] FAT-fs (loop0): Directory bread(block 65) failed
[  346.770447][ T8419] FAT-fs (loop0): Directory bread(block 66) failed
[  346.777392][ T8419] FAT-fs (loop0): Directory bread(block 67) failed
[  346.838109][ T8419] FAT-fs (loop0): Directory bread(block 68) failed
[  346.889252][ T8419] FAT-fs (loop0): Directory bread(block 69) failed
[  346.896096][ T8419] FAT-fs (loop0): Directory bread(block 70) failed
[  346.989348][ T8419] FAT-fs (loop0): Directory bread(block 71) failed
[  346.996650][ T8419] FAT-fs (loop0): Directory bread(block 72) failed
[  347.171719][ T8419] FAT-fs (loop0): Directory bread(block 73) failed
[  347.234533][ T8229] team0: Port device team_slave_0 added
[  347.433940][ T8229] team0: Port device team_slave_1 added
[  348.001496][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.021732][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.243580][ T8229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.317281][ T8449] loop1: detected capacity change from 0 to 1024
[  348.324993][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.368634][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.434497][ T8229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.435454][ T8449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.537189][ T8229] hsr_slave_0: entered promiscuous mode
[  348.549488][ T8229] hsr_slave_1: entered promiscuous mode
[  348.910478][ T8459] loop2: detected capacity change from 0 to 32768
[  349.125920][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.155220][ T8459] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  349.155255][ T8459]   allowing incompatible features above 0.0: (unknown version)
[  349.155271][ T8459]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  349.200172][ T8459] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  349.208340][ T8459] bcachefs (loop2): initializing new filesystem
[  349.219021][ T8459] bcachefs (loop2): going read-write
[  349.227690][ T5880] Bluetooth: hci5: command 0x0406 tx timeout
[  349.302200][ T8459] bcachefs (loop2): marking superblocks
[  349.314697][ T8459] bcachefs (loop2): initializing freespace
[  349.323617][ T8459] bcachefs (loop2): done initializing freespace
[  349.332355][ T8459] bcachefs (loop2): reading snapshots table
[  349.338303][ T8459] bcachefs (loop2): reading snapshots done
[  349.372590][ T8459] bcachefs (loop2): done starting filesystem
[  350.029511][ T8481] loop1: detected capacity change from 0 to 2048
[  350.097411][ T8481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.154369][ T8229] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  350.165066][ T8229] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  350.165104][ T5872] bcachefs (loop2): shutting down
[  350.182611][ T8229] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  350.195756][ T8481] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  350.207021][ T5872] bcachefs (loop2): going read-only
[  350.239626][ T5872] bcachefs (loop2): finished waiting for writes to stop
[  350.239964][ T8229] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  350.443855][ T8487] ------------[ cut here ]------------
[  350.449431][ T8487] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46
[  350.457930][ T8487] shift exponent -4 is negative
[  350.462851][ T8487] CPU: 0 UID: 0 PID: 8487 Comm: syz.1.642 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) 
[  350.462907][ T8487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  350.462929][ T8487] Call Trace:
[  350.462941][ T8487]  <TASK>
[  350.462953][ T8487]  dump_stack_lvl+0x16c/0x1f0
[  350.463005][ T8487]  __ubsan_handle_shift_out_of_bounds+0x27f/0x420
[  350.463084][ T8487]  pcl726_attach.cold+0x19/0x1e
[  350.463133][ T8487]  ? strcmp+0x50/0xb0
[  350.463186][ T8487]  comedi_device_attach+0x3b3/0x900
[  350.463244][ T8487]  do_devconfig_ioctl+0x1b1/0x710
[  350.463303][ T8487]  ? __mutex_lock+0x1c4/0x10b0
[  350.463355][ T8487]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[  350.463427][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.463482][ T8487]  comedi_unlocked_ioctl+0x165d/0x2f00
[  350.463528][ T8487]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  350.463573][ T8487]  ? __handle_mm_fault+0x5a8/0x2a50
[  350.463625][ T8487]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  350.463672][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.463716][ T8487]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  350.463760][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.463804][ T8487]  ? do_vfs_ioctl+0x128/0x14f0
