last executing test programs:

3m11.237017546s ago: executing program 0 (id=133):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = dup(r0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendfile(r3, r2, 0x0, 0x8a000)

3m9.51904293s ago: executing program 0 (id=139):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x6, 0x9})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r1, 0x0, 0x200000000000, 0x404})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r1, 0x0, 0x2, 0x6dd})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000900)={0xac, 0x1, r1, 0x0, 0x800009, 0x9})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1})

3m9.163089352s ago: executing program 2 (id=140):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

3m8.632008247s ago: executing program 0 (id=144):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10)
r3 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r3}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

3m7.961687335s ago: executing program 2 (id=145):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000080)=""/51, 0x18)
getdents(r2, 0x0, 0x58)

3m7.573451492s ago: executing program 0 (id=147):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x5, 0x4a7, &(0x7f0000001140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x0, 0x9dfd, 0x9})
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[])

3m7.032994043s ago: executing program 2 (id=149):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xb629, 0x4)
setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)

3m6.079365444s ago: executing program 2 (id=152):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f000001fe80)="$eJzs281OE1EYxvGHDwVBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIxjmKnQlhrDQiba/29zXnJ4mnP6njZn0dl58Ha1XAzdoldXf59pUNrUrpRRvwaU6GuO/XF9Uq02dWMi/+XyvYePbufy+flFs4Xc0s2smY1f+fji1burn+qj99+PfxjSdubJzrfs1+3J7amdH0vPS6GVQqtU6+bZcrVa95YD31ZKYdk1uxv4XuhbqRL6tbb5YlBdW2uYV1kZG1mr+WFoXqVhZb9h9arVaw3znnmlirmua2Mjwp8UthYXvVzaq8DfVavlvDlJ04dmClupLAgAAKSK+38v4/7fC/bu/4+bn9923P8BAAAAAAAAAAAAAAAAAAAAAPgX7EaRE0WR82s8IcVP+ETNv09JGpE0Kum0pDFJ45IcSRlJZySdlTQh6Zyk85ImJV2QdFHSVMtrpb1XHEb/exv97230v7e1PLg7LK2+WS+sF5Ixmc8VVVIgXzNy9D3uZVNSL9zKz89YLKNLqxvN/MZ6YaA9Pytn78B0y88meWvPD8Xnbj+flbN3wLrls13zw7p+rSXvytHnp6oq0Ep8Jg/yr2fN5u7kO/LT8f/971zb17V/rvu7+SR/hPPR8f4Oanow3b1DChsvy14Q+DUKCgqK/SLtbyYch4Omp70SAAAAAAAAAAAAAAAAAMBRHMfPCdPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnX4GAAD//5KSYE0=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x160)

3m5.823762008s ago: executing program 0 (id=153):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
pselect6(0x40, &(0x7f0000000000)={0x2, 0x7, 0x9, 0x9, 0x6, 0x80000000000, 0x1}, &(0x7f00000000c0)={0x9, 0x7, 0x5, 0x8, 0x0, 0x7, 0x3, 0x7ff}, 0x0, 0x0, 0x0)

3m4.435444962s ago: executing program 2 (id=157):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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")
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xf7, 0x7, 0x1, 0x14, @mcast1, @remote, 0x700, 0x1, 0x2, 0x4}})
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

3m4.146076305s ago: executing program 0 (id=158):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendto$packet(r0, &(0x7f0000000740)="00aeb5fa1c07ae6a8455", 0x5ac, 0x4c0c0, &(0x7f0000000300)={0x11, 0x86dd, r3}, 0x14)

3m0.040454236s ago: executing program 32 (id=158):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendto$packet(r0, &(0x7f0000000740)="00aeb5fa1c07ae6a8455", 0x5ac, 0x4c0c0, &(0x7f0000000300)={0x11, 0x86dd, r3}, 0x14)

2m59.754104613s ago: executing program 2 (id=163):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x4, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r1}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

2m59.679369891s ago: executing program 33 (id=163):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x4, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r1}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

1m15.512655675s ago: executing program 5 (id=400):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e})
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
close(r0)

1m14.247792276s ago: executing program 5 (id=406):
r0 = epoll_create1(0x0)
r1 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
shutdown(r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000000c0)={0x60002011})

1m12.78234887s ago: executing program 5 (id=410):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "0019"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_4={0x3, 0x2, 0x3, "ced21f32"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_012={0x2, 0x0, 0xa, "e337"}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_012={0x1, 0x2, 0x2, "8c"}, @global=@item_012={0x2, 0x1, 0x1, '\x00\x00'}]}}, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

1m9.190067521s ago: executing program 5 (id=417):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f00000013c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES32, @ANYBLOB="2c73580a65730000000000db27410ebdc41f0d00"/34], 0x2, 0xc38, &(0x7f0000001500)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1m7.379213345s ago: executing program 5 (id=422):
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0)

1m6.55415995s ago: executing program 5 (id=425):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)={0x0, 0x7, 0x1, "c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

1m4.004630686s ago: executing program 34 (id=425):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)={0x0, 0x7, 0x1, "c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

24.989326275s ago: executing program 3 (id=539):
prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x1ff}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000), &(0x7f0000400000))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
timerfd_create(0x0, 0x0)

23.898642871s ago: executing program 3 (id=543):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000a00)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xff}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8no}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@uni_xlate}]}, 0x80, 0x350, &(0x7f0000000580)="$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")
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xa0080e, &(0x7f0000001100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}, {@jqfmt_vfsv1}]}, 0x3, 0x443, &(0x7f0000000a40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x0)

