last executing test programs:

38.770132039s ago: executing program 4 (id=904):
r0 = io_uring_setup(0x50bc, &(0x7f0000000140))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0)

38.448648953s ago: executing program 4 (id=908):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup2(r0, r1)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a00)="316f82faff29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000180)="0036d551863e1902129da79fb0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a9", 0x88}, {&(0x7f0000000c40)="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", 0x18d}, {&(0x7f00000008c0)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbd474a418997ac57789fb8490642b47a96f0d03ec69d1f6e90e86b08003ef9c7331582f3b980091ac10753a3a9274686a060fd677574d39426ddae38b36279be6aaeb63de09f9d57d9101041b2aa3d7ce97b6860994689992d4246a5e82e81f7f106b8685d76edbcd1", 0x8b}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4afc887d8a4c55ae9e6d3bae49259a935b480ee610800f5c5b35943bdb14ae21509b259", 0x34}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="6f59bb69296212101db2d25d7d1550eabd8017f1dcae8582eee7d0417821deba372ff17566312ebdfed0dee4fcaabfcd0f157495460a5f6fcd15448f9fc823232e24c1c6c1ad896c06197a169c2c514e77d4d3ffdca3cf990954d1baf51d00417a650dc2123fb436ecb41404a3e1c3c04f", 0x71}, {&(0x7f0000000640)="0f60ff2a5ef0b2dbd043ae8a577b5d14ad5572180dd75c8ad7306ac56a36e04439413677b7ed345c48119f6a675df47439bf683eb8fae14b16254a16a217f9a84c9a1ab97e42e99660725767620066bc1087cc", 0x53}], 0x2}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

37.9550508s ago: executing program 4 (id=912):
socketpair(0x0, 0x0, 0x0, &(0x7f0000000100))
socket(0x1, 0x1, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r0, @ANYBLOB="1400020000000000000000000000e5ffac141400140006000000000006"], 0x40}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

37.339805796s ago: executing program 4 (id=919):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYBLOB="4ffef8a5fe039b069f473594fba9121a07732b", @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xde, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
getdents(r0, 0x0, 0x0)

35.968247935s ago: executing program 4 (id=928):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]]}, 0x30}}, 0x0)

33.6122878s ago: executing program 3 (id=936):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f00000001c0), &(0x7f00000003c0)}, 0x20)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x2f)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
recvfrom$ax25(0xffffffffffffffff, &(0x7f00000006c0)=""/203, 0xcb, 0x40000000, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0x1, 0x40000000}, 0x14}}, 0x0)

33.332082988s ago: executing program 3 (id=937):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104)

33.112558895s ago: executing program 3 (id=938):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup2(r0, r1)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a00)="316f82faff29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000180)="0036d551863e1902129da79fb0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a9", 0x88}, {&(0x7f0000000c40)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336fb139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b4e01a3ef30321af56b9601fb04e5e5cb16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef374e28f6fc3066150dcb7cd9e7c3b9808eb03c18e8601a71ad3906bb12f7067bf7b51c2a364848bda30518eb340e11b9b5b9651052ab7ae9b1add0ac4936debc76ac7e2d22a49891fcc360f605f0f175d523875b2b15b3a5065fd980300000000000000094dd76ffb223c5437fc4c7ee52d17d54dba33eb93eaff5d25007b334072796ea5ec0705662bdeb09a541dcf912bd35f324ca2fc2a95e740317650fd", 0x18d}, {&(0x7f00000008c0)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbd474a418997ac57789fb8490642b47a96f0d03ec69d1f6e90e86b08003ef9c7331582f3b980091ac10753a3a9274686a060fd677574d39426ddae38b36279be6aaeb63de09f9d57d9101041b2aa3d7ce97b6860994689992d4246a5e82e81f7f106b8685d76edbcd1", 0x8b}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4afc887d8a4c55ae9e6d3bae49259a935b480ee610800f5c5b35943bdb14ae21509b259", 0x34}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="6f59bb69296212101db2d25d7d1550eabd8017f1dcae8582eee7d0417821deba372ff17566312ebdfed0dee4fcaabfcd0f157495460a5f6fcd15448f9fc823232e24c1c6c1ad896c06197a169c2c514e77d4d3ffdca3cf990954d1baf51d00417a650dc2123fb436ecb41404a3e1c3c04f", 0x71}, {&(0x7f0000000640)="0f60ff2a5ef0b2dbd043ae8a577b5d14ad5572180dd75c8ad7306ac56a36e04439413677b7ed345c48119f6a675df47439bf683eb8fae14b16254a16a217f9a84c9a1ab97e42e99660725767620066bc1087cc", 0x53}], 0x2}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

32.909669389s ago: executing program 4 (id=939):
syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x808800, &(0x7f0000000400)=ANY=[@ANYBLOB="8ff0b967345eabcfb3ed3a1ac8d86252eb2fefb09fee03aa8c43d66f8640ba3c64fa82b97a1702fc7bc00e3b3f80503233ce5c8659dbcd17a405af59a50c5deb89d4a1ce087ebfa75df5ce808b23c5e6b0b0976fe189a1b517b5edefd077af86be5f5836928ac92f9008c81dbc8ba835bb0e529ad567d010ca0275978e61e2815f4904b88a20448768a4575e0ad9370f4f5c19de1b6986691baceeb49fff3c99d7ad14f5919d681ab184855b6541f40c0bac4aaea602603e6485092227ce510df139e07638c59ce159bbe202885aeb15ed33e6ff46ab9320590fc1", @ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC], 0x1, 0x5dbe, &(0x7f0000002140)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
chdir(&(0x7f0000000300)='./file0\x00')
mknod(0x0, 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)

32.896699352s ago: executing program 3 (id=940):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYBLOB="4ffef8a5fe039b069f473594fba9121a07732b", @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xde, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
getdents(r0, 0x0, 0x0)

32.199981599s ago: executing program 3 (id=944):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x90)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)

28.080130934s ago: executing program 3 (id=956):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="070000000000000000000c00000008000300", @ANYBLOB="0a00060008021100000000002c0050800400050011000100cabee339084eeef16f162471f40000000800070000000000050002"], 0x54}}, 0x0)

5.26828985s ago: executing program 1 (id=1045):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f00000001c0), &(0x7f00000003c0)}, 0x20)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x2f)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
recvfrom$ax25(0xffffffffffffffff, &(0x7f00000006c0)=""/203, 0xcb, 0x40000000, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0x1, 0x40000000}, 0x14}}, 0x0)

4.505736626s ago: executing program 5 (id=1046):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

4.35098856s ago: executing program 1 (id=1047):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x5c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x3b, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}]}, 0x5c}}, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x6, 0x14f8, &(0x7f0000001540)="$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")
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r7, &(0x7f000003bfff)='/', 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r9, r8, 0x15, 0x0, @val=@tracing}, 0x40)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r7, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000001640)=""/4104, &(0x7f0000000040)=0x1008)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r11 = dup(r6)
write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000004c0)={0x0, @multicast1, @empty}, &(0x7f0000000140)=0xc)
dup(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)

4.156571912s ago: executing program 5 (id=1048):
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000772000), 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000006240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005e40)=[{0xc}, {0xc}], 0x18}}], 0x4, 0x0)

4.027308844s ago: executing program 5 (id=1049):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d68b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e6d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0e"], 0x0}, 0x90)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)

3.712443255s ago: executing program 2 (id=1051):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}}, 0x0)

3.646657476s ago: executing program 2 (id=1052):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104)

3.472487092s ago: executing program 2 (id=1053):
r0 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
sendmsg$802154_dgram(r2, &(0x7f0000000100)={&(0x7f0000000000), 0x16, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x0)

3.300063108s ago: executing program 2 (id=1054):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0), 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xe4}]}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r5, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="0036d551863e1902129da79f5986e0529ef50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a7700976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a118154c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece17b30c0fa017fd726c5fa809b98c3b53c48ff2a1e91a7137de88f1dc1e4f9f0eddd7522b3", 0xe0}, {&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814db", 0xa7}, {&(0x7f0000000800)="fff5c0293353db83a683db60266a3867d03f740f4e0a7bafe7be9b2bacb7c2d40bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e7", 0x45}], 0x4}}], 0x1, 0x0)

2.220479313s ago: executing program 2 (id=1055):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x5452, &(0x7f0000000ac0)={{0x1}})

2.022793327s ago: executing program 0 (id=1057):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40)
syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.343372491s ago: executing program 5 (id=1058):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r1}, &(0x7f00000007c0), &(0x7f00000010c0)}, 0x42118134da853ae8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)

1.28433661s ago: executing program 1 (id=1059):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x3c}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x300}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)

1.180565114s ago: executing program 0 (id=1060):
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000006240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005e40)=[{0xc}, {0xc}], 0x18}}], 0x4, 0x0)

1.154914889s ago: executing program 5 (id=1061):
unshare(0x20040600)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0xffffffffffffffff, r0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
fgetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='system.sockprotoname\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0x2020)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x10)

1.000833135s ago: executing program 0 (id=1062):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r2, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}}, 0x0)

1.000020337s ago: executing program 1 (id=1063):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104)

784.503829ms ago: executing program 0 (id=1064):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)

705.865236ms ago: executing program 1 (id=1065):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0)

496.390203ms ago: executing program 1 (id=1066):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0x100008b}, 0x0)
socket(0x0, 0x80805, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200))
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0xfffffffd)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000100))
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00"], 0x0)

432.096599ms ago: executing program 0 (id=1067):
unshare(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
socket(0xa, 0x3, 0x800006)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000022c000/0x3000)=nil)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sched_getattr(0xffffffffffffffff, &(0x7f0000000340)={0x38}, 0x38, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)="eaa66c89dba92e637c839402518985c3356382f770f428c379d85afb3c0ed2fed1e9e1271907ba6f42aef09c40", 0x2d}], 0x1}, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x6ce)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

231.969224ms ago: executing program 2 (id=1068):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x5, 0x10001, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x8009, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b041000e0ff030002004788aa96a13bb1000000000088caffff", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r6=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e1f, 0x0, @mcast2, 0x6}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x7, 0x6ed, &(0x7f0000000900)="$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")
r9 = socket$inet(0x2, 0x3, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r11, @ANYBLOB="ffff0f001e92c6d31f4b9eba0d4f5dd89765513bf02e1d006ba67611f283d9e75325b2dcf47a68feae3352a1b7b4794770341471fd27a2972a250c90e72e379cd8acccf804ddbf8cdd70bb813c9abf205c714c523fb4ad5424742dc16de8702b5205142fb92ea831b7e38eb2646d316c5bf20bd065d584e772076a22571524d1aee94782152f9495578fa80eb3356bc7314f45f62fef914124c7bce5af0000000000"], 0x1c}}, 0x0)
bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r9, 0x0, 0x3, &(0x7f0000000000)=0xf7, 0x4)
connect$inet(r9, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r13, &(0x7f00000007c0)={'#! ', './bus', [{0x20, 'net_prio.pri\xe3\x1eK%?\x00\x02\x8b\x034\xa3n\xb1oidx\x00\xc404Cz\xd4y\x14\"\x01\xf6q\x86Vl6\x12\xdbE\xc5F\b\x8e\xc8\xb2(\x02zK(=C\x0f\x1a\xdd9\xadi\xe6\x82,\x82\n%\x9f\x94}\x92\x7f}X\xb4\t\x00\x00\x00\x00\x00\x00\x00}\x1b\xbbX4\x1b\xe2\xccz\x14\xb6\xe7\x9cQ\xb4C\xe4j\xf0\a\r\xf1\x972\"S7'}], 0xa, "bea78505bb52c5c8dbc4dd9db683a377660d8e8194bd61765fa61cf5d3130270cda63bcadc0360abb5565758cdce6318c037a00682d5042651a0a06a4fe12776f8c3b563d93b1658b98a0dca57a309396697123ca59ce5e3062fe54f1cd06777955c937a207789d4aa7e21db71920049e59c7d2100901d2d5534eeef40a1f882d0da336b07231133e3ca9133b4216eda9e6130af7201dd57725c1e8c8fcd99d738dd3ab00d861464fdf6728a186e70a50022b02717c84d5c5f5c459487b6aa1d050d"}, 0x141)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r13, 0x0)
write$binfmt_elf64(r9, &(0x7f0000000140)=ANY=[], 0x34)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000160000000c00018008000100", @ANYBLOB="a6899be9442881cf1835b49f304b06", @ANYBLOB="a200313631ba65a22e338b2896285cbb10e28fa00f24c64ee8573f8aeca0"], 0x20}}, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x844, 0x0)

85.874882ms ago: executing program 5 (id=1069):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x5c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x3b, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}]}, 0x5c}}, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x6, 0x14f8, &(0x7f0000001540)="$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")
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r7, &(0x7f000003bfff)='/', 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r9, r8, 0x15, 0x0, @val=@tracing}, 0x40)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r7, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000001640)=""/4104, &(0x7f0000000040)=0x1008)
write$P9_RVERSION(r6, 0x0, 0x15)
r11 = dup(r6)
write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000004c0)={0x0, @multicast1, @empty}, &(0x7f0000000140)=0xc)
dup(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)