[  350.463853][ T8487]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  350.463913][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.463958][ T8487]  ? rcu_is_watching+0x12/0xc0
[  350.464004][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.464050][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.464095][ T8487]  ? hook_file_ioctl_common+0x145/0x410
[  350.464148][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.464193][ T8487]  ? __fget_files+0x20e/0x3c0
[  350.464230][ T8487]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  350.464272][ T8487]  __x64_sys_ioctl+0x18e/0x210
[  350.464324][ T8487]  do_syscall_64+0xcd/0x4c0
[  350.464376][ T8487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.464413][ T8487] RIP: 0033:0x7f951158ebe9
[  350.464440][ T8487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.464477][ T8487] RSP: 002b:00007f951234c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  350.464511][ T8487] RAX: ffffffffffffffda RBX: 00007f95117b6270 RCX: 00007f951158ebe9
[  350.464537][ T8487] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000003
[  350.464561][ T8487] RBP: 00007f9511611e19 R08: 0000000000000000 R09: 0000000000000000
[  350.464585][ T8487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.464608][ T8487] R13: 00007f95117b6308 R14: 00007f95117b6270 R15: 00007ffcbdf97188
[  350.464645][ T8487]  </TASK>
[  350.464684][ T8487] ---[ end trace ]---
[  350.727285][ T8487] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  350.734486][ T8487] CPU: 0 UID: 0 PID: 8487 Comm: syz.1.642 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) 
[  350.746392][ T8487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  350.756450][ T8487] Call Trace:
[  350.759727][ T8487]  <TASK>
[  350.762659][ T8487]  dump_stack_lvl+0x3d/0x1f0
[  350.767282][ T8487]  vpanic+0x6e8/0x7a0
[  350.771300][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.776960][ T8487]  ? __pfx_vpanic+0x10/0x10
[  350.781499][ T8487]  ? __pfx_vprintk_emit+0x10/0x10
[  350.786559][ T8487]  panic+0xca/0xd0
[  350.790316][ T8487]  ? __pfx_panic+0x10/0x10
[  350.794778][ T8487]  check_panic_on_warn+0xab/0xb0
[  350.799758][ T8487]  __ubsan_handle_shift_out_of_bounds+0x2a6/0x420
[  350.806229][ T8487]  pcl726_attach.cold+0x19/0x1e
[  350.811107][ T8487]  ? strcmp+0x50/0xb0
[  350.815126][ T8487]  comedi_device_attach+0x3b3/0x900
[  350.820364][ T8487]  do_devconfig_ioctl+0x1b1/0x710
[  350.825425][ T8487]  ? __mutex_lock+0x1c4/0x10b0
[  350.830219][ T8487]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[  350.835820][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.841487][ T8487]  comedi_unlocked_ioctl+0x165d/0x2f00
[  350.846974][ T8487]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  350.852979][ T8487]  ? __handle_mm_fault+0x5a8/0x2a50
[  350.858205][ T8487]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  350.864039][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.869783][ T8487]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  350.875696][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.881352][ T8487]  ? do_vfs_ioctl+0x128/0x14f0
[  350.886145][ T8487]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  350.891288][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.896945][ T8487]  ? rcu_is_watching+0x12/0xc0
[  350.901730][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.907384][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.913038][ T8487]  ? hook_file_ioctl_common+0x145/0x410
[  350.918612][ T8487]  ? srso_alias_return_thunk+0x5/0xfbef5
[  350.924266][ T8487]  ? __fget_files+0x20e/0x3c0
[  350.928955][ T8487]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  350.934783][ T8487]  __x64_sys_ioctl+0x18e/0x210
[  350.939575][ T8487]  do_syscall_64+0xcd/0x4c0
[  350.944111][ T8487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.950022][ T8487] RIP: 0033:0x7f951158ebe9
[  350.954455][ T8487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.974096][ T8487] RSP: 002b:00007f951234c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  350.982527][ T8487] RAX: ffffffffffffffda RBX: 00007f95117b6270 RCX: 00007f951158ebe9
[  350.990507][ T8487] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000003
[  350.998485][ T8487] RBP: 00007f9511611e19 R08: 0000000000000000 R09: 0000000000000000
[  351.006463][ T8487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  351.014437][ T8487] R13: 00007f95117b6308 R14: 00007f95117b6270 R15: 00007ffcbdf97188
[  351.022428][ T8487]  </TASK>
[  351.025678][ T8487] Kernel Offset: disabled
[  351.029992][ T8487] Rebooting in 86400 seconds..