22.161896991s ago: executing program 3 (id=549):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000002, {0x7, 0x28, 0x7a, 0x10002400, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0, <r2=>0x0}, &(0x7f0000000680)=0xc)
syz_fuse_handle_req(r0, &(0x7f0000004080)="cf6dcad1f5c5c712407a3f1d491539b627c8255f86be020a4f0ff8851dc6d8ab33ec6d10e619ed910e4811af9ee1581a1d0687020937fa7005f26bab6e9591923f5c1086ecd154e9bfbec5afd856afe3429448161089fab21bc7b9ab5158aa219761d845b8307b1fc87605dbaa4cf80fc74737d4d4cfc68fe06c16b87b759a91a368c70b2e05ee4acf0f9111df10f30c4e16b7ee3d1cf380273ab8e6ca382e06022f539c0c4e62b1ad827ff576249375b2231e47038c67b3353242c81baaf90b3645ed12504a4ccf4b0e6419804399f9fe7f60df022a12405093264d225e8003061dd690cd169f922da3507717ade8bfa8ae2c45eccd32e14ffc4e11ae939e90fceb53e0bde3916d9e4e36d1de07fbbdd2dbc24145e1e7bc8f3423f4c3426406fa499a6de404e6827db35840a726a1582be4457f0ce0cde1c414e2f497ff8ff4cb606962f6acac00230b2cbce10b09d2f6b33b9f4edc3839a222c4bc5bb3e552056f8c2b7bc84ab62434bcc61f64b74367a9ec857ec7f5a09ab6b16667bdc846434d22dd95f7b8a47a1246a39d135de1ffc2946cf36034ef8d753b7d692aa00c91fc1636c0be309ef4bf345918a386e76edc3680ee574528bf3369741c9104bd77e61aa72d8b82162bb150d4232e21c8c9453d89467f9e00fd5148bee49da206fbe6357bbc31b111e68f0b95c37063a6c5401a094819e28a2104c37db5624fe075d0b2cc50f7140f4f49396b43d14f93ab9f9649e2dc694cea520cc068a3869a3ea4ec599a995f69d936dd62e2b81499f3ed4879d25b90aff3eae74b28ae35f18f0b457a5af35e2ede43786958b127ef76723d6ffe0e7e3346d5a9f0aabcc0d93fc085316516ef79b3e2400ed2946a0d1b2ace13ea7ed39ac51cb9d98cf70feb30d5bad39f6b5903e8ab654f48bfd7e54dcb502b158f68bd96e6beb4392fa59d3e1048803e4749f3ad522414d3180de3a0da1227bfbb704b66ae6a85b1c2c51e484622eeb169760e9ec50e14c014a0cc05aebbee77f31b62834169cb49bec0c43090506c8f34ca6e108e6328ced7a9f11cb3d57398b0b1d84c9e75d5cdf17766d619dc2658aacb900ca0f93aa248d702039417b558b8ab4a41921154153cdc86d999b2e7932eabb55a4e6c8c03029c851a9e84ef84acd9affdff84ffc063bb1ab6c97e169071edbe524462fef9116edd9fbb5032478cd5ad2b2c5527fdf64223dbc952fb528f7b1d817ca787f8a57992b40202ca124cd27eadd6d70351379a6456b697b317d101514d1d5d61002e4f3bcf7555c6b36c4c1d18cba0fd4fd7b3a246b72d47d7c1908cc9c3a29fbf43019b5179b0975d7680ec15720f7fc8b96b13522d058ef009719580227489ea68062cc735cca0b6a60a10c44f2b75d2895be41a278c50e62f979674c9e507dfa7a0c087c4fd43ccc32357e34c0bcc526fe43bed33e99632c84ea59780f78e7954d8e5430c9acb7d9dd28ac3761515cba6064fe81d3b4541dacfd6fb916735833704a5cb1723f867322fa806a20d5029a608986b5019402035bebf3e099547702409815bd1d3c63072fb0fc216c2186048f1e4ae5288a12a5c9b25f7649899f84c8aedc3721334d7bcdb656f8e3c0f2b7e40b837a15c9d6472b6acb58a39babc65d08e529f2f690ea780f43c35698610351fde4615efafba129b2b619135f8af77c7291483262c5555f4d66173b34c5c7f1c415cd6ab15ae4cef34cf5680e11332c6863d2140f00cc3a337b23afb0080fa54360282086b0c0faaf2bc2a9f7335a96fa8af6a52a1e04eed2e7c337d1e378545ded0d0453b8a16b6d0a90860dfe560528515005ba852a314b4540206a8513e73212c65fb4b35f4ac7050d18bd62a6c720cfda30cb2385d3d5217655db1f344fc34361b83b22d31a040366acbdc28d397254b41c3b1f0d20e0a5db4df6338e78ae09b38f82c71fb0208afbb506461384bf578c607e05ad5a6ddb708b9add5d4d363877659a663827136b4dc1b4012c7035a56bb91e14a3d22b3ac3989f91d78808758d1b5bfdbfc66d3389e3362987e13bf9a9747373c90c0c658b7b832eff19aa2f3667f79bcd073765308fbabf2d612d0445fa1be6280cb9d0ba759d218ae971d3dd5d458c10d14f154109bfb2fd03523ac5748bcd8582dc3be5c28ef4be94cb55fdcb12a6271dbb7f11fd33d61382096588167a2b20b02cc43b88729985073a5b21b8e4bb2c43894d7c88bf111576b3b56f905b1f23f0570c07b475d5f86508c3489f4f2e2d0f3b11bfd6c3c58930483f9345f4f755089848c42361d4b0c0e855935d7f6793f78a68b554358b810cdcdec350376c94486c67fc5d11c0a68873312b40b49bb29aca16e1f3e3ce4da7a9e7aaa6ec1d9932b78d9c12c45e61b5f6faa6ffcb21608fc61bc4180f91d26f9db592c98e532d60c28e9fab794ab8a62c21122397193d8b5b72bf050b07f79df5e14069b56359835e3048f182629328e4a72a1fd0530182c802744611637e93deabc6c3ee30041025026be97ac314eaf7b399b0702cf73848e54f355d766121361398609078057473c2aa46b2fbd7e7a7d6d039615eea23fd223c49a9b5b5fd7b0c6f30c9b0e55fbebced3c90ceb668e6dbd5e6511c19d32c29b5fef7d06cf2ffff7872bd541d0fe70e5991ba3c19e72d5533e6fe9652c21338ced211c7d9e912486b4de29998ef4cca892fe94972b31fa33e781386b75b5d6980a9bfb887d7485d71f6744a6f87bc407ccd03281e10eb1bafd5d9bf279d362e2a49e54187e40abb06e21ed8425135a169ba5b8e1a806951352580ae135dfbbe3395e18ccf67fdb891903934739b56dc0e49e258552dc66d46eadfed9a7ceeabf20d02aee2c8ce4060382474252ccd9bab03d7e8eb77195bb712c19e066153bef5a212f2a450d4a1280d243928f3add450c2544c800b507c8b8ffc5d7f3cd9a4526505d05d04fbfdd0fc1f996ba3f4a797c96b24af37c15859b4bcda9234750fb6acef8dc20893ac5051b3d6aee60f01fc34e3b6753848fdca9b18e461c87f08fb8d67ddce234ca56bbe021f468f964ec1416ba6df0434440140090edd222cb9534830fec026788f43899737771e67552df68fb81d90aa90fcc1149149aaa96c1730829c6856407e5194dd2ec7cfe5fa419c2ea6127039ae188649b2cfccb9faf59f45dc9af76f3cb17c8224e68fb5f81b4556980542a928f9563bebcf3db248cff2183fffff15710432f8691041fa8aceb65b6454e9c375402b599503fb4881a3baa5ba58893cac154575ef0ec8efe35a6eeccb98d081f6d4cf2661b484765ce95bca5bda75fc90e630e355d0dd6d22a5d4c7990931ac160da14f211c33b668edb93cd9c87de3881c47e4b0fab746d0e931600478c9cc2e3cc08eab1ee7cb4e3749ab44e7ab4be15e5b031e58d59b294fbe794fb5760a2ceedd1cfc4343b1c2886b0721945a109384cb00fe6e9bdf09e5e406e757a6f24e659495a11a93382d5425d6fcab1d802303aa1531a120b8f30dd17cac7385bb8455503b2ff0daf8b4dc5353f88f34c894fc0b2fd2920c97432aded8b89fba9a9db4c4f3498043f936a1cb0dee7f5d902b1f6d909b637b8e2f05d31a2640eb1ac556ede22006466014d4a407e3486f94ca676ef39be6399ca24bff48b03ab1da71d1a5e3994d0a8723894bfbbc33969923970df3a9fd0b5084a6cbb41f79a0d3338bb61e7dc2cf795f2fa883aa61d7820c4e2215744dd9cf517cc5921850d1d9aaaaede5fb125e663c830c2414655d6af43a90f9b79eccbc2