0s ago: executing program 0 (id=1070):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40)
syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

idge0: port 2(bridge_slave_1) entered blocking state
[  146.249171][ T5218] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.400017][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.407524][ T5218] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.517349][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.524593][ T5218] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.013621][ T5937] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  147.111025][ T5937] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  147.200673][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  147.249811][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  147.349347][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.497385][ T5933] 8021q: adding VLAN 0 to HW filter on device team0
[  147.606978][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.673673][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.680921][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.924582][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.931987][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.381530][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.435590][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.552900][ T5937] 8021q: adding VLAN 0 to HW filter on device team0
[  148.682811][ T4506] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.690023][ T4506] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.722759][ T4506] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.729966][ T4506] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.952882][ T5901] veth0_vlan: entered promiscuous mode
[  149.218495][ T5901] veth1_vlan: entered promiscuous mode
[  149.285294][ T5756] veth0_vlan: entered promiscuous mode
[  149.391521][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.527395][ T5756] veth1_vlan: entered promiscuous mode
[  149.610009][ T5901] veth0_macvtap: entered promiscuous mode
[  149.697720][ T5901] veth1_macvtap: entered promiscuous mode
[  149.813723][ T5933] veth0_vlan: entered promiscuous mode
[  149.872726][ T5933] veth1_vlan: entered promiscuous mode
[  149.897041][ T5756] veth0_macvtap: entered promiscuous mode
[  149.926133][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.957419][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.977649][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.994693][ T6216] loop5: detected capacity change from 0 to 32768
[  150.009808][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.049352][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.074329][ T6216] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  150.103935][ T5756] veth1_macvtap: entered promiscuous mode
[  150.234644][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.266834][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.303466][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.324809][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.359771][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.391963][ T6216] XFS (loop5): Ending clean mount
[  150.398542][ T5901] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.425128][ T6216] XFS (loop5): Quotacheck needed: Please wait.
[  150.438389][ T5901] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.451744][ T5901] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.465162][ T5901] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.504701][ T6216] XFS (loop5): Quotacheck: Done.
[  150.525255][ T5933] veth0_macvtap: entered promiscuous mode
[  150.572776][ T5099] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  150.635763][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.656100][ T5933] veth1_macvtap: entered promiscuous mode
[  150.761244][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.805948][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.830646][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.850557][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.860386][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.892838][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.944444][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.029505][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.064248][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.104342][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.127374][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.160521][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.180480][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.232951][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.323809][ T5756] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.361948][ T5756] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.407764][ T5756] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.429988][ T5756] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.460389][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.480088][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.520496][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.560504][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.580623][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.599699][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.614306][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.635308][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.663115][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.704863][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.750789][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.777090][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.800593][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.830491][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.867943][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.884285][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.910509][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.951747][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.046768][ T5933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.086995][ T5933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.101550][ T5933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.130728][ T5933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.263309][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.303393][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.516263][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.554135][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.641104][ T5937] veth0_vlan: entered promiscuous mode
[  152.697390][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.734097][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.906131][ T5937] veth1_vlan: entered promiscuous mode
[  152.966944][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.983770][ T6289] loop5: detected capacity change from 0 to 32768
[  153.016603][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.102736][ T6289] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.211085][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.239779][ T5937] veth0_macvtap: entered promiscuous mode
[  153.252209][ T5937] veth1_macvtap: entered promiscuous mode
[  153.263176][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.275328][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.290768][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.310988][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.329682][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.376215][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.407454][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.430285][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.481587][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.540529][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.571059][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.612983][ T6289] XFS (loop5): Ending clean mount
[  153.622815][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.645608][ T6289] XFS (loop5): Quotacheck needed: Please wait.
[  153.714875][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.752271][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.755380][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.825098][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.863655][ T6289] XFS (loop5): Quotacheck: Done.
[  153.893854][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.940486][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.987285][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.013632][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.035352][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.062799][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.081627][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.095938][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.122681][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.146497][ T5099] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  154.199083][ T5937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.228744][ T5937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.249772][ T5937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.287979][ T5937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.325940][ T6341] warning: `syz.0.309' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  155.389881][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.440069][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.652845][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.670777][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.210686][ T5103] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  156.420558][ T5103] usb 1-1: device descriptor read/64, error -71
[  156.732929][ T5103] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  156.809356][ T6394] loop3: detected capacity change from 0 to 256
[  156.851808][ T6396] netlink: 68 bytes leftover after parsing attributes in process `syz.5.322'.
[  156.931238][ T5103] usb 1-1: device descriptor read/64, error -71
[  157.044481][ T6394] FAT-fs (loop3): Directory bread(block 64) failed
[  157.102948][ T5103] usb usb1-port1: attempt power cycle
[  157.134986][ T6394] FAT-fs (loop3): Directory bread(block 65) failed
[  157.170411][ T6394] FAT-fs (loop3): Directory bread(block 66) failed
[  157.192514][ T6394] FAT-fs (loop3): Directory bread(block 67) failed
[  157.450649][ T6394] FAT-fs (loop3): Directory bread(block 68) failed
[  157.457215][ T6394] FAT-fs (loop3): Directory bread(block 69) failed
[  157.740648][ T5103] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  157.799032][ T6394] FAT-fs (loop3): Directory bread(block 70) failed
[  157.873831][ T5103] usb 1-1: device descriptor read/8, error -71
[  157.887810][ T6394] FAT-fs (loop3): Directory bread(block 71) failed
[  157.964948][ T6394] FAT-fs (loop3): Directory bread(block 72) failed
[  158.162617][ T6394] FAT-fs (loop3): Directory bread(block 73) failed
[  158.311313][ T5103] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  158.493525][ T6408] netlink: 76 bytes leftover after parsing attributes in process `syz.0.327'.
[  158.571449][ T6407] Bluetooth: MGMT ver 1.23
[  158.600519][ T5103] usb 1-1: device not accepting address 7, error -71
[  158.632480][ T5103] usb usb1-port1: unable to enumerate USB device
[  158.675474][ T6373] loop1: detected capacity change from 0 to 32768
[  158.756726][ T6415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.845606][ T6373] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  158.884082][ T6415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.968656][ T6422] netlink: 'syz.0.330': attribute type 4 has an invalid length.
[  159.199147][ T6373] XFS (loop1): Ending clean mount
[  159.502687][ T6373] XFS (loop1): Quotacheck needed: Please wait.
[  159.775414][ T6456] loop4: detected capacity change from 0 to 256
[  159.796891][ T6373] XFS (loop1): Quotacheck: Done.
[  159.895542][ T5933] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  159.925046][ T6462] netlink: 76 bytes leftover after parsing attributes in process `syz.5.342'.
[  159.947601][ T6456] FAT-fs (loop4): Directory bread(block 64) failed
[  159.983969][ T6456] FAT-fs (loop4): Directory bread(block 65) failed
[  160.055768][ T6456] FAT-fs (loop4): Directory bread(block 66) failed
[  160.107881][ T6456] FAT-fs (loop4): Directory bread(block 67) failed
[  160.143347][ T6456] FAT-fs (loop4): Directory bread(block 68) failed
[  160.149942][ T6456] FAT-fs (loop4): Directory bread(block 69) failed
[  160.158583][ T6456] FAT-fs (loop4): Directory bread(block 70) failed
[  160.166100][ T6456] FAT-fs (loop4): Directory bread(block 71) failed
[  160.173100][ T6456] FAT-fs (loop4): Directory bread(block 72) failed
[  160.179655][ T6456] FAT-fs (loop4): Directory bread(block 73) failed
[  160.646403][ T6471] netlink: 'syz.5.348': attribute type 4 has an invalid length.
[  160.909152][ T6487] loop1: detected capacity change from 0 to 128
[  161.317593][ T6495] loop4: detected capacity change from 0 to 1024
[  161.872066][ T6495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.911299][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'.
[  162.057369][ T5756] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.239352][ T6519] program syz.0.362 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  163.425937][ T6545] loop5: detected capacity change from 0 to 8192
[  163.526718][ T6545]  loop5: p1 p2 p3 p4
[  163.535828][ T6545] loop5: p1 size 108922248 extends beyond EOD, truncated
[  163.601553][ T6545] loop5: p2 start 861536256 is beyond EOD, truncated
[  163.680746][ T6545] loop5: p3 start 851968 is beyond EOD, truncated
[  163.687226][ T6545] loop5: p4 size 65536 extends beyond EOD, truncated
[  164.203217][ T5163] udevd[5163]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  164.221869][ T5574] udevd[5574]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  164.396443][ T5574] udevd[5574]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  164.413254][ T5163] udevd[5163]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  164.562150][ T6587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.929102][ T6616] loop2: detected capacity change from 0 to 512
[  164.951694][ T6616] EXT4-fs: Ignoring removed mblk_io_submit option
[  165.043125][ T4506] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  165.075073][ T6616] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.402: casefold flag without casefold feature
[  165.133673][ T6614] loop3: detected capacity change from 0 to 8192
[  165.135054][ T6616] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.402: couldn't read orphan inode 15 (err -117)
[  165.183163][ T6614]  loop3: p1 p2 p3 p4
[  165.189043][ T6614] loop3: p1 size 108922248 extends beyond EOD, truncated
[  165.201267][ T6616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.202173][ T6614] loop3: p2 start 861536256 is beyond EOD, truncated
[  165.274289][ T4506] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  165.294528][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.296388][ T4506] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.303640][ T6614] loop3: p3 start 851968 is beyond EOD, 
[  165.328210][ T4506] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  165.367563][ T4506] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.390894][ T6614] truncated
[  165.394075][ T6614] loop3: p4 size 65536 extends beyond EOD, truncated
[  165.408438][ T4506] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  165.439202][ T4506] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  165.448122][ T4506] usb 2-1: Product: syz
[  165.463295][ T4506] usb 2-1: Manufacturer: syz
[  165.477037][ T4506] cdc_wdm 2-1:1.0: skipping garbage
[  165.482795][ T4506] cdc_wdm 2-1:1.0: skipping garbage
[  165.547775][ T4506] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  165.577715][ T4506] cdc_wdm 2-1:1.0: Unknown control protocol
[  165.661422][ T5100] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  165.710639][ T5103] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  165.764131][ T5168] usb 2-1: USB disconnect, device number 3
[  165.902318][ T5100] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  165.921180][ T5103] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.937572][ T5100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.963937][ T5103] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  165.996227][ T5100] usb 5-1: config 0 descriptor??
[  166.009210][ T5103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.020345][ T5574] udevd[5574]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  166.022895][ T5274] udevd[5274]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  166.071597][ T5103] usb 1-1: config 0 descriptor??
[  166.085515][ T5103] rndis_host 1-1:0.0: skipping garbage
[  166.102449][ T5103] usb 1-1: bad CDC descriptors
[  166.250577][ T5170] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  166.452535][ T5170] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  166.479537][ T5170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.517352][ T5170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.551860][ T5170] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  166.580588][ T5170] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  166.627842][ T5170] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  166.654091][ T5170] usb 6-1: Manufacturer: syz
[  166.675311][ T5170] usb 6-1: config 0 descriptor??
[  166.774336][ T6643] loop3: detected capacity change from 0 to 32768
[  166.784292][ T6643] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.410 (6643)
[  166.841144][ T6643] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  166.871698][ T6643] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  166.880191][ T6643] BTRFS info (device loop3): using free-space-tree
[  167.131143][ T5170] usbhid 6-1:0.0: can't add hid device: -71
[  167.145955][ T5170] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  167.159477][ T5170] usb 6-1: USB disconnect, device number 7
[  167.223898][ T6686] loop1: detected capacity change from 0 to 128
[  167.277227][ T5100] pegasus 5-1:0.0: can't reset MAC
[  167.293387][ T5100] pegasus 5-1:0.0: probe with driver pegasus failed with error -5
[  167.329645][ T5100] usb 5-1: USB disconnect, device number 2
[  167.463457][ T5103] usb 1-1: USB disconnect, device number 8
[  167.628359][ T5937] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  167.648931][ T6689] loop1: detected capacity change from 0 to 4096
[  167.691678][ T6689] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  167.833059][   T29] audit: type=1326 audit(1721361379.586:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.5.428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd301b75b59 code=0x0
[  167.873048][ T6689] ntfs3: loop1: Inode r=b is not in use!
[  167.902915][ T6689] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  167.957604][ T6689] ntfs3: loop1: Failed to load $Extend (-116).
[  167.964246][ T6689] ntfs3: loop1: Failed to initialize $Extend.
[  168.035070][   T29] audit: type=1326 audit(1721361379.786:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.4.430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7301975b59 code=0x0
[  168.334318][   T29] audit: type=1804 audit(1721361380.086:17): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.424" name="/newroot/17/file0/bus" dev="loop1" ino=34 res=1 errno=0
[  168.536196][ T6718] loop0: detected capacity change from 0 to 128
[  169.116154][ T6726] loop0: detected capacity change from 0 to 8192
[  169.230598][ T4506] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  169.271953][ T6726]  loop0: p1 p2 p3 p4
[  169.276292][ T6726] loop0: p1 size 108922248 extends beyond EOD, truncated
[  169.293939][ T6726] loop0: p2 start 861536256 is beyond EOD, truncated
[  169.390569][ T6726] loop0: p3 start 851968 is beyond EOD, truncated
[  169.423998][ T6726] loop0: p4 size 65536 extends beyond EOD, truncated
[  169.464171][ T4506] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  169.485898][ T4506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.534117][ T4506] usb 6-1: config 0 descriptor??
[  169.645670][ T6722] loop3: detected capacity change from 0 to 32768
[  169.694167][ T6722] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.437 (6722)
[  169.800978][ T6722] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  169.833972][   T29] audit: type=1326 audit(1721361381.586:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.0.452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7883d75b59 code=0x0
[  169.885568][ T6722] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  169.921976][   T29] audit: type=1326 audit(1721361381.676:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.1.453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc84a575b59 code=0x0
[  169.938782][ T6722] BTRFS info (device loop3): using free-space-tree
[  169.976053][ T6760] loop4: detected capacity change from 0 to 256
[  170.046609][ T5274] udevd[5274]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  170.047053][ T5163] udevd[5163]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  170.121702][ T6760] FAT-fs (loop4): Directory bread(block 64) failed
[  170.155802][ T6760] FAT-fs (loop4): Directory bread(block 65) failed
[  170.201194][ T6760] FAT-fs (loop4): Directory bread(block 66) failed
[  170.240301][ T6760] FAT-fs (loop4): Directory bread(block 67) failed
[  170.273400][ T6760] FAT-fs (loop4): Directory bread(block 68) failed
[  170.280314][ T6760] FAT-fs (loop4): Directory bread(block 69) failed
[  170.304617][ T6760] FAT-fs (loop4): Directory bread(block 70) failed
[  170.315471][ T6760] FAT-fs (loop4): Directory bread(block 71) failed
[  170.328043][ T6760] FAT-fs (loop4): Directory bread(block 72) failed
[  170.344286][ T6760] FAT-fs (loop4): Directory bread(block 73) failed
[  170.480959][   T29] audit: type=1804 audit(1721361382.226:20): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.437" name="/newroot/21/bus/bus" dev="loop3" ino=263 res=1 errno=0
[  170.578777][ T4506] pegasus 6-1:0.0: probe with driver pegasus failed with error -121
[  170.672338][ T5937] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  170.794549][ T5168] usb 6-1: USB disconnect, device number 8
[  171.108129][ T6797] program syz.0.462 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  171.496848][ T6811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.536263][ T6815] loop3: detected capacity change from 0 to 256
[  171.576902][   T29] audit: type=1326 audit(1721361383.326:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.5.471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd301b75b59 code=0x0
[  171.662516][   T29] audit: type=1326 audit(1721361383.396:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.4.472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7301975b59 code=0x0
[  171.694137][ T6815] FAT-fs (loop3): Directory bread(block 64) failed
[  171.701773][ T6815] FAT-fs (loop3): Directory bread(block 65) failed
[  171.708601][ T6815] FAT-fs (loop3): Directory bread(block 66) failed
[  171.716361][ T6815] FAT-fs (loop3): Directory bread(block 67) failed
[  171.726561][ T6815] FAT-fs (loop3): Directory bread(block 68) failed
[  171.736940][ T6815] FAT-fs (loop3): Directory bread(block 69) failed
[  171.746444][ T6815] FAT-fs (loop3): Directory bread(block 70) failed
[  171.764901][ T6815] FAT-fs (loop3): Directory bread(block 71) failed
[  171.805886][ T6815] FAT-fs (loop3): Directory bread(block 72) failed
[  171.813430][ T6815] FAT-fs (loop3): Directory bread(block 73) failed
[  172.319228][ T6816] loop2: detected capacity change from 0 to 32768
[  172.338742][ T6816] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.470 (6816)
[  172.417872][ T6816] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  172.455949][ T6816] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  172.491310][ T6816] BTRFS info (device loop2): using free-space-tree
[  172.873301][   T29] audit: type=1804 audit(1721361384.616:23): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.470" name="/newroot/43/bus/bus" dev="loop2" ino=263 res=1 errno=0
[  173.064730][ T5901] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  173.200080][ T4506] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  173.400619][ T4506] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  173.436151][ T4506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.464383][ T4506] usb 5-1: config 0 descriptor??
[  173.705610][ T6876] program syz.1.490 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  173.995611][   T29] audit: type=1326 audit(1721361385.746:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.2.493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99ca175b59 code=0x0
[  174.118386][ T6864] loop5: detected capacity change from 0 to 32768
[  174.137068][ T6864] bcachefs (/dev/loop5): error reading default superblock: checksum error, type crc32c_nonzero: got 389e9d8f should be 29d2fb78
[  174.433940][ T6864] bcachefs (loop5): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  174.461343][ T6864] bcachefs (loop5): recovering from clean shutdown, journal seq 7
[  174.517660][ T6864] bcachefs (loop5): alloc_read... done
[  174.535024][ T4506] pegasus 5-1:0.0: probe with driver pegasus failed with error -121
[  174.542575][ T6864] bcachefs (loop5): stripes_read... done
[  174.565257][ T6864] bcachefs (loop5): snapshots_read... done
[  174.651759][ T6864] bcachefs (loop5): going read-write
[  174.721084][ T6864] bcachefs (loop5): journal_replay...
[  174.747231][ T5103] usb 5-1: USB disconnect, device number 3
[  174.768687][ T6864]  done
[  174.779452][ T6864] bcachefs (loop5): resume_logged_ops... done
[  174.796144][ T6864] bcachefs (loop5): delete_dead_inodes... done
[  174.822046][ T6864] bcachefs (loop5): done starting filesystem
[  174.989384][   T41] bcachefs (loop5 inum 536870913 offset 0): data data checksum error, type crc32c: got 7e264307 should be 2e87c3ce
[  175.006131][  T957] bcachefs (loop5 inum 536870913 offset 0): no device to read from
[  175.015782][  T957] bcachefs (loop5 inum 536870913 offset 0): read error 3 from btree lookup
[  175.029649][   T29] audit: type=1804 audit(1721361386.776:25): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.483" name="/newroot/108/file0/file0/file0" dev="loop5" ino=536870913 res=1 errno=0
[  175.038525][   T44] bcachefs (loop5 inum 536870913 offset 0): data data checksum error, type crc32c: got 7e264307 should be 2e87c3ce
[  175.068721][   T35] bcachefs (loop5 inum 536870913 offset 0): no device to read from
[  175.077949][   T35] bcachefs (loop5 inum 536870913 offset 0): read error 3 from btree lookup
[  175.127485][   T29] audit: type=1800 audit(1721361386.876:26): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.483" name="file0" dev="loop5" ino=536870913 res=0 errno=0
[  175.131935][   T41] bcachefs (loop5 inum 536870913 offset 0): data data checksum error, type crc32c: got 7e264307 should be 2e87c3ce
[  175.169054][  T957] bcachefs (loop5 inum 536870913 offset 0): no device to read from
[  175.177204][  T957] bcachefs (loop5 inum 536870913 offset 0): read error 3 from btree lookup
[  175.200763][ T6864] syz.5.483 (6864) used greatest stack depth: 16400 bytes left
[  175.387415][ T6906] loop3: detected capacity change from 0 to 32768
[  175.412631][ T5099] bcachefs (loop5): shutting down
[  175.456108][ T5099] bcachefs (loop5): going read-only
[  175.484345][ T6906] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.498 (6906)
[  175.521017][ T5099] bcachefs (loop5): finished waiting for writes to stop
[  175.629096][ T6906] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  175.701477][ T5099] bcachefs (loop5): flushing journal and stopping allocators, journal seq 13
[  175.744018][ T6906] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  175.791743][ T5099] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 13
[  175.807707][ T6906] BTRFS info (device loop3): using free-space-tree
[  175.889754][ T5099] bcachefs (loop5): shutdown complete, journal seq 14
[  175.910780][ T5099] bcachefs (loop5): marking filesystem clean
[  176.095050][ T5099] bcachefs (loop5): shutdown complete
[  176.280863][   T29] audit: type=1804 audit(1721361388.016:27): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.498" name="/newroot/29/bus/bus" dev="loop3" ino=263 res=1 errno=0
[  176.388698][   T29] audit: type=1326 audit(1721361388.136:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.2.512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99ca175b59 code=0x0
[  176.458137][ T5937] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  177.486039][ T5100] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  177.579820][ T6986] program syz.4.525 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  177.642069][ T6988] loop2: detected capacity change from 0 to 1024
[  177.713089][ T5100] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  177.722672][ T5100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.767199][ T5100] usb 4-1: config 0 descriptor??
[  177.783347][ T6988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.908364][   T29] audit: type=1804 audit(1721361389.656:29): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.526" name="/newroot/51/file2/bus" dev="loop2" ino=18 res=1 errno=0
[  177.997412][   T29] audit: type=1804 audit(1721361389.666:30): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.526" name="/newroot/51/file2/bus" dev="loop2" ino=18 res=1 errno=0
[  178.265442][ T6969] loop1: detected capacity change from 0 to 32768
[  178.350026][ T6969] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got 389e9d8f should be 29d2fb78
[  178.390909][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.676735][ T6969] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  178.738393][ T6969] bcachefs (loop1): recovering from clean shutdown, journal seq 7
[  178.767411][   T29] audit: type=1326 audit(1721361390.516:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.5.535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd301b75b59 code=0x0
[  178.822353][ T5100] pegasus 4-1:0.0: probe with driver pegasus failed with error -121
[  178.824153][ T6969] bcachefs (loop1): alloc_read... done
[  178.846031][ T6969] bcachefs (loop1): stripes_read... done
[  178.851944][ T6969] bcachefs (loop1): snapshots_read... done
[  178.906425][ T6969] bcachefs (loop1): going read-write
[  178.961430][ T6969] bcachefs (loop1): journal_replay... done
[  179.022478][ T6969] bcachefs (loop1): resume_logged_ops... done
[  179.054276][ T5103] usb 4-1: USB disconnect, device number 2
[  179.067196][ T6969] bcachefs (loop1): delete_dead_inodes... done
[  179.082422][ T6969] bcachefs (loop1): done starting filesystem
[  179.192646][   T41] bcachefs (loop1 inum 536870913 offset 0): data data checksum error, type crc32c: got 7e264307 should be 2e87c3ce
[  179.216648][   T62] bcachefs (loop1 inum 536870913 offset 0): no device to read from
[  179.244967][   T62] bcachefs (loop1 inum 536870913 offset 0): read error 3 from btree lookup
[  179.250403][ T7000] loop0: detected capacity change from 0 to 32768
[  179.257153][   T41] bcachefs (loop1 inum 536870913 offset 0): data data checksum error, type crc32c: got 7e264307 should be 2e87c3ce
[  179.277008][   T12] bcachefs (loop1 inum 536870913 offset 0): no device to read from
[  179.293418][   T29] audit: type=1804 audit(1721361391.046:32): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.518" name="/newroot/41/file0/file0/file0" dev="loop1" ino=536870913 res=1 errno=0
[  179.306336][   T12] bcachefs (loop1 inum 536870913 offset 0): read error 3 from btree lookup
[  179.315762][ T7041] program syz.4.539 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  179.354133][   T44] bcachefs (loop1 inum 536870913 offset 0): data data checksum error, type crc32c: got 7e264307 should be 2e87c3ce
[  179.368138][   T62] bcachefs (loop1 inum 536870913 offset 0): no device to read from
[  179.397194][   T29] audit: type=1800 audit(1721361391.096:33): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.518" name="file0" dev="loop1" ino=536870913 res=0 errno=0
[  179.425738][   T62] bcachefs (loop1 inum 536870913 offset 0): read error 3 from btree lookup
[  179.426662][ T7000] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.562221][ T5933] bcachefs (loop1): shutting down
[  179.567282][ T5933] bcachefs (loop1): going read-only
[  179.610893][ T5933] bcachefs (loop1): finished waiting for writes to stop
[  179.666754][ T5933] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12
[  179.709842][ T5933] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13
[  179.735600][ T7000] XFS (loop0): Ending clean mount
[  179.772243][ T7000] XFS (loop0): Quotacheck needed: Please wait.
[  179.812363][ T5933] bcachefs (loop1): shutdown complete, journal seq 14
[  179.828107][ T7065] loop2: detected capacity change from 0 to 512
[  179.832833][ T5933] bcachefs (loop1): marking filesystem clean
[  179.922072][ T7000] XFS (loop0): Quotacheck: Done.