c009b963b503827c7614ab8824b3289ed8e559ed644a163db18fe66789037eb599be39fb66955a27a4831a59322d39b95b6d571d8fffb5352a0297b449719a5246247ec4c24f40b5ace1c8e76fa1029a47065af4adfc03b2732677f81bf9729ba06380a330cb388c9e4f50a0cf4ceb5ea8b6bdda8df0839de274c0c7a57f7a9173d21832b7f19ee8cfc340eea461ce7956f986f828c91697c5a241cb9efec40a1a0f34a2a63821dbd50a111b368a034823191dbd3b7a9fe8bee53cada1902f2a278efe3f10eecbf8279c2f9b2e7bf542076bf0bb41e9f21e766741f3ecfbd5a38158b1ce884255cc227a7b7196f966b631c228fea918d8dfee020dcf4c40231c0ab6fd7ccf4e7444fb360f2be3c1519a577dae770a14cd90df85490995fa8553fb255ee9807e0c7617c582f82ac56a0d902c8cd58244cddcec23cf2a05a79b474c716d9ea92bc28b0132ec48a3c5257dc7e1d9cc3f760d559b5c12ad75c95497962f9a564b0d9ed29f44f63b2c56169b2151d699e8d2d570d94f5f37898d3d8abde9253354fd146af62ccfd171d9014fd4d142e2e390f3ce2370165a01aff0fe566ec44e3084815cecc85540d84d8a11d0504fbd95f2c2709b87083b3cfffe36f611a4a6b9e4237a350d1ad4b1e0239946d86ce535e9f07def01a5e6d2e65ee59f380e55c9f295478c5589425852fd22eec2d6e555828ffb4212b33ad530c38b76254d2baac6bff5f94d3ba19ff4b35cb1c972c0b538e1adb5da70affc99c99c0613bea6111848054b416d26368c90784d845f0507f89fd058381dc7d6c6bb81dae94d11e3a0de778aca82814fec0b63780fb2b4f480da063411cd66356f87e68780448ed0c1f3836a46e536609d672d7cef1cffa0614a4f6286ab7f3fab0baf595b4c3c2e43f979f4f4a89165c24698f71406b4330a333f6c8ee018420b2b47735295043123459fafeb5886fc044a3805b162714a3436f58264c0713a4be82a7550f37f88cd7f61c0ec27d887285da7ecb4eb32963c8205eff6d5bf532b72976c5f0a24d6d4d2bf4030f04a47a15fb4de2631361fe0895aeacd2028401c5c183223647c1e765e6406542eeac4d979e6a493e389a649af7ddb35fadd32cf1edaeaaf0982ae8131084ae4759e2af1dbd007f7ce00900437be6d8d3559210b3011d1fe52e8485cc5c14ad4aab4c03c7dec4302e7f72abb7fcc799899cec17308151a758b810369c4d53c443cb1278709df6336f84fa39e51d208b4507a31e6f06352dbd99d7dadd86215e47ed645a9b89bdce630cf80fc1fe59dc31eae39010a930965b3b0e0f595347158d683de6888f3284c1fd47b3e79e0fcc299cd4f519ce067a007ae7ee906d639789fedc850e60a7b4be9dc525e3e58b01f24b065c4b21b9011e74030aba77931bec74698557b4768ae41eeb4caa2f530578bf1f9379fb623a27561bba03c7623400ef975ca2e2d6881e0f96fe1e7f9ec0e8f6aeac30f70f848399c6dc9c4e58bf50aacbe566965b257943f6c9ffe210af0cb488488d67b09164d98f3254cc313f7cf8dab1f2e1ed3a7e4a86ad85707d4fe0e7fe483c7f311912e92bee9b17819b53a39c374cfbadf8c3641bae4177aafacf3394af12310f222dc0a67eba49c1475da8607c25f3ee7b1e1e0961c7d319b32ab549c002b93852af7146f5e74aab020446d9a446582a2bc19a730bafcca463fbe0cf2664e10746ddbf0966ec1e327e1f8fa6bb67e18cf849fa810c938695de5f8df98d3004065c787181f4bd8324c59b18972ac5ca92f96c51b4a63ea130712d70a51c49def99feb37312fa6a52e188de88f5446fa4688514bf96f195bfdae4b248445ef5a37e5c0169c7ee42a8e613e71793486bfb24e37bd0d9f0cfb3db61b45ed731edd5c4bd7b6b133f5f3f51fb3a12e9e43db5a23a4c6c787c803791341f10aa083760413724031ec83d5d5c03e9d3585e6a6c87f51ad4db6d678cae14936c09e24fba69e90fe4c2ebed615e254b1d2a25c12b07c1226c0e9fa9112a49cffc9238d3303d3a9a293c5bdec80545e76b911aec6f956d2122d0ee2bee424aee05e0a25a7ff72e3e1c10f590380f82f1e693fb45b1466cbc7e8ee741ca97775c2ae15c1ad0f4a8221c55e82b4e4ddbbb3d88516fdc26969707143e3175f56b07ea8a7d40660ee346a511e0985c6cde95b573dab7c53cb9d32eb18bdb67147b562dd99124d744703492a89dc8cf387ad17a992a6870ee683953c70547f2c70ac44ddc4563fb0c0c23ac7b806a0172a3a74db45378568306ab3036b5348f96ddec344a899b6058179c070cb5f3a478a02d94dbd836a0e2223194e406c2296ceb6dd39667ce62b4c191889ea052f382b9c051c272480111fe287b84c10cf7512a6dd0a601a1cb41545915925a63bd09f9d77a1bc156a7d822e204029363b3c713c5cbef590efd01c4ffe00b816745a37d83b27ab05c3a0c2d6ff800276f3fe502bb3bd7b60b38d32376246a3384554072fe63ec409a0182d588b839d319c680f830583db3e4f5071eaa066689e9e19539d9a12fefffe223288b77600dabde9b2bea871cc1ea2b3318a9699d736f02490d76c1e457aaf45ce318445ce10625b43059694e996ace387580589f9f37944b799337fa38ef9292d2276e0f659471134aaef911514212553779be2ba00816187465e278ba2d03e66cd633f9a274ce882ae971f2d07cb4fde38bf88327aea83d5303011b0263f24630916b796d532e5437179882b0470dbf8d693bbae4015ef28b3d57b5e3b643068dc1d1921291f4f1280a8183532298dffc2501cd3ff0bfb6b0e61d2a59c596f21b98db4d730e155936e98c95c96ac6231b1232e4ed89ce65311fe66199e113f9f69084c31444ae9f106e909bc070d83c1cffc514189c1e0b6763c2732a227a6229407af592772c2b843fb944896ff61161449b6df045ba618d117d8361733198f0963850df3e077aa538571efe279f9c7e006e2c882f5301706ee2bbbe769164cf7d9597d0142d0052641eb43a9ffe76d978384ea8c10050a80021d3c9177fcb29652b4906081d926ea23e749c9272731aff7fd0c271ac4859a5829c5b406a1c363752fecb1a76b201a0df467efd6ffe6adc0debe36ec6d1fc84ccebfa07cb136bbea0f1ef74983bdfc087e050430f5aa395cd8786b609941fbce55ab9f304ba11910a0790685cab24847d85f8bc7a5784a4367ba06690cf1a88acfeddcb7cc44c9797f4f0e5daf9d301c6e702652268530c22df26d14da8768a8951f26849fa1e20015878cb6332d033531b8128233e61094cfc5dd71ba9af36ba6aa1c37b24805a45c3dd302bbc1dc8e9348f9a47540e14016bd5357e7978092497b800a97425363a42454eb04c32c9ac959fb37eb00ed6e31f81b2aa67d9f4930eb31dc2260151d845f9865d2b3a301ce3bef54a977492039eb908512a083087961f90ee568c5e5c60d6e726dda2c3f31c072979e09d8fd6f2365f65ef46399a183511904226d8ec72805582107ff5951d2e0d5c028d29e940fa068c0ca1c238420e53297c31d68f70fb543f347d91afb5d66ef1e8460a1431b638a6b0ae259f7fe8eb03aae9ef1ea4cfcfbac7e7b20b5c46ea8b0a2e88527bf54fd866362ab6a99e466bb029259f35711bc376b2f70edd738b48451f20ee404938821419ee5eace0171b3fd73d57bf0a723152933ccb84d567e79737b33e334dab955cdc03298215a2943ee493d815af83d48ee808a5e508903cc574ea4b52de645a18b0f43cd6b81a15a7f089cc7596adde2ea693381c7eaa2e246b9cbec98bb4e8ea3db8b47e57ef8d3a2eace3e2dcc083f6625f4e86bdbe2d6c57fa8ae4902ae9964c847eb292998d485d3326a7076360b85365edd5b733876abb5e26943481a52b10a1c95f34aed88568b873ef481798fbafe036d5d580c7437cb1a651e2a89d98d9002d0bf6418a271f9808df4b2ceaa8508e6c1d7d58e96