[  180.045131][ T5933] bcachefs (loop1): shutdown complete
[  180.068976][ T5096] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  180.116568][ T7073] loop5: detected capacity change from 0 to 256
[  180.194952][ T7073] FAT-fs (loop5): bogus number of directory entries (17407)
[  180.211771][ T7073] FAT-fs (loop5): Can't find a valid FAT filesystem
[  180.284816][ T7073] netlink: 16 bytes leftover after parsing attributes in process `syz.5.550'.
[  180.841151][ T4487] Bluetooth: hci5: Malformed Event: 0x02
[  181.901835][ T7114] loop3: detected capacity change from 0 to 256
[  181.962565][ T7114] FAT-fs (loop3): bogus number of directory entries (17407)
[  181.986207][ T7114] FAT-fs (loop3): Can't find a valid FAT filesystem
[  182.083285][ T7114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'.
[  182.258133][ T7093] loop2: detected capacity change from 0 to 32768
[  182.308210][ T7093] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got 389e9d8f should be 29d2fb78
[  182.352323][ T7119] loop1: detected capacity change from 0 to 1024
[  182.390653][ T7123] program syz.3.569 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  182.437783][ T7095] loop0: detected capacity change from 0 to 32768
[  182.476580][ T7119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.513242][ T7095] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.552 (7095)
[  182.545431][   T29] audit: type=1804 audit(1721361394.296:34): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.544" name="/newroot/42/file2/bus" dev="loop1" ino=18 res=1 errno=0
[  182.609375][ T7136] loop3: detected capacity change from 0 to 512
[  182.616035][   T29] audit: type=1804 audit(1721361394.316:35): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.544" name="/newroot/42/file2/bus" dev="loop1" ino=18 res=1 errno=0
[  182.663884][ T7095] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  182.756183][ T7093] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  182.767874][ T7095] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  182.831451][ T7095] BTRFS info (device loop0): using free-space-tree
[  182.849244][ T7093] bcachefs (loop2): recovering from clean shutdown, journal seq 7
[  182.939033][ T7093] bcachefs (loop2): alloc_read... done
[  182.955296][ T7093] bcachefs (loop2): stripes_read... done
[  182.985536][ T7093] bcachefs (loop2): snapshots_read... done
[  183.016875][ T7093] bcachefs (loop2): going read-write
[  183.040769][ T7093] bcachefs (loop2): journal_replay... done
[  183.103703][ T7093] bcachefs (loop2): resume_logged_ops... done
[  183.109939][ T7093] bcachefs (loop2): delete_dead_inodes... done
[  183.140979][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.143667][ T7093] bcachefs (loop2): done starting filesystem
[  183.175986][ T7095] BTRFS info (device loop0): rebuilding free space tree
[  183.283382][   T41] bcachefs (loop2 inum 536870913 offset 0): data data checksum error, type crc32c: got 7e264307 should be 2e87c3ce
[  183.300882][ T1103] bcachefs (loop2 inum 536870913 offset 0): no device to read from
[  183.365684][ T1103] bcachefs (loop2 inum 536870913 offset 0): read error 3 from btree lookup
[  183.380658][ T7110] loop5: detected capacity change from 0 to 32768
[  183.432701][ T7110] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  183.433223][   T44] bcachefs (loop2 inum 536870913 offset 0): data data checksum error, type crc32c: got 7e264307 should be 2e87c3ce
[  183.456798][   T35] bcachefs (loop2 inum 536870913 offset 0): no device to read from
[  183.487421][   T35] bcachefs (loop2 inum 536870913 offset 0): read error 3 from btree lookup
[  183.505588][   T29] audit: type=1800 audit(1721361395.246:36): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.558" name="file0" dev="loop2" ino=536870913 res=0 errno=0
[  183.536534][ T4487] Bluetooth: hci2: Malformed Event: 0x02
[  183.572216][ T5901] bcachefs (loop2): shutting down
[  183.577278][ T5901] bcachefs (loop2): going read-only
[  183.604444][ T5901] bcachefs (loop2): finished waiting for writes to stop
[  183.649312][ T5901] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12
[  183.679008][ T5901] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13
[  183.742964][ T5901] bcachefs (loop2): shutdown complete, journal seq 14
[  183.814904][ T5901] bcachefs (loop2): marking filesystem clean
[  183.856865][ T7110] XFS (loop5): Ending clean mount
[  183.904683][ T5096] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  183.920323][ T7110] XFS (loop5): Quotacheck needed: Please wait.
[  183.985890][ T5901] bcachefs (loop2): shutdown complete
[  184.070502][ T7110] XFS (loop5): Quotacheck: Done.
[  184.235639][ T5099] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.381668][ T7191] loop1: detected capacity change from 0 to 1024
[  184.514318][ T7191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.653228][   T29] audit: type=1804 audit(1721361396.406:37): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.585" name="/newroot/47/file2/bus" dev="loop1" ino=18 res=1 errno=0
[  184.764950][   T29] audit: type=1804 audit(1721361396.406:38): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.585" name="/newroot/47/file2/bus" dev="loop1" ino=18 res=1 errno=0
[  184.955237][ T5120] Bluetooth: hci1: Malformed Event: 0x02
[  185.044968][ T7204] loop3: detected capacity change from 0 to 512
[  185.319107][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.988728][ T7226] loop1: detected capacity change from 0 to 256
[  186.046090][ T7226] FAT-fs (loop1): bogus number of directory entries (17407)
[  186.066317][ T7226] FAT-fs (loop1): Can't find a valid FAT filesystem
[  186.255856][ T7232] program syz.1.598 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  186.600727][ T7238] loop1: detected capacity change from 0 to 512
[  186.636228][ T7238] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  186.660505][ T7238] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  186.702743][ T7238] EXT4-fs (loop1): 1 truncate cleaned up
[  186.710762][ T7238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.769566][ T7228] loop0: detected capacity change from 0 to 32768
[  186.824319][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.836783][ T7228] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.037801][ T7228] XFS (loop0): Ending clean mount
[  187.057688][ T7228] XFS (loop0): Quotacheck needed: Please wait.
[  187.066368][ T5120] Bluetooth: hci2: Malformed Event: 0x02
[  187.132612][ T7228] XFS (loop0): Quotacheck: Done.
[  187.226034][ T5096] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.256077][ T5120] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260
[  187.308764][ T5120] Bluetooth: hci2: unexpected event 0x09 length: 4 > 3
[  187.938332][ T7271] program syz.1.611 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  187.939613][ T7270] loop0: detected capacity change from 0 to 256
[  187.974254][ T7270] FAT-fs (loop0): bogus number of directory entries (17407)
[  188.001647][ T7270] FAT-fs (loop0): Can't find a valid FAT filesystem
[  188.500598][ T5218] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  188.727731][ T5218] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.745517][ T5218] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  188.755969][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.780569][ T5218] usb 2-1: config 0 descriptor??
[  188.801815][ T5218] rndis_host 2-1:0.0: skipping garbage
[  188.808890][ T5218] usb 2-1: bad CDC descriptors
[  188.929229][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.597'.
[  188.958314][ T7280] netlink: 'syz.0.614': attribute type 4 has an invalid length.
[  189.116666][ T5120] Bluetooth: hci3: Malformed Event: 0x02
[  189.380256][ T5120] Bluetooth: hci1: unexpected event 0x09 length: 4 > 3
[  189.427719][ T7297] loop4: detected capacity change from 0 to 512
[  189.456167][ T7297] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  189.495473][ T7298] loop2: detected capacity change from 0 to 512
[  189.690816][ T7298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.782815][ T7298] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.684739][ T5100] usb 2-1: USB disconnect, device number 4
[  190.818908][ T7298] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  190.868319][ T7298] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28
[  190.921243][ T7298] EXT4-fs (loop2): This should not happen!! Data will be lost
[  190.921243][ T7298] 
[  190.970635][ T7298] EXT4-fs (loop2): Total free blocks count 0
[  190.987049][ T7298] EXT4-fs (loop2): Free/Dirty block details
[  191.049456][ T7298] EXT4-fs (loop2): free_blocks=65280
[  191.080771][ T7298] EXT4-fs (loop2): dirty_blocks=2
[  191.131235][ T7298] EXT4-fs (loop2): Block reservation details
[  191.150988][ T7298] EXT4-fs (loop2): i_reserved_data_blocks=2
[  191.182463][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.629'.
[  191.506038][ T5901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.294678][ T7329] netlink: 'syz.5.631': attribute type 4 has an invalid length.
[  192.620696][ T5120] Bluetooth: hci0: Malformed Event: 0x02
[  192.670792][ T5120] Bluetooth: hci3: unexpected event 0x09 length: 4 > 3
[  193.437760][ T7362] loop3: detected capacity change from 0 to 8192
[  193.653421][ T7362]  loop3: p2 p3 p4
[  193.657424][ T7362] loop3: p2 start 452985600 is beyond EOD, truncated
[  193.689726][ T7362] loop3: p3 start 4177527808 is beyond EOD, truncated
[  193.717137][ T7362] loop3: p4 size 3599499392 extends beyond EOD, truncated
[  193.808558][ T7346] infiniband syz1: set active
[  193.844125][ T1241] ieee802154 phy0 wpan0: encryption failed: -22
[  193.857329][ T1241] ieee802154 phy1 wpan1: encryption failed: -22
[  194.663807][ T7346] infiniband syz1: added veth0_vlan
[  194.695941][ T7373] netlink: 'syz.5.648': attribute type 4 has an invalid length.
[  194.719372][ T7346] syz1: rxe_create_cq: returned err = -12
[  194.791246][ T7346] infiniband syz1: Couldn't create ib_mad CQ
[  194.841012][ T7346] infiniband syz1: Couldn't open port 1
[  194.858071][ T7338] loop1: detected capacity change from 0 to 32768
[  194.911277][ T7338] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got 389e9d8f should be 29d2fb78
[  195.023350][ T5163] udevd[5163]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  195.095412][ T7346] RDS/IB: syz1: added
[  195.100287][ T7346] smc: adding ib device syz1 with port count 1
[  195.152244][ T7346] smc:    ib device syz1 port 1 has pnetid 
[  195.178721][ T5120] Bluetooth: hci4: Malformed Event: 0x02
[  195.265053][ T7392] loop0: detected capacity change from 0 to 256
[  195.383646][ T5120] Bluetooth: hci4: unexpected event 0x09 length: 4 > 3
[  195.385219][ T7392] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d)
[  195.535649][ T7338] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  195.574712][ T7338] bcachefs (loop1): recovering from clean shutdown, journal seq 7
[  195.620808][ T7338] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  195.674843][ T7338] bcachefs (loop1): bch2_fs_recovery(): error EINTR
[  195.704171][ T7338] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR
[  195.745119][ T7338] bcachefs (loop1): shutting down
[  195.840258][ T7338] bcachefs (loop1): shutdown complete
[  197.310665][ T7423] netlink: 'syz.3.664': attribute type 4 has an invalid length.
[  197.448115][ T5120] Bluetooth: hci0: Malformed Event: 0x02
[  198.093978][ T7400] loop5: detected capacity change from 0 to 32768
[  198.229172][ T7400] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.267670][ T7338] bcachefs: bch2_mount() error: EINTR
[  198.441655][ T5120] Bluetooth: hci0: unexpected event 0x09 length: 4 > 3
[  198.639784][ T7400] XFS (loop5): Ending clean mount
[  198.711447][ T7400] XFS (loop5): Quotacheck needed: Please wait.
[  198.819586][ T7400] XFS (loop5): Quotacheck: Done.
[  200.262099][ T5099] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  201.200924][ T4487] Bluetooth: hci3: command 0x0406 tx timeout
[  201.371042][ T5100] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  201.596677][ T5100] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  201.618655][ T5100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.656784][ T5100] usb 3-1: config 0 descriptor??
[  201.698240][ T5100] cp210x 3-1:0.0: cp210x converter detected
[  201.890567][ T5168] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  201.903465][ T5100] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  201.942002][ T5100] cp210x 3-1:0.0: querying part number failed
[  201.980970][ T5100] usb 3-1: cp210x converter now attached to ttyUSB0
[  202.003197][ T5100] usb 3-1: USB disconnect, device number 4
[  202.037168][ T5100] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  202.072183][ T5100] cp210x 3-1:0.0: device disconnected
[  202.079384][ T5120] Bluetooth: hci3: Malformed Event: 0x02
[  202.132679][ T5168] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  202.161566][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.192509][ T5168] usb 2-1: config 0 descriptor??
[  203.611496][ T7494] loop0: detected capacity change from 0 to 32768
[  203.681210][ T7494] bcachefs (/dev/loop0): error reading default superblock: checksum error, type crc32c_nonzero: got 389e9d8f should be 29d2fb78
[  203.787634][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  203.922183][ T7530] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  204.054119][ T7494] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  204.072113][ T7494] bcachefs (loop0): recovering from clean shutdown, journal seq 7
[  204.177598][ T7494] bcachefs (loop0): alloc_read... done
[  204.198114][ T7494] bcachefs (loop0): stripes_read... done
[  204.203184][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.699'.
[  204.220735][ T7494] bcachefs (loop0): snapshots_read... done
[  204.269283][ T7494] bcachefs (loop0): going read-write
[  204.285819][ T7494] bcachefs (loop0): journal_replay...
[  204.308503][ T7494] bcachefs (loop0): bch2_journal_replay(): error ERESTARTSYS
[  204.371514][ T7494] bcachefs (loop0): bch2_fs_recovery(): error ERESTARTSYS
[  204.460242][ T7494] bcachefs (loop0): bch2_fs_start(): error starting filesystem ERESTARTSYS
[  204.470631][ T7494] bcachefs (loop0): shutting down
[  204.475679][ T7494] bcachefs (loop0): going read-only
[  204.533120][ T7494] bcachefs (loop0): finished waiting for writes to stop
[  204.562288][ T5168] pegasus 2-1:0.0: probe with driver pegasus failed with error -110
[  204.580738][ T7494] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11
[  204.628120][ T7494] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11
[  204.691656][ T7494] bcachefs (loop0): unshutdown complete, journal seq 11
[  204.705473][ T7494] bcachefs (loop0): done going read-only, filesystem not clean
[  204.817597][ T7494] bcachefs (loop0): shutdown complete
[  205.043600][ T5168] usb 2-1: USB disconnect, device number 5
[  205.196076][ T7548] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  205.697480][ T5120] Bluetooth: hci2: Malformed Event: 0x02
[  206.497085][ T7562] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(46423621300093) <= P.seqno(0) <= S.SWH(46423621300167)) and (P.ackno exists or LAWL(24343135276727) <= P.ackno(24343135276729) <= S.AWH(24343135276729), sending SYNC...
[  207.077811][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.712'.
[  207.132830][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'.
[  207.159661][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'.
[  207.409625][ T7494] bcachefs: bch2_mount() error: ERESTARTSYS
[  207.415862][   T29] audit: type=1326 audit(1721361419.156:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.3.718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7582d75b59 code=0x0
[  207.450647][ T5168] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  207.461528][ T7586] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  207.662499][ T5168] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  207.692471][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.722521][ T5168] usb 2-1: config 0 descriptor??
[  208.423250][ T7598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.723'.
[  210.179140][ T7580] loop4: detected capacity change from 0 to 32768
[  210.225608][ T7580] bcachefs (/dev/loop4): error reading default superblock: checksum error, type crc32c_nonzero: got 389e9d8f should be 29d2fb78
[  210.296598][ T7580] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR
[  210.297049][ T7580] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete
[  210.350131][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.729'.
[  210.374740][ T7580] bcachefs: bch2_mount() error: ENOMEM_fs_other_alloc
[  210.394116][ T5168] pegasus 2-1:0.0: can't reset MAC
[  210.399538][ T5168] pegasus 2-1:0.0: probe with driver pegasus failed with error -5
[  210.482881][ T5168] usb 2-1: USB disconnect, device number 6
[  210.581860][ T7615] loop0: detected capacity change from 0 to 2048
[  210.627040][ T7615] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18881, location=18881
[  211.054877][   T29] audit: type=1326 audit(1721361422.806:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.733" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7582d75b59 code=0x0
[  211.788320][   T29] audit: type=1326 audit(1721361423.536:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.5.736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd301b75b59 code=0x0
[  212.269497][ T7641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.737'.
[  212.463239][ T7649] syz1: rxe_newlink: already configured on veth0_vlan
[  213.266345][ T7623] loop2: detected capacity change from 0 to 32768
[  213.309644][ T7623] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got 389e9d8f should be 29d2fb78
[  213.372345][    T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  213.514955][ T7672] Invalid logical block size (127)
[  213.533546][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  213.573675][    T9] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  213.589383][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.633025][ T7623] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  213.648838][    T9] usb 5-1: config 0 descriptor??
[  213.666646][ T7623] bcachefs (loop2): recovering from clean shutdown, journal seq 7
[  213.695796][ T7623] bcachefs (loop2): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  213.731456][ T7623] bcachefs (loop2): bch2_fs_recovery(): error EINTR
[  213.789918][ T7623] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR
[  213.811044][ T7623] bcachefs (loop2): shutting down
[  213.880916][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'.
[  213.945948][ T7623] bcachefs (loop2): shutdown complete
[  214.325679][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  214.563385][   T29] audit: type=1326 audit(1721361426.306:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.3.750" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7582d75b59 code=0x0
[  215.354479][    T9] pegasus 5-1:0.0: can't reset MAC
[  215.359895][    T9] pegasus 5-1:0.0: probe with driver pegasus failed with error -5
[  215.407917][ T7659] loop0: detected capacity change from 0 to 32768
[  215.428959][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.5.752'.
[  215.434484][    T9] usb 5-1: USB disconnect, device number 4
[  215.468077][ T7659] bcachefs (/dev/loop0): error reading default superblock: checksum error, type crc32c_nonzero: got 389e9d8f should be 29d2fb78
[  215.633414][ T7701] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  215.761224][ T7623] bcachefs: bch2_mount() error: EINTR
[  215.803912][ T7659] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  215.848004][ T7706] loop5: detected capacity change from 0 to 512
[  215.860856][ T7659] bcachefs (loop0): recovering from clean shutdown, journal seq 7
[  215.893232][ T7706] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  216.049740][ T7706] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  216.065441][ T7659] bcachefs (loop0): alloc_read... done
[  216.114724][ T7659] bcachefs (loop0): stripes_read... done
[  216.147008][ T7659] bcachefs (loop0): snapshots_read... done
[  216.163079][ T7706] EXT4-fs (loop5): 1 truncate cleaned up
[  216.188754][ T7706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.439952][ T7659] bcachefs (loop0): going read-write
[  216.466346][ T7659] bcachefs (loop0): journal_replay...
[  216.510173][ T7659] bcachefs (loop0): bch2_journal_replay(): error ERESTARTSYS
[  216.528781][ T7659] bcachefs (loop0): bch2_fs_recovery(): error ERESTARTSYS
[  216.565111][ T7659] bcachefs (loop0): bch2_fs_start(): error starting filesystem ERESTARTSYS
[  216.592489][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  216.643351][ T7659] bcachefs (loop0): shutting down
[  216.716589][ T7659] bcachefs (loop0): going read-only
[  216.771307][ T7659] bcachefs (loop0): finished waiting for writes to stop
[  216.843873][ T5099] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.884379][    T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  216.951801][ T7659] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10
[  216.991166][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.031462][ T7659] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10
[  217.092005][ T7720] loop1: detected capacity change from 0 to 512
[  217.110876][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.130320][ T7659] bcachefs (loop0): unshutdown complete, journal seq 10
[  217.152523][ T7720] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  217.171693][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  217.196133][ T7659] bcachefs (loop0): done going read-only, filesystem not clean
[  217.241487][ T7720] EXT4-fs (loop1): 1 truncate cleaned up
[  217.261490][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  217.288682][ T7720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.313346][    T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  217.355456][    T9] usb 5-1: Manufacturer: syz
[  217.400773][    T9] usb 5-1: config 0 descriptor??
[  217.465678][ T7659] bcachefs (loop0): shutdown complete
[  217.592743][ T7723] syzkaller0: entered promiscuous mode
[  217.598414][ T7723] syzkaller0: entered allmulticast mode
[  217.778869][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  217.853634][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  217.878065][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  217.910737][    T9] usb 5-1: USB disconnect, device number 5
[  218.022645][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.164578][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.766'.
[  218.521067][ T7747] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  218.702114][ T7659] bcachefs: bch2_mount() error: ERESTARTSYS
[  219.152442][ T5218] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  220.250543][ T5218] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  220.259633][ T5218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.386935][ T5218] usb 4-1: config 0 descriptor??
[  221.018796][   T29] audit: type=1326 audit(1721361432.636:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.4.778" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7301975b59 code=0x0
[  221.806076][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.781'.
[  221.871210][ T7764] loop2: detected capacity change from 0 to 32768
[  221.873800][    T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  221.909323][ T5218] pegasus 4-1:0.0: can't reset MAC
[  221.922763][ T5218] pegasus 4-1:0.0: probe with driver pegasus failed with error -5
[  221.950847][ T5218] usb 4-1: USB disconnect, device number 3
[  221.991872][ T7764] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  222.067449][ T7799] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  222.122943][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.159497][    T8] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  222.188291][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.236223][    T8] usb 2-1: config 0 descriptor??
[  222.322953][ T7764] XFS (loop2): Ending clean mount
[  222.330665][ T5100] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  222.359033][ T7764] XFS (loop2): Quotacheck needed: Please wait.
[  222.465659][ T7764] XFS (loop2): Quotacheck: Done.
[  222.546955][ T5901] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  222.552730][ T5100] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.611961][ T5100] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.636709][ T5100] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  222.647596][ T5100] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.681656][ T5100] usb 6-1: config 0 descriptor??
[  222.693805][    T8] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[  222.746974][    T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input9
[  222.984881][    T8] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  223.037715][ T7805] loop0: detected capacity change from 0 to 32768
[  223.050682][    T8] usb 2-1: USB disconnect, device number 7
[  223.069892][ T7805] bcachefs (/dev/loop0): error reading default superblock: checksum error, type crc32c_nonzero: got 389e9d8f should be 29d2fb78
[  223.306651][ T5100] usb 6-1: language id specifier not provided by device, defaulting to English
[  223.385950][ T7805] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  223.400746][ T7805] bcachefs (loop0): recovering from clean shutdown, journal seq 7
[  223.733372][ T7805] bcachefs (loop0): alloc_read... done
[  223.738950][ T7805] bcachefs (loop0): stripes_read... done
[  224.468247][ T7805] bcachefs (loop0): snapshots_read... done
[  224.525922][ T5100] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71
[  224.610528][ T5100] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71
[  224.619320][ T7805] bcachefs (loop0): going read-write
[  224.673502][ T7805] bcachefs (loop0): journal_replay...
[  224.675537][ T5100] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71
[  224.743479][ T7805]  done
[  224.752027][ T7805] bcachefs (loop0): resume_logged_ops... done
[  224.819669][ T7805] bcachefs (loop0): delete_dead_inodes... done
[  224.827128][ T5100] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[  224.869770][ T5100] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71
[  224.881520][ T7830] program syz.3.792 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  224.932307][ T7805] bcachefs (loop0): done starting filesystem
[  224.990706][ T5100] usb 6-1: USB disconnect, device number 9
[  225.103998][   T41] bcachefs (loop0 inum 536870913 offset 0): data data checksum error, type crc32c: got 7e264307 should be 2e87c3ce
[  225.119241][   T53] bcachefs (loop0 inum 536870913 offset 0): no device to read from
[  225.154409][   T29] audit: type=1804 audit(1721361436.906:44): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.787" name="/newroot/157/file0/file0/file0" dev="loop0" ino=536870913 res=1 errno=0
[  225.210945][   T53] bcachefs (loop0 inum 536870913 offset 0): read error 3 from btree lookup
[  225.273070][   T41] bcachefs (loop0 inum 536870913 offset 0): data data checksum error, type crc32c: got 7e264307 should be 2e87c3ce
[  225.285502][   T53] bcachefs (loop0 inum 536870913 offset 0): no device to read from
[  225.303727][   T53] bcachefs (loop0 inum 536870913 offset 0): read error 3 from btree lookup
[  225.315876][   T29] audit: type=1800 audit(1721361437.066:45): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.787" name="file0" dev="loop0" ino=536870913 res=0 errno=0
[  225.316432][   T44] bcachefs (loop0 inum 536870913 offset 0): data data checksum error, type crc32c: got 7e264307 should be 2e87c3ce
[  225.351914][ T5747] bcachefs (loop0 inum 536870913 offset 0): no device to read from
[  225.359851][ T5747] bcachefs (loop0 inum 536870913 offset 0): read error 3 from btree lookup
[  225.441700][ T7845] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  225.473132][ T5096] bcachefs (loop0): shutting down
[  225.478190][ T5096] bcachefs (loop0): going read-only
[  225.483601][ T5096] bcachefs (loop0): finished waiting for writes to stop
[  225.484905][ T7846] netlink: 16 bytes leftover after parsing attributes in process `syz.5.797'.
[  225.540487][ T5096] bcachefs (loop0): flushing journal and stopping allocators, journal seq 14
[  225.568958][ T5168] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  225.600797][ T5096] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14
[  225.637133][ T5096] bcachefs (loop0): shutdown complete, journal seq 15
[  225.662252][ T5096] bcachefs (loop0): marking filesystem clean
[  225.792180][ T5168] usb 2-1: Using ep0 maxpacket: 16
[  225.839219][ T5168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  225.880545][ T5168] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  225.889664][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.945535][ T5168] usb 2-1: config 0 descriptor??
[  225.952715][ T5096] bcachefs (loop0): shutdown complete
[  226.186225][ T7840] capability: warning: `syz.1.794' uses deprecated v2 capabilities in a way that may be insecure
[  226.464532][ T7840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.487167][ T7840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.509325][ T5168] hid (null): report_id 0 is invalid
[  226.523451][ T5168] hid (null): report_id 2838798905 is invalid
[  226.557138][ T5168] hid (null): unknown global tag 0xc
[  226.570837][ T5168] hid (null): unknown global tag 0xa5
[  226.596594][ T5168] hid (null): unknown global tag 0xd
[  226.619179][ T5168] hid (null): unknown global tag 0xc
[  226.687585][ T5168] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1
[  226.738009][ T5168] hid-generic 0003:0158:0100.0004: unexpected long global item
[  226.798011][ T5168] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22
[  226.829897][ T7850] loop3: detected capacity change from 0 to 32768
[  227.022208][   T29] audit: type=1326 audit(1721361438.626:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.4.802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7301975b59 code=0x0
[  227.553243][ T7850] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  227.566935][ T5168] usb 2-1: USB disconnect, device number 8
[  227.627744][ T7867] futex_wake_op: syz.1.803 tries to shift op by -1; fix this program
[  228.031442][ T7850] XFS (loop3): Ending clean mount
[  228.052068][ T7850] XFS (loop3): Quotacheck needed: Please wait.
[  228.122870][ T7850] XFS (loop3): Quotacheck: Done.
[  228.329341][ T5937] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  228.530675][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'.
[  228.555371][ T5100] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  228.600797][ T7893] loop0: detected capacity change from 0 to 512
[  228.644617][ T7893] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  228.798591][ T7893] EXT4-fs (loop0): 1 orphan inode deleted
[  228.827592][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.816'.
[  228.860497][ T5100] usb 2-1: Using ep0 maxpacket: 32
[  228.871059][ T7893] EXT4-fs (loop0): 1 truncate cleaned up
[  228.875721][ T5100] usb 2-1: config 140 has too many interfaces: 215, using maximum allowed: 32
[  228.885773][ T5100] usb 2-1: config 140 has an invalid descriptor of length 81, skipping remainder of the config
[  228.917710][ T5100] usb 2-1: config 140 has 2 interfaces, different from the descriptor's value: 215
[  228.934182][ T7893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.940644][ T5100] usb 2-1: config 140 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.968461][ T5100] usb 2-1: config 140 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.022948][ T5100] usb 2-1: config 140 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  229.067818][ T5100] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  229.106289][ T5100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.160510][ T5100] usb 2-1: Product: syz
[  229.169935][ T5100] usb 2-1: Manufacturer: syz
[  229.188029][ T5100] usb 2-1: SerialNumber: syz
[  229.194822][ T7901] Illegal XDP return value 4294967274 on prog  (id 136) dev N/A, expect packet loss!
[  229.247549][ T5096] EXT4-fs error (device loop0): __ext4_iget:4906: inode #11: block 524051: comm syz-executor: invalid block
[  229.293603][ T5096] EXT4-fs error (device loop0): __ext4_iget:4906: inode #11: block 524051: comm syz-executor: invalid block
[  229.350697][ T7903] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  229.472868][ T5100] cdc_ncm 2-1:140.0: bind() failure
[  229.503581][ T5100] cdc_ncm 2-1:140.1: CDC Union missing and no IAD found
[  229.527330][ T5100] cdc_ncm 2-1:140.1: bind() failure
[  229.538043][ T5470] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.545885][ T5100] usb 2-1: USB disconnect, device number 9
[  229.617362][ T7890] loop4: detected capacity change from 0 to 32768
[  229.663712][ T7890] bcachefs (/dev/loop4): error reading default superblock: checksum error, type crc32c_nonzero: got 389e9d8f should be 29d2fb78
[  229.791496][ T5169] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  229.873982][ T7890] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  229.886345][ T7890] bcachefs (loop4): recovering from clean shutdown, journal seq 7