d87f6db011395a0b74cb39e066411fef6c8ce7942ef8d8bb826be0b06ecada10e46f7ac25eb7ab0e3339752c8d0784659d72a287ea9a5e3a699977456695a6f9fe40eb8f7269b414cda403ba94f512c332fcea82f1927a5695ea2eb2ce7380ae74a0672ffe7fd2c4a19715a984d518b5be67543c31e42962b4c030fbdfedc5977b03d85294db2578d6561fdd9e0f9cfaf7eb1609bfab67105b227ec43189e449c4f2f17b8175b3afb0087f70786673353a3913cd03240761b5ff91a1e6510499c1f4152a759b1ca39ace773a1f27a5a88bb94a4201a91addf5c2c8587547e454d186b562cf89a41a02c36765565c3d753a2d8127d3908853f5ccc1c35346f22284573695c5695a520ace2d0cd13c1138b1fb10f74487b9a2c7a5e01195a1629d3e5d567a77a2aae2e74e24d2936c2618c63eb5cdeb64f5592cb38175d416c05588f03b287c6e16329fee69c8294db5b5bbb81499d7ef18ddb93144c897253e8330cea3be31bab73de42284fce239597ab7cd5b68cfba057b01aaab0f0d4191c31b407fd8f9c7f04eaca31e5d240c7910663bde4ad478f134d09dca902e6acdd292f2745c73cecea2204a56d0098c32da73eeee41b348d5826109ccfd2397bb73a25ebb7e95537df71cce504f14c219ec525795d2fd5027cea9810aadc77e1b874f9fc4e33ed7b90a4007bbc341493302e4e2cbca2a8229fd2c3db7faecec2b8805bde9d92a29f6a7096cfc05ed5b678566e6c079dddfcc0b6c17541047beb477c4493a1588be177490db134d69a225aa6848b27494f17c3882ea2ee436ac1e981256ccaa70ba1f7a621385694b62bda8c4f6b04c61d6798afdc9cec019392d1242a35c3382b09aab4999e1b383714622f2ab80f275ecc8ea67694f020466aef6ed5a4535f32df47f0478e00194b44b9003f6dff232bdecbdf2a06da35246dfbc0d40becfdd5ecf971f0f408913bf094282fa2272cc5683604945e3eba52231f131c81b1035dcbb8a4292059ceaf92f36877aa15049bacc544d2c9bee4eb1bd01d76861557e646082f118454c37bbc7d08a311b4668f2777912cf882439b47e7d3c08bfdefe31e3effcbddf9e5bf175fd7c1ae85f6436cd817580970b3d8303e33ea128d222e8adb1de246fd9583c0385fe89bbf9af2cd82a38083069a997175fc7e96096052d55620554bd723b28de9a177b0aa0a5928d3d991c7da85a3513b1fffb8c75b5bc2874491ac6affc2a71ef1d639a90bb4c53624139ab8764f60e7470592608a520dfa0289c3be27e2a8f6525a31830aaf887213285eeb4286509c4904f2f5c6058e07c9c5c7886e107fc8b6411ea86bef63c88c863c7d7be52424a0126b8642d83946792de32c6150e9ce9be9d20eada4b47bd24fda102ee8cbc3a870743ab1839f979076b79cffac7d2234db5b345de7f994110bbb873a7058e5ad2fe9d9f0527a4a7b3799f81a06c9ee25c1a4a6317c3c454e9b9bb03360775184c37897db2e23dda4fc5cfbbdd477f564ad48416224ab75742d8d2375773c34325b36cead158372821e3db81a2dc99fc4293b39b183f1a71afbd4faa5e66a0d457f15424ca9c39969a85226b03b1ba8a98b0655a4581c7849bad2b1e5eb09236284779235ec2c0f44d547705298a9076bd32cdbb0a1169529a4780629e8cc291bbe25d98eaca72e934b7ef3a26d60dcebb509b8122d9d3de366b1c81c01e1a3f2ec0556d4759917612ba175b48f47534e592293e50e66dfbd0e1d0373cb3f58a43f3c32408ceba4c2614ff35b72a2cc03166f9866904f7ec19650edc06ca73ef63fc759094ae06a8405144dc22a0480155057169e59897eded975544a3e26dc0ba673a803fd35e16f6ef4695fc554e0c92fd97d3287f368b06ebb41e7d9a5956ceac39f27a82dda86f981519e31f544d844109d5ed58c159e7aa1805461149c604f262a1dd0c2f072f8f5b9b9bd4542cff3050c85b981dbf1731805fee07a4f92bb1828842f34395b90b76834a624690bfd431185026fd090c8dce10ac30ea68502dc8d2d85f836eb747c9bb8b6d16da1cb692f33b77f80c05b250496f3a880dca37c6514d5b5e2cf90d0b18bc31fd27a2c96110b9aacbe2afce417c415778e58e0b9ace5f209696980cc45e51bc292b3d5c247e2c8fffecd214d927aab0fecd0f50b359df4971944891fbefd40345e7f14e833486c126df0c1839032e64fa59280d699eed79f03acc206d6a5340cc1c5deb4204cb8780830497f23522b89fc503e6a8a01d11e83de680bbaed65fbd970c71e2087213c3ee64280bcc1f616a274c11d01f0d81f084c3873bc871d50395e05f658a75915118b0da8281a310fc905488ae03aa89726d74d6ed6da76d6dffcdafd7b4d2fa4a867e9b42cdf71db56c542ccf1270974f1efcd80f70fd463d2cfc03c8e111f2d1232bf6e228123c316ecb60eb6d8f650e9281381d540b29b520be3f921bd314eff9ca241b69d95e78256f1bfcbfe37a9f094716d36af6e1ce36184bc6a4dfb88320ee186f52db245dd50d8af51f489f792494c14efffdb88faa1d9ad1d633b327b7ff6523bbfdfe4274b856bbca9e2847499923738207a399dffb514bba855b75d12c9c57aa2e58db0000210f5ad375d3b697f3dda96f5f78c13bfd6d01a5050e01a2e55cc2695a3f2193820286a688cc144fb9043e7c6772bf2cbd7bb5a7a57fee1c18dbdfaadfa5be0d1adfa55dd3a8480807708ee6e11d9f9dfc5bc682e104795928e56af800b42c9c07a25237b092ba1e93a525ed5b5b39ad6e02ac6b41e136c904dd4592370c322f5eb595ed30fa00a277928dfc765930af1c2936f5ad2425c411980b5bb012e0e240c7d50f16ba990540a765cc1fef3809a0344ce6d083ab8705378fabe14a2e63e12eaef453273a78a7d3fabff1fe6a9ba07e208740ab8ed6e50abe2a85b649e1d3ec2f3191e010b50a7ddffdfb25e53e196775655a1ae707daafc4e9709927eb961faaeb1be21ddde0fab9665774086c34af3beac362a5cb712b786a5e1c8811ef574c5b269946939ed530c5bf42306016b69957dd57d83c88cc32a366c0aacc964c693fa7e03c1e89832f2076ec03995f1f9b2cde66acdffa3ca33776b61176369c79887b2eeb0a14d7cbbaa597c0ae8e1014660baf06e22a6fc4974772975b7d7d003e6bc6a4cdf4cd5f2a95dcfc8194d93b273e59baeb350935aef906bdb94d1fd3c0781aa8fcb17f3f68c9afe090ba059acf599d2934481eae73717c4354c8c2b4d425ef7073968624c5d91e46322cc23091c58643316acff626f160b9cb770e0d9595d33cb6f44915d7efb6747973ffbf34119bba44d074472e661095012ad94af00463520deb45a6b6b7b6a173b23aef637e4cc0363d43c5ddb43c81936143f7db63f7f7771a611930f9f82a12f3c59b0f72de98bbc75ad33f1823fa872be154b19f16f0fba01ac3d64d46cbfc1850d1b4b5790cd86633b1880b86fc34a8b9f31100950ea0bda3abf2b037e21ee348418df67cc1d056d74125f9c73b42b104b6ad322ffebfe658dc3c0a06af44d73324b5ae59e2bd99d4782ec053ea07513a271ecf8651b25bc3e026bc88a4aa1513a2b4d4e173c1e21c77302ce64be8331c4d5b6203bbccd96dfbf9debb29a167753e06c55ca88550ec186bd20b3d94f7c2af719bc638cac3f8cc6c80220fd5f4be03bab9bb975e5effa4c5eac098c531590ec5eeaa90faec3630671d9e1a454577b01b73bfea67456ae187f0e61a9292612f428ab8c5780a3803b7dc2ec8221181db3876f2c00", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0x4, 0x2001, 0x0, {0x10000003, 0x69ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x9, 0xe000, 0x601d824b499141fd, 0xcd35, r2, 0xffffffffffffffff, 0x7, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18)