[  229.926050][ T7890] bcachefs (loop4): alloc_read... done
[  229.943764][ T7890] bcachefs (loop4): stripes_read... done
[  229.949475][ T7890] bcachefs (loop4): snapshots_read... done
[  230.006613][ T7890] bcachefs (loop4): going read-write
[  230.035578][ T5169] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  230.046637][ T7890] bcachefs (loop4): journal_replay...
[  230.058523][ T5169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.101398][ T7890]  done
[  230.106975][ T7890] bcachefs (loop4): resume_logged_ops... done
[  230.125031][ T5169] usb 3-1: config 0 descriptor??
[  230.141338][ T7890] bcachefs (loop4): delete_dead_inodes... done
[  230.163113][ T5407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.180711][ T7890] bcachefs (loop4): done starting filesystem
[  230.347405][ T5756] bcachefs (loop4): shutting down
[  230.365476][ T5756] bcachefs (loop4): going read-only
[  230.377758][ T5756] bcachefs (loop4): finished waiting for writes to stop
[  230.391918][ T5756] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11
[  230.395317][ T5407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.424745][ T5756] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11
[  230.455936][ T5756] bcachefs (loop4): shutdown complete, journal seq 12
[  230.465057][ T5756] bcachefs (loop4): marking filesystem clean
[  230.592985][ T5756] bcachefs (loop4): shutdown complete
[  230.752969][ T5407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.926549][ T5407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.145244][ T5169] pegasus 3-1:0.0: probe with driver pegasus failed with error -121
[  231.361758][ T5120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  231.376432][ T5120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  231.385452][ T5120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  231.397494][ T5100] usb 3-1: USB disconnect, device number 5
[  231.410807][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  231.429076][ T5120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  231.429701][ T5407] team0: left allmulticast mode
[  231.442519][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  231.533725][ T5407] team_slave_0: left allmulticast mode
[  231.539598][ T5407] team_slave_1: left allmulticast mode
[  231.553903][ T5407] bridge0: port 3(team0) entered disabled state
[  231.594666][ T5407] bridge_slave_1: left allmulticast mode
[  231.607640][ T5407] bridge_slave_1: left promiscuous mode
[  231.631488][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.703833][ T5407] bridge_slave_0: left allmulticast mode
[  231.719927][ T5407] bridge_slave_0: left promiscuous mode
[  231.751753][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.445234][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'.
[  232.771345][ T7958] loop5: detected capacity change from 0 to 1024
[  232.810987][ T7958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.886165][ T5407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.903354][ T5407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.923296][ T5407] bond0 (unregistering): Released all slaves
[  232.934910][ T5099] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.011887][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'.
[  233.515152][ T7976] loop2: detected capacity change from 0 to 512
[  233.521772][ T5120] Bluetooth: hci1: command tx timeout
[  233.541497][ T7976] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  233.581278][ T5100] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  234.000646][ T5100] usb 6-1: Using ep0 maxpacket: 32
[  234.086793][ T5100] usb 6-1: config 140 has too many interfaces: 215, using maximum allowed: 32
[  234.229149][ T5100] usb 6-1: config 140 has an invalid descriptor of length 81, skipping remainder of the config
[  234.396784][ T5100] usb 6-1: config 140 has 2 interfaces, different from the descriptor's value: 215
[  234.473746][ T5100] usb 6-1: config 140 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.541959][ T5100] usb 6-1: config 140 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.618803][ T5100] usb 6-1: config 140 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  234.642917][ T7968] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  234.749532][ T5100] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  234.827104][ T5100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.876002][ T5100] usb 6-1: Product: syz
[  234.880214][ T5100] usb 6-1: Manufacturer: syz
[  234.884480][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'.
[  234.935860][ T5100] usb 6-1: SerialNumber: syz
[  234.968223][ T7989] loop2: detected capacity change from 0 to 4096
[  234.984795][ T7989] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  235.313760][ T7967] loop4: detected capacity change from 0 to 40427
[  235.400824][   T29] audit: type=1326 audit(1721361447.146:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.3.841" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7582d75b59 code=0x0
[  235.600990][ T5120] Bluetooth: hci1: command tx timeout
[  235.787450][ T7967] F2FS-fs (loop4): invalid crc value
[  235.890840][ T7989] ntfs3: loop2: Inode r=b is not in use!
[  235.896610][ T7989] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  235.936664][ T8000] loop1: detected capacity change from 0 to 1024
[  235.971074][ T7989] ntfs3: loop2: Failed to load $Extend (-116).
[  236.006345][ T7989] ntfs3: loop2: Failed to initialize $Extend.
[  236.040130][ T7967] F2FS-fs (loop4): Found nat_bits in checkpoint
[  236.069544][ T8000] ext4: Unknown parameter 'nouser_xattr'
[  236.130360][ T5100] cdc_ncm 6-1:140.0: bind() failure
[  236.144146][ T5100] cdc_ncm 6-1:140.1: CDC Union missing and no IAD found
[  236.170638][ T5100] cdc_ncm 6-1:140.1: bind() failure
[  236.238481][ T5100] usb 6-1: USB disconnect, device number 10
[  236.709546][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'.
[  236.951643][ T7924] chnl_net:caif_netlink_parms(): no params data found
[  237.230592][ T5100] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  237.323222][ T5407] hsr_slave_0: left promiscuous mode
[  237.335103][ T8038] loop2: detected capacity change from 0 to 512
[  237.366934][ T8038] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  237.391689][ T5407] hsr_slave_1: left promiscuous mode
[  237.472699][ T5100] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  237.510493][ T5100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.559532][ T5100] usb 2-1: config 0 descriptor??
[  237.601478][ T5100] cp210x 2-1:0.0: cp210x converter detected
[  237.610677][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.648721][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.690561][ T5120] Bluetooth: hci1: command tx timeout
[  237.697082][ T5407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.704587][ T5407] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.549069][ T5100] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  238.560004][ T5100] cp210x 2-1:0.0: querying part number failed
[  238.581760][ T5100] usb 2-1: cp210x converter now attached to ttyUSB0
[  238.613065][ T5100] usb 2-1: USB disconnect, device number 10
[  238.643307][ T5100] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  238.670065][ T5407] veth1_macvtap: left promiscuous mode
[  238.716938][ T5100] cp210x 2-1:0.0: device disconnected
[  238.736129][ T5407] veth0_macvtap: left promiscuous mode
[  238.748221][ T8045] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  238.772189][ T5407] veth1_vlan: left promiscuous mode
[  238.778006][ T5407] veth0_vlan: left promiscuous mode
[  239.211867][ T8056] loop2: detected capacity change from 0 to 4096
[  239.229322][ T8056] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  239.320755][ T8056] ntfs3: loop2: Inode r=b is not in use!
[  239.327208][ T8056] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  239.357816][ T8056] ntfs3: loop2: Failed to load $Extend (-116).
[  239.369931][ T8056] ntfs3: loop2: Failed to initialize $Extend.
[  239.761020][ T5120] Bluetooth: hci1: command tx timeout
[  239.978046][ T5407] team_slave_1 (unregistering): left promiscuous mode
[  239.989055][    T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  240.006065][ T5407] team0 (unregistering): Port device team_slave_1 removed
[  240.050198][ T5407] team_slave_0 (unregistering): left promiscuous mode
[  240.060899][ T5407] team0 (unregistering): Port device team_slave_0 removed
[  240.194181][    T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  240.221574][    T8] usb 3-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  240.248051][    T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  240.258559][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.295676][    T8] usb 3-1: invalid MIDI out EP 0
[  240.508232][    T8] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  240.533754][ T8058] loop2: detected capacity change from 0 to 2048
[  240.565266][ T8058] ext4: Unknown parameter 'nouser_xattr'
[  240.664296][ T5576] udevd[5576]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  240.814919][ T5167] usb 3-1: USB disconnect, device number 6
[  241.068840][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'.
[  241.314903][ T7924] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.339566][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.354713][ T7924] bridge_slave_0: entered allmulticast mode
[  241.393446][ T7924] bridge_slave_0: entered promiscuous mode
[  241.413927][ T7924] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.434287][ T8079] vxcan1: tx address claim with different name
[  241.444874][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.672847][ T4506] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  241.681496][ T5167] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  241.718692][ T7924] bridge_slave_1: entered allmulticast mode
[  241.727120][ T7924] bridge_slave_1: entered promiscuous mode
[  242.021259][ T4506] usb 2-1: Using ep0 maxpacket: 32
[  242.035155][ T5167] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  242.080527][   T55] Bluetooth: hci5: command 0x0406 tx timeout
[  242.096315][ T5167] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  242.114005][ T4506] usb 2-1: config 140 has too many interfaces: 215, using maximum allowed: 32
[  242.444437][ T5167] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  242.470455][ T4506] usb 2-1: config 140 has an invalid descriptor of length 81, skipping remainder of the config
[  242.704876][ T5167] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.765932][ T4506] usb 2-1: config 140 has 2 interfaces, different from the descriptor's value: 215
[  242.808137][ T5167] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  242.826098][ T4506] usb 2-1: config 140 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.848661][ T5167] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  242.883114][ T4506] usb 2-1: config 140 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.892457][ T7924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.917333][ T5167] usb 4-1: Product: syz
[  242.932239][ T5167] usb 4-1: Manufacturer: syz
[  242.959887][ T4506] usb 2-1: config 140 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  243.000246][ T7924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.010906][ T5167] cdc_wdm 4-1:1.0: skipping garbage
[  243.016134][ T5167] cdc_wdm 4-1:1.0: skipping garbage
[  243.045246][ T4506] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  243.066167][ T5167] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  243.080751][ T4506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.088766][ T4506] usb 2-1: Product: syz
[  243.108426][ T5167] cdc_wdm 4-1:1.0: Unknown control protocol
[  243.149271][ T4506] usb 2-1: Manufacturer: syz
[  243.159620][ T4506] usb 2-1: SerialNumber: syz
[  243.300623][ T5167] usb 4-1: USB disconnect, device number 4
[  243.408722][ T7924] team0: Port device team_slave_0 added
[  243.463534][ T7924] team0: Port device team_slave_1 added
[  243.507854][ T4506] cdc_ncm 2-1:140.0: bind() failure
[  243.537768][ T4506] cdc_ncm 2-1:140.1: CDC Union missing and no IAD found
[  243.563948][ T4506] cdc_ncm 2-1:140.1: bind() failure
[  243.590695][ T4506] usb 2-1: USB disconnect, device number 11
[  244.048617][ T7924] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.080864][ T7924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.147945][ T8117] binder: BINDER_SET_CONTEXT_MGR already set
[  244.154571][ T8117] binder: 8108:8117 ioctl 4018620d 200002c0 returned -16
[  244.569167][ T7924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.683873][ T7924] batman_adv: batadv0: Adding interface: batadv_slave_1
[  244.755724][ T7924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.882290][ T7924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.917675][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'.
[  245.506990][ T7924] hsr_slave_0: entered promiscuous mode
[  245.518225][ T8146] loop1: detected capacity change from 0 to 256
[  246.217728][ T8140] loop3: detected capacity change from 0 to 4096
[  246.286544][ T7924] hsr_slave_1: entered promiscuous mode
[  246.308663][ T8140] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  246.582236][ T8140] ntfs3: loop3: failed to convert "c46c" to cp857
[  247.120916][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  247.545823][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  247.666405][ T8185] binder: BINDER_SET_CONTEXT_MGR already set
[  247.672619][ T8185] binder: 8176:8185 ioctl 4018620d 200002c0 returned -16
[  247.963126][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.886'.
[  248.449768][    T8] usb 4-1: Using ep0 maxpacket: 32
[  248.471509][    T8] usb 4-1: config 140 has too many interfaces: 215, using maximum allowed: 32
[  248.505664][    T8] usb 4-1: config 140 has an invalid descriptor of length 81, skipping remainder of the config
[  248.754849][    T8] usb 4-1: config 140 has 2 interfaces, different from the descriptor's value: 215
[  248.816870][    T8] usb 4-1: config 140 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.567494][    T8] usb 4-1: config 140 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.650852][    T8] usb 4-1: config 140 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  249.760895][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  249.811827][ T5169] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  249.833453][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.880673][    T8] usb 4-1: Product: syz
[  249.884877][    T8] usb 4-1: Manufacturer: syz
[  249.956104][    T8] usb 4-1: SerialNumber: syz
[  250.013796][    T8] usb 4-1: can't set config #140, error -71
[  250.036922][ T5169] usb 3-1: device descriptor read/64, error -71
[  250.084492][    T8] usb 4-1: USB disconnect, device number 5
[  250.360563][ T5169] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  250.455583][ T7924] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  250.530788][ T7924] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  250.552770][ T5169] usb 3-1: device descriptor read/64, error -71
[  250.568048][ T7924] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  250.626677][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'.
[  250.627189][ T7924] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  250.671009][ T5169] usb usb3-port1: attempt power cycle
[  251.120558][ T5169] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  251.379107][ T5169] usb 3-1: device descriptor read/8, error -71
[  251.770999][ T5169] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  251.886166][ T5169] usb 3-1: device descriptor read/8, error -71
[  251.976835][ T7924] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.048696][ T5169] usb usb3-port1: unable to enumerate USB device
[  252.061189][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'.
[  252.174995][ T7924] 8021q: adding VLAN 0 to HW filter on device team0
[  252.225660][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.232873][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.246556][ T5120] Bluetooth: hci4: command 0x0406 tx timeout
[  252.260474][ T5113] Bluetooth: hci2: command 0x0406 tx timeout
[  252.353405][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.360615][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.342329][ T4506] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  253.511048][ T4506] usb 2-1: device descriptor read/64, error -71
[  253.883426][ T8287] loop4: detected capacity change from 0 to 1024
[  254.030575][ T4506] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  254.088045][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.921'.
[  254.094418][ T8287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.270527][ T4506] usb 2-1: device descriptor read/64, error -71
[  254.341418][ T7924] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.401504][ T4506] usb usb2-port1: attempt power cycle
[  254.563505][ T7924] veth0_vlan: entered promiscuous mode
[  254.584223][ T5756] EXT4-fs error (device loop4): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  254.654676][ T7924] veth1_vlan: entered promiscuous mode
[  254.698058][ T7924] veth0_macvtap: entered promiscuous mode
[  254.714841][ T5756] EXT4-fs error (device loop4): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  254.747128][ T5756] EXT4-fs error (device loop4): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  254.760621][ T7924] veth1_macvtap: entered promiscuous mode
[  254.807400][ T5756] EXT4-fs error (device loop4): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  254.840546][ T4506] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  254.870573][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.872843][ T5756] EXT4-fs error (device loop4): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  254.913113][ T4506] usb 2-1: device descriptor read/8, error -71
[  254.933247][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.972721][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.004133][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.011272][ T5756] EXT4-fs error (device loop4): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  255.048304][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.053880][ T5756] EXT4-fs error (device loop4): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  255.078664][ T5756] EXT4-fs error (device loop4): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  255.117500][ T5756] EXT4-fs error (device loop4): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  255.133306][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.158077][ T5756] EXT4-fs error (device loop4): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  255.187064][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.240533][ T4506] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  255.277842][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.301127][ T1241] ieee802154 phy0 wpan0: encryption failed: -22
[  255.307524][ T1241] ieee802154 phy1 wpan1: encryption failed: -22
[  255.326325][ T4506] usb 2-1: device descriptor read/8, error -71
[  255.379747][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.454756][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.484174][ T7924] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.507393][ T4506] usb usb2-port1: unable to enumerate USB device
[  255.555916][ T8317] netlink: 'syz.3.930': attribute type 4 has an invalid length.
[  255.677956][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.732740][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.793057][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.844313][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.894976][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.967032][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.030483][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.046884][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.057112][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.300824][    T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  256.342534][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.611653][ T7924] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.708793][    T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.739084][ T7924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.781355][    T8] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  256.808210][ T7924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.849166][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.876301][ T7924] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.906750][    T8] usb 6-1: config 0 descriptor??
[  256.931148][ T7924] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.947911][    T8] rndis_host 6-1:0.0: skipping garbage
[  257.035655][    T8] usb 6-1: bad CDC descriptors
[  257.198164][ T8345] netlink: 'syz.1.935': attribute type 10 has an invalid length.
[  257.209558][ T8345] netlink: 2 bytes leftover after parsing attributes in process `syz.1.935'.
[  257.232834][ T8345] team0: entered promiscuous mode
[  257.242041][ T8345] team_slave_0: entered promiscuous mode
[  257.278158][ T8345] team_slave_1: entered promiscuous mode
[  257.311792][ T8345] bridge0: port 3(team0) entered blocking state
[  257.328276][ T8345] bridge0: port 3(team0) entered disabled state
[  257.336194][ T8345] team0: entered allmulticast mode
[  257.359509][ T8345] team_slave_0: entered allmulticast mode
[  257.367695][ T8345] team_slave_1: entered allmulticast mode
[  257.436094][ T6995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.470578][ T8345] bridge0: port 3(team0) entered blocking state
[  257.477031][ T8345] bridge0: port 3(team0) entered forwarding state
[  257.800329][   T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.878011][ T8360] loop3: detected capacity change from 0 to 1024
[  257.934286][ T5167] usb 6-1: USB disconnect, device number 11
[  257.947206][ T8360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.067438][   T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.273415][   T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.285890][ T5937] EXT4-fs error (device loop3): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  258.326725][ T5937] EXT4-fs error (device loop3): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  258.372250][ T5937] EXT4-fs error (device loop3): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  258.429422][ T5937] EXT4-fs error (device loop3): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  258.476592][ T5937] EXT4-fs error (device loop3): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  258.495658][   T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.581053][ T5937] EXT4-fs error (device loop3): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  258.613092][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.634028][ T5937] EXT4-fs error (device loop3): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  258.655926][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.693597][ T5937] EXT4-fs error (device loop3): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  258.766756][ T5937] EXT4-fs error (device loop3): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  258.839462][ T5937] EXT4-fs error (device loop3): ext4_empty_dir:3038: inode #11: comm syz-executor: invalid size
[  258.858615][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.861923][ T8382] netlink: 'syz.1.945': attribute type 4 has an invalid length.
[  258.878448][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.040795][ T4506] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  259.214443][   T53] bridge_slave_1: left allmulticast mode
[  259.221531][ T4506] usb 6-1: device descriptor read/64, error -71
[  259.262615][   T53] bridge_slave_1: left promiscuous mode
[  259.263407][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  259.268491][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.292133][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  259.300813][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  259.315154][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  259.323904][   T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  259.334075][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  259.547872][   T53] bridge_slave_0: left allmulticast mode
[  259.552924][ T4506] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  259.564418][   T53] bridge_slave_0: left promiscuous mode
[  259.570202][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.926991][ T8397] binder: BINDER_SET_CONTEXT_MGR already set
[  259.934443][ T8397] binder: 8389:8397 ioctl 4018620d 200002c0 returned -16
[  260.448565][ T8370] loop2: detected capacity change from 0 to 32768
[  260.496772][ T8370] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.943 (8370)
[  260.613312][ T8370] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  260.665650][ T8370] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  260.697494][ T8370] BTRFS info (device loop2): using free-space-tree
[  260.710665][ T4506] usb 6-1: device descriptor read/64, error -71
[  260.841470][ T4506] usb usb6-port1: attempt power cycle
[  260.991280][ T8370] BTRFS info (device loop2): rebuilding free space tree
[  261.272673][ T4506] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  261.279489][ T5901] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  261.321355][ T4506] usb 6-1: device descriptor read/8, error -71
[  261.442212][   T55] Bluetooth: hci5: command tx timeout
[  261.602889][ T4506] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  261.667040][ T4506] usb 6-1: device descriptor read/8, error -71
[  261.797934][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.811267][ T4506] usb usb6-port1: unable to enumerate USB device
[  261.860336][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.911252][   T53] bond0 (unregistering): Released all slaves
[  262.239621][ T6547] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.693021][ T8455] loop0: detected capacity change from 0 to 256
[  262.789995][ T8455] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d)
[  263.217089][ T8443] loop5: detected capacity change from 0 to 32768
[  263.319950][ T8443] bcachefs (/dev/loop5): error reading default superblock: checksum error, type crc32c_nonzero: got 389e9d8f should be 29d2fb78
[  263.520650][   T55] Bluetooth: hci5: command tx timeout
[  264.106261][ T8443] bcachefs (loop5): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  264.197622][ T8485] binder: BINDER_SET_CONTEXT_MGR already set
[  264.203813][ T8485] binder: 8477:8485 ioctl 4018620d 200002c0 returned -16
[  264.458122][ T8443] bcachefs (loop5): recovering from clean shutdown, journal seq 7
[  264.538172][   T53] hsr_slave_0: left promiscuous mode
[  264.664555][   T53] hsr_slave_1: left promiscuous mode
[  264.735580][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.743968][ T8443] bcachefs (loop5): alloc_read... done
[  264.782613][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.789842][ T8443] bcachefs (loop5): stripes_read... done
[  264.826601][ T8443] bcachefs (loop5): snapshots_read... done
[  264.841477][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.910101][ T8443] bcachefs (loop5): going read-write
[  264.920538][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.928860][ T4487] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  264.940167][ T4487] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  264.948254][ T4487] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  264.966301][ T4487] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  264.975234][ T4487] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  264.980917][ T8443] bcachefs (loop5): journal_replay...
[  264.982810][ T4487] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  265.017131][   T53] veth1_macvtap: left promiscuous mode
[  265.023027][   T53] veth0_macvtap: left promiscuous mode
[  265.029129][   T53] veth1_vlan: left promiscuous mode
[  265.035163][   T53] veth0_vlan: left promiscuous mode
[  265.062046][ T8443] bcachefs (loop5): bch2_journal_replay(): error ERESTARTSYS
[  265.100572][ T8443] bcachefs (loop5): bch2_fs_recovery(): error ERESTARTSYS
[  265.107986][ T8443] bcachefs (loop5): bch2_fs_start(): error starting filesystem ERESTARTSYS
[  265.119588][ T8443] bcachefs (loop5): shutting down
[  265.119613][ T5170] bcachefs (loop5): going read-only
[  265.130632][   T53] infiniband syz1: set down
[  265.138892][ T5170] bcachefs (loop5): finished waiting for writes to stop
[  265.152678][ T5170] bcachefs (loop5): flushing journal and stopping allocators, journal seq 11
[  265.174822][ T5170] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 11
[  265.189597][ T5170] bcachefs (loop5): unshutdown complete, journal seq 11
[  265.203681][ T5170] bcachefs (loop5): done going read-only, filesystem not clean
[  265.247635][ T8443] bcachefs (loop5): shutdown complete
[  265.485965][ T5747] smc: removing ib device syz1
[  265.600615][ T4487] Bluetooth: hci5: command tx timeout
[  265.868443][ T8443] bcachefs: bch2_mount() error: ERESTARTSYS
[  266.112620][   T53] team0 (unregistering): Port device team_slave_1 removed
[  266.212386][   T53] team0 (unregistering): Port device team_slave_0 removed
[  266.593109][ T5168] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  266.744722][ T5167] infiniband syz1: ib_query_port failed (-19)
[  266.796533][ T5168] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  266.815315][ T8492] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  266.830730][ T5168] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  266.838450][ T8492] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  266.850111][ T8492] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  266.862369][ T8492] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  266.871474][ T5168] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  266.883371][ T8492] geneve2: entered promiscuous mode
[  266.889617][ T8492] geneve2: entered allmulticast mode
[  266.911724][ T5168] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  266.934773][ T5168] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  266.948996][ T5168] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  266.960195][ T5168] usb 6-1: Product: syz
[  266.973393][ T5168] usb 6-1: Manufacturer: syz
[  267.050881][ T4487] Bluetooth: hci4: command tx timeout
[  267.070083][ T5168] cdc_wdm 6-1:1.0: skipping garbage
[  267.090715][ T5168] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  267.247981][ T5168] usb 6-1: USB disconnect, device number 16
[  267.319521][ T8505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.969'.
[  267.621170][ T8514] loop2: detected capacity change from 0 to 256
[  267.680924][ T4487] Bluetooth: hci5: command tx timeout
[  267.687140][ T8514] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d)
[  268.069579][ T8524] netlink: 76 bytes leftover after parsing attributes in process `syz.0.971'.
[  268.149842][ T8387] chnl_net:caif_netlink_parms(): no params data found
[  268.557685][ T8537] binder: BINDER_SET_CONTEXT_MGR already set
[  268.563910][ T8537] binder: 8529:8537 ioctl 4018620d 200002c0 returned -16
[  268.962825][   T29] audit: type=1326 audit(1721361480.716:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.0.976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3362575b59 code=0x0
[  269.134885][ T4487] Bluetooth: hci4: command tx timeout
[  269.902607][ T8532] loop5: detected capacity change from 0 to 32768
[  269.946025][ T8532] bcachefs (/dev/loop5): error reading default superblock: checksum error, type crc32c_nonzero: got 389e9d8f should be 29d2fb78
[  270.367779][ T8532] bcachefs (loop5): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  270.400256][ T8532] bcachefs (loop5): recovering from clean shutdown, journal seq 7
[  271.565831][ T8532] bcachefs (loop5): alloc_read... done
[  271.572265][ T4487] Bluetooth: hci4: command tx timeout
[  271.611361][ T8532] bcachefs (loop5): stripes_read... done
[  271.649842][ T8532] bcachefs (loop5): snapshots_read... done
[  271.768456][ T8532] bcachefs (loop5): going read-write
[  271.837740][ T8532] bcachefs (loop5): journal_replay...
[  271.860326][ T8532] bcachefs (loop5): bch2_journal_replay(): error ERESTARTSYS
[  271.891598][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.950986][ T8532] bcachefs (loop5): bch2_fs_recovery(): error ERESTARTSYS
[  271.958683][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.980684][ T8387] bridge_slave_0: entered allmulticast mode
[  271.990534][ T8532] bcachefs (loop5): bch2_fs_start(): error starting filesystem ERESTARTSYS
[  272.028385][ T8532] bcachefs (loop5): shutting down
[  272.028404][ T5168] bcachefs (loop5): going read-only
[  272.039287][ T5168] bcachefs (loop5): finished waiting for writes to stop
[  272.057892][ T5168] bcachefs (loop5): flushing journal and stopping allocators, journal seq 11