20.637880238s ago: executing program 1 (id=554):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000200))

20.602986695s ago: executing program 3 (id=555):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x2, 0x0, @void}, 0x10)

18.502767812s ago: executing program 3 (id=557):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000))

16.874775827s ago: executing program 3 (id=560):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x100)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

12.80424216s ago: executing program 1 (id=563):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
ftruncate(r2, 0x1002)
fallocate(r1, 0x0, 0x800, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000017c0)={0xc, r1, 0x300, 0x0, 0x4})

10.225724258s ago: executing program 1 (id=569):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10)
r2 = gettid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0xffffffffffffa316], 0x0, 0x7, 0x1, 0x1, r2}}, 0x40)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x8147131f5dc6d5e1)

10.082792102s ago: executing program 6 (id=570):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
r2 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x4}, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xa00, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

9.285369969s ago: executing program 6 (id=572):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x8000})
write$UHID_CREATE2(r0, &(0x7f0000000280)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x8, 0x0, 0x1436, 0x44f0f280, 0x5}}, 0x118)

8.347444509s ago: executing program 4 (id=574):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2=0xe0000001}}}, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)

7.794622511s ago: executing program 7 (id=575):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

7.262564629s ago: executing program 1 (id=576):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2c9ab000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0)
fadvise64(r1, 0x2, 0x106, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x1000)

6.382061404s ago: executing program 4 (id=577):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept$alg(r0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd27, 0x8, {0x2, 0x0, 0x14, 0x14, 0x6, 0x0, 0x0, 0x1, 0x8}, [@FRA_SRC={0x8, 0x2, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c880}, 0x24005040)

5.712817758s ago: executing program 6 (id=578):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.355139903s ago: executing program 4 (id=579):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @private=0xa010100}]}}]}, 0x3c}}, 0x24000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.618074144s ago: executing program 1 (id=580):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x211}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

4.617648266s ago: executing program 4 (id=581):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x5, 0x4a7, &(0x7f0000001140)="$eJzs3EtvG0UcAPD/bl59hZhSXm2hhoKIeCRNWqAHJB4CqRckJDiUY0jTqjRtUBMkWkU0IFSOqJ+gcETiE3CCCwIkJBBXuCOkCuXS0gNatLY3dRI7OGkc0+T3k1zPeGZ3ZnY969mZbgLYssr5P0nEroj4LSIGqtHFGcrVtxvzs+N/z8+OJ5Flb/6VVPJdn58dL7IW2+2sRQbTiPSTJPY1KHf6wsUzY5OTE+dr8eGZs+8NT1+4+Mzps2OnJk5NnBs9evTI4ZHnnxt9dl3a2Z/Xde+HU/sfPPb2ldfHj19554ev8vruqqVfn5/tXbxFqQjsjYhs6f5eaqHMcpQXH8s6j6+u+v97/XXhpLuDFWFVuiIiP109lf4/EF1x6+QNxGsfR6QdrR/QPlmWZX3LPs2vCtvzwFwGbGJJdLoGQGcUv/j5fXzx2uAhSEdde7l6A5S3+0btVU3prtz5lEvVe6P+NpVfjgMRcfPq8bmbV2PJfAoAQDt8k49/nm40/kvjvrp8d9XWhkoRcXdE7I6IeyJiT0TcG1HJe39EPNBqwUnjpZHl459ftq+xaS3Jx38v1Na2Fo//Fua9S121WH+l/T3JydOTE4dqx2Qwevry+MgKZXz76q+fNUsrR0Q+9iteefnFWLBWjz+7l0zQnRibGbudNte7diBib3ej9icLKwFJbFvz/vNjdvrJL/c3S//v9q9gHdaZsi8inqie/7lY0v5CsvL65PC2mJw4NFx8K5b78efLbzQr/7bavw6ufRSxo+H3f6H9paR+vXZ61UV0X/7906b3NGv9/vcmb1XCxaLtB2MzM+dHInqTueWfj97atogX+fP2Dx5s3P93R/zzeW27fRGRf4kfioiHIyp3bXndH4mIRyPi4AoH4PtXHns3f/9pTe1vr7z9J1Z1/usDPbH0k0aBrjPffd2s/NbO/5FKaLD2SSvXv2rhxXWreQXXetwAAADgTpJW/g98kkRU50121aXtiR3p5NT0zFMnp94/d6KaVoqetJjpGqibDx2pzQ0X8dEl8cOVeeMsy7LtlfjQ+NRku9bUgdbsrPb/dGjhWpCmQ0PVtD+6Fud9sSM1BNpqVetozZ5oA+5IrfV/HR82o4X+v/xJwILOD5tUtf93DXS6HsDG8/daYOtq1P8vRdzoQFWADeb3H7Yu/R+2rtX2/1Kb6gFsPL//sCUtfiS+N1p4nL+lwO5j67OfzR/o6nQ1+ta2eaQdP3TLA0mDpLRB5rTlPfeuS8VipTx9EdHqDi/FRh3MTl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1se/AQAA//++KOKq")
mount$9p_unix(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200000, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000cc0)='./file2\x00', 0x800, 0x2dd8806920477201, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))

3.604664696s ago: executing program 7 (id=582):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610c", 0x25, 0x0, &(0x7f0000000540)={0xc9, 0x7, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.58293295s ago: executing program 6 (id=583):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1c0})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000004000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0)

2.537696909s ago: executing program 7 (id=584):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x1, 0x5, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x4000800)

2.294685322s ago: executing program 4 (id=585):
r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115})
io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="ff", 0x1}], 0x1)
close_range(r4, 0xffffffffffffffff, 0x0)

1.922345882s ago: executing program 7 (id=586):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
shutdown(r0, 0x1)
sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000000)={0xa, 0x4e20, 0x80, @remote, 0xe6c}, 0x1c)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @empty}}, 0xe, 0x7d}, 0x90)

1.904218364s ago: executing program 6 (id=587):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

1.741610681s ago: executing program 1 (id=588):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

880.938596ms ago: executing program 7 (id=589):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in=@local, 0x0, 0x4, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff801, 0xe8d6}, {0x0, 0x1}, 0x10000000, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x2000000, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r2, &(0x7f00000000c0), 0x1c)

664.980721ms ago: executing program 6 (id=590):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r2, &(0x7f00000001c0)=""/40, 0x28)
getdents(r2, 0xfffffffffffffffd, 0x58)