[  272.066832][ T5168] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 11
[  272.071825][ T8387] bridge_slave_0: entered promiscuous mode
[  272.082735][ T5168] bcachefs (loop5): unshutdown complete, journal seq 11
[  272.091004][ T5168] bcachefs (loop5): done going read-only, filesystem not clean
[  272.196544][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.228576][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.273148][ T8387] bridge_slave_1: entered allmulticast mode
[  272.304085][ T8387] bridge_slave_1: entered promiscuous mode
[  272.352940][ T8532] bcachefs (loop5): shutdown complete
[  272.577532][ T8588] loop1: detected capacity change from 0 to 256
[  272.757010][ T8588] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d)
[  273.220707][ T8387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.435057][ T8387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.601232][ T4487] Bluetooth: hci4: command tx timeout
[  273.699081][ T8487] chnl_net:caif_netlink_parms(): no params data found
[  273.801688][ T8387] team0: Port device team_slave_0 added
[  273.918810][   T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.014069][ T8387] team0: Port device team_slave_1 added
[  274.227246][   T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.305997][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.322707][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.371991][ T8387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.508219][   T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.538511][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.557400][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.595328][ T8387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.595590][ T8532] bcachefs: bch2_mount() error: ERESTARTSYS
[  274.820209][   T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.942610][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.960311][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.982536][ T8487] bridge_slave_0: entered allmulticast mode
[  274.997727][ T8487] bridge_slave_0: entered promiscuous mode
[  275.468529][   T29] audit: type=1326 audit(1721361487.216:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.1.999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc84a575b59 code=0x0
[  276.838979][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.846462][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.854285][ T8487] bridge_slave_1: entered allmulticast mode
[  276.862150][ T8487] bridge_slave_1: entered promiscuous mode
[  276.924892][ T8387] hsr_slave_0: entered promiscuous mode
[  276.957497][ T8387] hsr_slave_1: entered promiscuous mode
[  276.983851][ T8387] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.011326][ T8387] Cannot create hsr debugfs directory
[  277.247746][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.635339][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.850581][   T29] audit: type=1326 audit(1721361490.566:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.2.1015" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99ca175b59 code=0x0
[  279.477460][ T8487] team0: Port device team_slave_0 added
[  279.589906][ T8487] team0: Port device team_slave_1 added
[  279.786795][   T53] bridge_slave_1: left allmulticast mode
[  279.805361][   T53] bridge_slave_1: left promiscuous mode
[  279.827260][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.881663][   T53] bridge_slave_0: left allmulticast mode
[  279.909753][   T53] bridge_slave_0: left promiscuous mode
[  279.924680][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.769020][   T29] audit: type=1326 audit(1721361493.516:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.5.1030" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd301b75b59 code=0x0
[  282.309742][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  282.368628][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  282.403627][   T53] bond0 (unregistering): Released all slaves
[  282.507894][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.515599][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.541871][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.728435][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.762864][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.809443][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.474526][ T8755] netlink: 'syz.0.1038': attribute type 4 has an invalid length.
[  283.501212][   T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  283.832154][   T29] audit: type=1326 audit(1721361495.556:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8760 comm="syz.5.1041" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd301b75b59 code=0x0
[  284.570539][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  284.604084][   T25] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  284.657277][ T8487] hsr_slave_0: entered promiscuous mode
[  284.668478][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.696638][ T8487] hsr_slave_1: entered promiscuous mode
[  284.715471][   T25] usb 3-1: config 0 descriptor??
[  284.738581][ T8771] loop5: detected capacity change from 0 to 512
[  284.745373][ T8487] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  284.755127][ T8487] Cannot create hsr debugfs directory
[  284.764076][   T25] rndis_host 3-1:0.0: skipping garbage
[  284.781621][   T25] usb 3-1: bad CDC descriptors
[  284.789520][ T8771] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #15: comm syz.5.1043: corrupted in-inode xattr: invalid ea_ino
[  284.860175][ T8771] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.1043: couldn't read orphan inode 15 (err -117)
[  284.875058][ T8771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.207264][ T5170] usb 3-1: USB disconnect, device number 11
[  285.670757][   T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  285.979139][ T5099] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.160548][   T25] usb 1-1: device descriptor read/64, error -71
[  286.186571][   T53] hsr_slave_0: left promiscuous mode
[  286.226037][   T53] hsr_slave_1: left promiscuous mode
[  286.269506][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.285330][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.309854][ T8792] loop1: detected capacity change from 0 to 256
[  286.317278][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.327581][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.345091][ T8792] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d)
[  286.421979][   T53] veth1_macvtap: left promiscuous mode
[  286.427651][   T53] veth0_macvtap: left promiscuous mode
[  286.434920][   T53] veth1_vlan: left promiscuous mode
[  286.446249][   T53] veth0_vlan: left promiscuous mode
[  286.454063][   T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  286.622064][   T25] usb 1-1: device descriptor read/64, error -71
[  286.742206][   T25] usb usb1-port1: attempt power cycle
[  287.170833][   T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  287.201242][   T25] usb 1-1: device descriptor read/8, error -71
[  287.760634][   T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  288.301425][   T25] usb 1-1: device descriptor read/8, error -71
[  288.302309][   T53] team0 (unregistering): Port device team_slave_1 removed
[  288.413065][   T53] team0 (unregistering): Port device team_slave_0 removed
[  288.440853][   T25] usb usb1-port1: unable to enumerate USB device
[  288.620646][ T5168] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  288.805194][ T5168] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  288.823425][ T5168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.839864][ T5168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.849839][ T5168] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  288.864653][ T5168] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  288.873981][ T5168] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  288.882260][ T5168] usb 3-1: Manufacturer: syz
[  288.891027][ T5168] usb 3-1: config 0 descriptor??
[  289.324143][ T5168] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[  289.348899][ T5168] appleir 0003:05AC:8243.0005: No inputs registered, leaving
[  289.411078][ T5168] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  289.601515][ T5168] usb 3-1: USB disconnect, device number 12
[  289.654671][ T8387] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  289.692735][ T8387] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  289.799706][ T8387] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  289.849442][ T8387] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  289.851601][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  290.271914][ T8850] netlink: 'syz.0.1067': attribute type 4 has an invalid length.
[  290.569596][ T8857] loop5: detected capacity change from 0 to 256
[  290.577835][ T8855] loop2: detected capacity change from 0 to 1024
[  290.620309][    C1] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000001: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  290.626716][ T8857] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d)
[  290.633107][    C1] KASAN: maybe wild-memory-access in range [0xdead4ead00000008-0xdead4ead0000000f]
[  290.633131][    C1] CPU: 1 PID: 8860 Comm: syz.0.1070 Not tainted 6.10.0-syzkaller-08280-g68b59730459e #0
[  290.633158][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  290.633174][    C1] RIP: 0010:__dev_flush+0xe4/0x160
[  290.679226][    C1] Code: b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 49 89 c5 74 08 48 89 df e8 6a c3 3d 00 48 8b 2b 48 8d 5d 08 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 3d c4 3d 00 4c 89 23 4c 89 e0 48
[  290.698833][    C1] RSP: 0018:ffffc90000a18af0 EFLAGS: 00010212
[  290.705008][    C1] RAX: 1bd5a9d5a0000001 RBX: dead4ead00000008 RCX: 0000000000000000
[  290.712974][    C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff8880b943e868
[  290.720937][    C1] RBP: dead4ead00000000 R08: ffff8880b943e867 R09: ffff8880b943e858
[  290.728922][    C1] R10: dffffc0000000000 R11: ffffed1017287d0d R12: 00000000ffffffff
[  290.736887][    C1] R13: dffffc0000000000 R14: ffff8880b943e848 R15: 1ffff11017287d09
[  290.744937][    C1] FS:  00007f33633c96c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  290.753856][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  290.760451][    C1] CR2: ffffffffffec0000 CR3: 0000000054f40000 CR4: 0000000000350ef0
[  290.768419][    C1] Call Trace:
[  290.771691][    C1]  <IRQ>
[  290.774522][    C1]  ? __die_body+0x88/0xe0
[  290.778878][    C1]  ? die_addr+0x108/0x140
[  290.783210][    C1]  ? exc_general_protection+0x3dd/0x5d0
[  290.788778][    C1]  ? asm_exc_general_protection+0x26/0x30
[  290.794507][    C1]  ? __dev_flush+0xe4/0x160
[  290.799103][    C1]  xdp_do_check_flushed+0x129/0x240
[  290.804304][    C1]  __napi_poll+0xe4/0x490
[  290.808634][    C1]  net_rx_action+0x89b/0x1240
[  290.813321][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  290.818435][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.824078][    C1]  ? sched_clock+0x4a/0x70
[  290.828501][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  290.834850][    C1]  handle_softirqs+0x2c6/0x970
[  290.839631][    C1]  ? __irq_exit_rcu+0xf4/0x1c0
[  290.844391][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  290.849670][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.855292][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[  290.860489][    C1]  __irq_exit_rcu+0xf4/0x1c0
[  290.865075][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  290.870271][    C1]  irq_exit_rcu+0x9/0x30
[  290.874505][    C1]  common_interrupt+0xaa/0xd0
[  290.879175][    C1]  </IRQ>
[  290.882117][    C1]  <TASK>
[  290.885049][    C1]  asm_common_interrupt+0x26/0x40
[  290.890174][    C1] RIP: 0010:finish_task_switch+0x1ea/0x870
[  290.895991][    C1] Code: c9 50 e8 19 b6 0b 00 48 83 c4 08 4c 89 f7 e8 7d 38 00 00 e9 de 04 00 00 4c 89 f7 e8 d0 d9 32 0a e8 4b e8 36 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc
[  290.915598][    C1] RSP: 0018:ffffc90003a377a8 EFLAGS: 00000286
[  290.921749][    C1] RAX: 94ed15acce52c200 RBX: ffff88807e01da00 RCX: ffffffff947db703
[  290.929716][    C1] RDX: dffffc0000000000 RSI: ffffffff8bcac9a0 RDI: ffffffff8c205b20
[  290.937678][    C1] RBP: ffffc90003a377f0 R08: ffffffff8faec7af R09: 1ffffffff1f5d8f5
[  290.945639][    C1] R10: dffffc0000000000 R11: fffffbfff1f5d8f6 R12: 1ffff110172a7ebb
[  290.953605][    C1] R13: dffffc0000000000 R14: ffff8880b943e840 R15: ffff8880b953f5d8
[  290.961676][    C1]  ? finish_task_switch+0x1e5/0x870
[  290.966880][    C1]  __schedule+0x1808/0x4a60
[  290.971390][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.977032][    C1]  ? __pfx___schedule+0x10/0x10
[  290.981876][    C1]  ? __pfx_lock_release+0x10/0x10
[  290.986904][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.992529][    C1]  ? plist_check_list+0x2cb/0x300
[  290.997548][    C1]  ? futex_wait_queue+0x27/0x1d0
[  291.002766][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.008392][    C1]  ? schedule+0x90/0x320
[  291.012628][    C1]  schedule+0x14b/0x320
[  291.016773][    C1]  ? futex_wait_queue+0x27/0x1d0
[  291.021713][    C1]  futex_wait_queue+0x14e/0x1d0
[  291.026593][    C1]  __futex_wait+0x17f/0x320
[  291.031100][    C1]  ? __pfx___futex_wait+0x10/0x10
[  291.036123][    C1]  ? __pfx_futex_wake_mark+0x10/0x10
[  291.041408][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.047034][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  291.052226][    C1]  ? wake_up_q+0xdc/0x120
[  291.056546][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.062180][    C1]  futex_wait+0x101/0x360
[  291.066524][    C1]  ? __pfx_futex_wait+0x10/0x10
[  291.071377][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.077016][    C1]  ? anon_inode_getfd+0x1ca/0x1e0
[  291.082039][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.087662][    C1]  ? map_create+0xe71/0x1200
[  291.092248][    C1]  do_futex+0x33b/0x560
[  291.096391][    C1]  ? security_bpf+0x87/0xb0
[  291.100897][    C1]  ? __pfx_do_futex+0x10/0x10
[  291.105574][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  291.110334][    C1]  __se_sys_futex+0x3f9/0x480
[  291.115008][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  291.120194][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  291.126518][    C1]  ? do_syscall_64+0x100/0x230
[  291.131515][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.137142][    C1]  ? __x64_sys_futex+0x21/0xf0
[  291.141905][    C1]  do_syscall_64+0xf3/0x230
[  291.146518][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.152423][    C1] RIP: 0033:0x7f3362575b59
[  291.156834][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  291.176440][    C1] RSP: 002b:00007f33633c90f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  291.184846][    C1] RAX: ffffffffffffffda RBX: 00007f3362705f68 RCX: 00007f3362575b59
[  291.192805][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3362705f68
[  291.200764][    C1] RBP: 00007f3362705f60 R08: 00007f33633c96c0 R09: 00007f33633c96c0
[  291.208724][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3362705f6c
[  291.216963][    C1] R13: 000000000000000b R14: 00007ffec9a21080 R15: 00007ffec9a21168
[  291.224937][    C1]  </TASK>
[  291.227939][    C1] Modules linked in:
[  291.231924][    C1] ---[ end trace 0000000000000000 ]---
[  291.237366][    C1] RIP: 0010:__dev_flush+0xe4/0x160
[  291.242503][    C1] Code: b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 49 89 c5 74 08 48 89 df e8 6a c3 3d 00 48 8b 2b 48 8d 5d 08 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 3d c4 3d 00 4c 89 23 4c 89 e0 48
[  291.262122][    C1] RSP: 0018:ffffc90000a18af0 EFLAGS: 00010212
[  291.268183][    C1] RAX: 1bd5a9d5a0000001 RBX: dead4ead00000008 RCX: 0000000000000000
[  291.276170][    C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff8880b943e868
[  291.284173][    C1] RBP: dead4ead00000000 R08: ffff8880b943e867 R09: ffff8880b943e858
[  291.292162][    C1] R10: dffffc0000000000 R11: ffffed1017287d0d R12: 00000000ffffffff
[  291.300126][    C1] R13: dffffc0000000000 R14: ffff8880b943e848 R15: 1ffff11017287d09
[  291.308116][    C1] FS:  00007f33633c96c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  291.317076][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  291.323669][    C1] CR2: ffffffffffec0000 CR3: 0000000054f40000 CR4: 0000000000350ef0
[  291.331676][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  291.339107][    C1] Kernel Offset: disabled
[  291.343419][    C1] Rebooting in 86400 seconds..