656.999059ms ago: executing program 4 (id=591):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/180, 0xb4}], 0x1}, 0x8}], 0x1, 0x101a0, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)

0s ago: executing program 7 (id=592):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
socket$inet_sctp(0x2, 0x5, 0x84)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x8f, 0x0, 0x0, {[@fastopen={0x1e, 0x10, "3095219940d4649af2f8001b0000"}]}}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

command tx timeout
[  279.404232][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.411900][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.438464][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.454272][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.461647][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.488473][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.074528][ T5792] hsr_slave_0: entered promiscuous mode
[  280.086425][ T5792] hsr_slave_1: entered promiscuous mode
[  280.095671][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.103502][ T5792] Cannot create hsr debugfs directory
[  280.125370][ T5796] hsr_slave_0: entered promiscuous mode
[  280.134593][ T5796] hsr_slave_1: entered promiscuous mode
[  280.143104][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.151027][ T5796] Cannot create hsr debugfs directory
[  280.264578][ T5797] hsr_slave_0: entered promiscuous mode
[  280.274933][ T5797] hsr_slave_1: entered promiscuous mode
[  280.283182][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.291443][ T5797] Cannot create hsr debugfs directory
[  280.966679][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  281.054539][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  281.158758][ T5791] Bluetooth: hci0: command tx timeout
[  281.164544][ T5790] Bluetooth: hci1: command tx timeout
[  281.192162][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  281.233030][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  281.315752][ T5791] Bluetooth: hci3: command tx timeout
[  281.396045][ T5791] Bluetooth: hci2: command tx timeout
[  281.486146][ T5791] Bluetooth: hci4: command tx timeout
[  281.734007][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  281.852025][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  281.929876][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  281.973686][ T5797] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  282.005880][ T5797] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  282.033413][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  282.057642][ T5797] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  282.247831][ T5797] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  282.353061][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  282.406876][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  282.442716][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  282.515867][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  282.573269][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  282.660638][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  282.771360][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  282.820688][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  283.177493][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.565902][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[  283.649107][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.657070][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.778919][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.808993][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.816971][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.894540][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.091777][ T5797] 8021q: adding VLAN 0 to HW filter on device team0
[  284.280967][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.288843][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.337576][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[  284.374267][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.446392][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.454169][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.639862][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.647708][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.705366][ T5796] 8021q: adding VLAN 0 to HW filter on device team0
[  284.852342][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.902200][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.910090][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.941946][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.949850][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.974656][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.982730][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.251227][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[  285.475267][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.483171][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.660747][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  285.712627][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.720544][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.906335][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.536992][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.572713][ T5785] veth0_vlan: entered promiscuous mode
[  287.770612][ T5785] veth1_vlan: entered promiscuous mode
[  287.916934][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.982300][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.263848][ T5785] veth0_macvtap: entered promiscuous mode
[  288.385734][ T5785] veth1_macvtap: entered promiscuous mode
[  288.411311][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.624232][ T5786] veth0_vlan: entered promiscuous mode
[  288.698517][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.807201][ T5786] veth1_vlan: entered promiscuous mode
[  288.873434][ T5796] veth0_vlan: entered promiscuous mode
[  288.898075][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.047163][ T5796] veth1_vlan: entered promiscuous mode
[  289.087379][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.096808][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.106174][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.115509][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.191545][ T5792] veth0_vlan: entered promiscuous mode
[  289.328514][ T5786] veth0_macvtap: entered promiscuous mode
[  289.392916][ T5786] veth1_macvtap: entered promiscuous mode
[  289.449530][ T5792] veth1_vlan: entered promiscuous mode
[  289.552662][ T5796] veth0_macvtap: entered promiscuous mode
[  289.673978][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.687257][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.702776][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.718720][ T5796] veth1_macvtap: entered promiscuous mode
[  289.813705][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.826456][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.842619][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.963136][ T5792] veth0_macvtap: entered promiscuous mode
[  289.994962][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.009479][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.019823][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.030661][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.047509][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.104597][ T5792] veth1_macvtap: entered promiscuous mode
[  290.133600][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.144634][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.154455][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.163746][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.240922][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.251897][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.262334][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.273171][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.288852][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.373975][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.387459][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.398129][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.409640][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.420063][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.431159][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.448190][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.572596][ T5796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.582000][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.591477][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.602718][ T5796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.672144][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.683827][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.694432][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.705490][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.715742][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.726671][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.742016][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.908936][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.920696][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.933019][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.942472][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.031869][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  291.038903][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  291.137767][ T5797] veth0_vlan: entered promiscuous mode
[  291.273021][ T5797] veth1_vlan: entered promiscuous mode
[  291.688663][ T5797] veth0_macvtap: entered promiscuous mode
[  291.799162][ T5797] veth1_macvtap: entered promiscuous mode
[  292.026443][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.039673][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.051880][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.063360][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.073596][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.084583][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.094882][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.106048][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.123722][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.395778][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.406703][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.416950][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.427970][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.440496][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.452883][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.463185][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.474526][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.492829][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.762655][ T5797] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.774681][ T5797] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.784019][ T5797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.793250][ T5797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.308204][ T3903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.320760][ T3903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.471205][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.481827][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.149174][ T5785] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  298.543527][ T3609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.551928][ T3609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.670743][ T3609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.685612][ T3609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.896026][ T5078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.904269][ T5078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.947619][ T5078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.956930][ T5078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.253154][ T4521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.261486][ T4521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.572070][ T3667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.581303][ T3667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.178747][ T5978] loop0: detected capacity change from 0 to 32768
[  301.379067][ T5978] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  301.400903][ T5978] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  301.411029][ T5978] bcachefs (loop0): Version upgrade required:
[  301.411029][ T5978] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  301.411029][ T5978] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[  301.411029][ T5978]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  301.488352][ T5978] bcachefs (loop0): dropping and reconstructing all alloc info
[  301.804381][ T5978] bcachefs (loop0): accounting_read... done
[  301.846282][ T5978] bcachefs (loop0): alloc_read... done
[  301.852575][ T5978] bcachefs (loop0): snapshots_read... done
[  301.895728][ T5978] bcachefs (loop0): done starting filesystem
[  302.069653][   T30] audit: type=1800 audit(1743512681.533:2): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="file2" dev="loop0" ino=536870913 res=0 errno=0
[  302.346496][   T30] audit: type=1800 audit(1743512681.623:3): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="file2" dev="loop0" ino=536870913 res=0 errno=0
[  302.383331][ T5785] bcachefs (loop0): shutting down
[  302.505624][ T5990] loop2: detected capacity change from 0 to 32768
[  302.568363][ T3667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.579370][ T3667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.622435][ T5990] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3 (5990)
[  302.670130][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.679105][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.712943][ T5990] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  302.720953][ T5785] bcachefs (loop0): shutdown complete
[  302.723664][ T5990] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  302.739482][ T5990] BTRFS info (device loop2): using free-space-tree
[  303.683822][ T5993] loop1: detected capacity change from 0 to 1024
[  303.684245][ T5995] loop3: detected capacity change from 0 to 32768
[  303.702351][ T5995] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7 (5995)
[  303.768129][ T5995] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  303.778858][ T5995] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[  303.780453][ T5993] =======================================================
[  303.780453][ T5993] WARNING: The mand mount option has been deprecated and
[  303.780453][ T5993]          and is ignored by this kernel. Remove the mand
[  303.780453][ T5993]          option from the mount to silence this warning.
[  303.780453][ T5993] =======================================================
[  303.790746][ T5995] BTRFS info (device loop3): using free-space-tree
[  304.208343][ T5993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.225709][ T5993] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.468526][ T5993] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  304.472103][   T30] audit: type=1800 audit(1743512683.963:4): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7" name="file1" dev="loop3" ino=260 res=0 errno=0
[  304.808533][ T5792] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  304.961320][ T5796] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  305.071300][ T6033] loop4: detected capacity change from 0 to 2048
[  305.267005][ T6033] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  305.281617][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.481501][ T5840] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  307.705905][ T5840] usb 4-1: Using ep0 maxpacket: 32
[  307.723212][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.735335][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.745783][ T5840] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  307.755480][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.819099][ T5840] usb 4-1: config 0 descriptor??
[  308.449389][ T5840] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  308.536520][ T6057] syzkaller0: entered allmulticast mode
[  308.602482][ T6057] syzkaller0 (unregistering): left allmulticast mode
[  308.672470][ T5840] usb 4-1: USB disconnect, device number 2
[  310.717743][ T6072] trusted_key: syz.1.23 sent an empty control message without MSG_MORE.
[  311.134682][ T6076] Zero length message leads to an empty skb
[  313.869591][ T6104] input: syz1 as /devices/virtual/input/input5
[  313.908808][ T6100] netlink: 'syz.0.33': attribute type 5 has an invalid length.
[  314.098496][ T6107] loop1: detected capacity change from 0 to 128
[  314.169183][ T6109] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  314.176115][ T6109] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  314.184991][ T6109] vhci_hcd vhci_hcd.0: Device attached
[  314.301253][ T6107] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  314.406392][ T6114] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5)
[  314.413284][ T6114] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  314.422562][ T6114] vhci_hcd vhci_hcd.0: Device attached
[  314.451723][ T6107] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.498071][ T1670] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[  314.636903][ T6109] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  314.703840][ T6109] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9)
[  314.710739][ T6109] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  314.720693][ T6109] vhci_hcd vhci_hcd.0: Device attached
[  314.749500][ T6107] process 'syz.1.36' launched './file0' with NULL argv: empty string added
[  314.841844][ T6114] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12)
[  314.848818][ T6114] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  314.858205][ T6114] vhci_hcd vhci_hcd.0: Device attached
[  314.950680][ T6126] loop0: detected capacity change from 0 to 16
[  314.983511][ T6109] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(11)
[  314.990491][ T6109] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  315.000242][ T6109] vhci_hcd vhci_hcd.0: Device attached
[  315.019388][ T6126] erofs (device loop0): mounted with root inode @ nid 36.
[  315.085828][ T6109] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(15)
[  315.092893][ T6109] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  315.101590][ T6109] vhci_hcd vhci_hcd.0: Device attached
[  315.212708][ T6110] vhci_hcd: connection reset by peer
[  315.213901][ T6115] vhci_hcd: connection closed
[  315.219879][ T1847] vhci_hcd: stop threads
[  315.220405][ T6118] vhci_hcd: connection closed
[  315.224999][ T1847] vhci_hcd: release socket
[  315.225326][ T1847] vhci_hcd: disconnect device
[  315.235678][ T6130] vhci_hcd: connection closed
[  315.244374][ T6123] vhci_hcd: connection closed
[  315.252135][ T6128] vhci_hcd: connection closed
[  315.252850][ T1847] vhci_hcd: stop threads
[  315.269461][ T1847] vhci_hcd: release socket
[  315.279990][ T1847] vhci_hcd: disconnect device
[  315.334699][ T1847] vhci_hcd: stop threads
[  315.343361][ T1847] vhci_hcd: release socket
[  315.348391][ T1847] vhci_hcd: disconnect device
[  315.406529][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  315.419368][ T1847] vhci_hcd: stop threads
[  315.423883][ T1847] vhci_hcd: release socket
[  315.430022][ T1847] vhci_hcd: disconnect device
[  315.463146][ T1847] vhci_hcd: stop threads
[  315.468207][ T1847] vhci_hcd: release socket
[  315.473245][ T1847] vhci_hcd: disconnect device
[  315.532410][ T1847] vhci_hcd: stop threads
[  315.537326][ T1847] vhci_hcd: release socket
[  315.542259][ T1847] vhci_hcd: disconnect device
[  316.376998][ T6139] netlink: 'syz.2.44': attribute type 2 has an invalid length.
[  316.639171][ T6141] capability: warning: `syz.4.45' uses deprecated v2 capabilities in a way that may be insecure
[  317.536166][ T5843] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  317.549818][ T5791] block nbd4: Receive control failed (result -104)
[  317.568499][ T6151] block nbd4: shutting down sockets
[  317.695642][ T5843] usb 1-1: Using ep0 maxpacket: 8
[  317.952612][ T5843] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  317.962598][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.971147][ T5843] usb 1-1: Product: syz
[  317.976756][ T5843] usb 1-1: Manufacturer: syz
[  317.981632][ T5843] usb 1-1: SerialNumber: syz
[  318.154866][ T5843] usb 1-1: config 0 descriptor??
[  318.190708][ T5843] gspca_main: sq930x-2.14.0 probing 2770:930c
[  318.406214][ T5843] gspca_sq930x: reg_r 001f failed -71
[  318.412548][ T5843] sq930x 1-1:0.0: probe with driver sq930x failed with error -71
[  318.447536][ T5843] usb 1-1: USB disconnect, device number 2
[  318.822886][   T30] audit: type=1326 audit(1743512698.313:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.53" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63eb78d169 code=0x0
[  318.895542][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'.
[  318.923749][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'.
[  319.632162][ T1670] vhci_hcd: vhci_device speed not set
[  320.946235][ T5840] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  321.166187][ T5840] usb 1-1: Using ep0 maxpacket: 16
[  321.240225][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.251897][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.262237][ T5840] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00
[  321.271925][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.437557][ T5840] usb 1-1: config 0 descriptor??
[  321.565743][ T6194] netlink: 'syz.4.67': attribute type 39 has an invalid length.
[  321.664024][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.793763][ T6194] bridge_slave_0 (unregistering): left allmulticast mode
[  321.801586][ T6194] bridge_slave_0 (unregistering): left promiscuous mode
[  321.809849][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.926448][ T5840] pantherlord 0003:0E8F:0003.0002: collection stack underflow
[  321.943515][ T5840] pantherlord 0003:0E8F:0003.0002: item 0 0 0 12 parsing failed
[  322.000972][ T5840] pantherlord 0003:0E8F:0003.0002: parse failed
[  322.007960][ T5840] pantherlord 0003:0E8F:0003.0002: probe with driver pantherlord failed with error -22
[  322.173797][ T5840] usb 1-1: USB disconnect, device number 3
[  322.830114][ T6205] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  323.714353][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[  328.441800][ T6243] fuse: Bad value for 'fd'
[  331.697762][ T6257] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.88'.
[  331.707557][ T6257] openvswitch: netlink: Message has 44053 unknown bytes.
[  333.517090][ T6234] Set syz1 is full, maxelem 65536 reached
[  334.696053][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'.
[  334.705494][ T6277] vlan0: entered promiscuous mode
[  338.794360][ T6309] loop1: detected capacity change from 0 to 32768
[  339.149841][ T6311] loop3: detected capacity change from 0 to 40427
[  339.162061][ T6309] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  339.175365][ T6311] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  339.183600][ T6311] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  339.411749][ T6309] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  339.596549][ T6311] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  339.603939][ T6311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  339.830940][   T30] audit: type=1800 audit(1743512719.323:6): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.111" name="bus" dev="loop3" ino=11 res=0 errno=0
[  339.887812][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.113'.
[  340.282621][ T5786] ocfs2: Unmounting device (7,1) on (node local)
[  340.755839][   T30] audit: type=1326 audit(1743512720.253:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936f78d169 code=0x7ffc0000
[  340.782383][   T30] audit: type=1326 audit(1743512720.253:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f936f78d169 code=0x7ffc0000
[  340.806144][   T30] audit: type=1326 audit(1743512720.253:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936f78d169 code=0x7ffc0000
[  340.829707][   T30] audit: type=1326 audit(1743512720.253:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936f78d169 code=0x7ffc0000
[  341.646831][ T6333] syz.4.120 uses obsolete (PF_INET,SOCK_PACKET)
[  342.510301][ T6340] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  342.652820][ T6340] netlink: 76 bytes leftover after parsing attributes in process `syz.2.122'.
[  344.483122][ T6352] loop2: detected capacity change from 0 to 4096
[  344.566360][ T6354] loop4: detected capacity change from 0 to 32768
[  344.567010][ T6352] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  344.576436][ T6354] btrfs: Deprecated parameter 'usebackuproot'
[  344.588757][ T6354] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  344.606478][ T6354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.127 (6354)
[  344.637588][ T6354] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  344.648434][ T6354] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  344.658039][ T6354] BTRFS info (device loop4): using free-space-tree
[  344.866700][ T6354] BTRFS info (device loop4): rebuilding free space tree
[  345.006789][ T6354] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  345.138119][ T5797] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  345.882544][ T5791] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  345.897081][ T5791] Bluetooth: hci0: Injecting HCI hardware error event
[  345.912009][ T5791] Bluetooth: hci0: hardware error 0x00
[  347.318551][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  347.962201][ T5791] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  349.849373][ T6418] loop0: detected capacity change from 0 to 1024
[  350.107981][ T6418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.828384][ T5785] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11
[  350.925426][ T5785] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11
[  351.168388][ T6437] loop2: detected capacity change from 0 to 128
[  351.932842][ T6440] netlink: 'syz.4.155': attribute type 1 has an invalid length.
[  352.096836][ T6436] loop1: detected capacity change from 0 to 32768
[  352.199273][ T6436] 
[  352.199273][ T6436]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.199273][ T6436] 
[  352.237555][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.273697][ T6436] ERROR: (device loop1): diWrite: ixpxd invalid
[  352.273697][ T6436] 
[  352.284191][ T6436] ERROR: (device loop1): txAbort: 
[  352.284191][ T6436] 
[  352.308082][   T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.323463][ T6436] 
[  352.323463][ T6436]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.323463][ T6436] 
[  352.353722][ T6436] 
[  352.353722][ T6436]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.353722][ T6436] 
[  352.510921][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  352.518090][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  352.611477][   T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.880608][   T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.260316][   T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.280690][ T1670] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  353.465810][ T1670] usb 2-1: Using ep0 maxpacket: 32
[  353.518149][ T1670] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  353.528655][ T1670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.709549][ T1670] usb 2-1: config 0 descriptor??
[  353.763041][ T1670] gspca_main: sq930x-2.14.0 probing 041e:403c
[  353.939090][   T51] bridge_slave_1: left allmulticast mode
[  353.945899][   T51] bridge_slave_1: left promiscuous mode
[  353.953689][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.159319][   T51] bridge_slave_0: left allmulticast mode
[  354.165964][   T51] bridge_slave_0: left promiscuous mode
[  354.173411][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.114638][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.196974][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.241251][   T51] bond0 (unregistering): Released all slaves
[  355.435726][ T1670] gspca_sq930x: reg_w 0105 bc00 failed -71
[  355.442164][ T1670] sq930x 2-1:0.0: probe with driver sq930x failed with error -71
[  355.498513][ T1670] usb 2-1: USB disconnect, device number 2
[  356.066808][   T51] hsr_slave_0: left promiscuous mode
[  356.096988][   T51] hsr_slave_1: left promiscuous mode
[  356.105791][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.113609][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.188584][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.197075][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.248631][   T51] veth1_macvtap: left promiscuous mode
[  356.254591][   T51] veth0_macvtap: left promiscuous mode
[  356.263619][   T51] veth1_vlan: left promiscuous mode
[  356.269594][   T51] veth0_vlan: left promiscuous mode
[  357.437492][ T6455] fuse: root generation should be zero
[  357.540252][   T51] team0 (unregistering): Port device team_slave_1 removed
[  357.687642][   T51] team0 (unregistering): Port device team_slave_0 removed
[  358.670867][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  358.699235][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  358.729843][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  358.799404][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  358.814455][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  358.885719][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  358.911272][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  358.927119][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  358.981708][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  359.008270][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  360.917603][ T5790] Bluetooth: hci0: command tx timeout
[  361.030963][ T6473] chnl_net:caif_netlink_parms(): no params data found
[  361.206703][ T6469] chnl_net:caif_netlink_parms(): no params data found
[  361.235900][ T5790] Bluetooth: hci2: command tx timeout
[  362.909934][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.918703][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.926885][ T6473] bridge_slave_0: entered allmulticast mode
[  362.936791][ T6473] bridge_slave_0: entered promiscuous mode
[  363.001890][ T5790] Bluetooth: hci0: command tx timeout
[  363.163437][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.174603][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.182866][ T6473] bridge_slave_1: entered allmulticast mode
[  363.192877][ T6473] bridge_slave_1: entered promiscuous mode
[  363.316385][ T5790] Bluetooth: hci2: command tx timeout
[  363.875186][ T6473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.912244][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.923445][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.933644][ T6469] bridge_slave_0: entered allmulticast mode
[  363.943824][ T6469] bridge_slave_0: entered promiscuous mode
[  363.954712][ T5840] IPVS: starting estimator thread 0...
[  364.115892][ T6473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.140735][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.149160][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.157514][ T6469] bridge_slave_1: entered allmulticast mode
[  364.167472][ T6469] bridge_slave_1: entered promiscuous mode
[  364.179834][ T6539] IPVS: using max 192 ests per chain, 9600 per kthread
[  365.093002][ T5790] Bluetooth: hci0: command tx timeout
[  365.294557][ T6543] loop4: detected capacity change from 0 to 32768
[  365.390491][ T6543] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  365.405511][ T5790] Bluetooth: hci2: command tx timeout
[  365.514170][ T6473] team0: Port device team_slave_0 added
[  365.589185][ T6543] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  365.630384][ T6469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  365.689571][ T6473] team0: Port device team_slave_1 added
[  365.765710][ T6469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.992755][ T5797] ocfs2: Unmounting device (7,4) on (node local)
[  366.594439][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  366.603254][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.630362][ T6473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  366.670731][ T6469] team0: Port device team_slave_0 added
[  366.743356][ T6469] team0: Port device team_slave_1 added
[  366.968948][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  366.976460][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.005567][ T6473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.154123][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.161805][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.176571][ T5790] Bluetooth: hci0: command tx timeout
[  367.189024][ T6469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.348420][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.357367][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.385358][ T6469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.517787][ T5790] Bluetooth: hci2: command tx timeout
[  367.890130][ T6473] hsr_slave_0: entered promiscuous mode
[  367.900978][ T6473] hsr_slave_1: entered promiscuous mode
[  368.417663][ T6469] hsr_slave_0: entered promiscuous mode
[  368.437376][ T6469] hsr_slave_1: entered promiscuous mode
[  368.446777][ T6469] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  368.454611][ T6469] Cannot create hsr debugfs directory
[  370.991002][ T6583] loop1: detected capacity change from 0 to 8192
[  371.019038][ T5840] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  371.149679][ T6587] loop3: detected capacity change from 0 to 32768
[  371.266765][ T5840] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  371.278377][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.297103][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  371.310822][ T5840] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  371.320646][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.400620][ T5840] usb 5-1: config 0 descriptor??
[  371.556361][ T6587] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  371.578845][ T6587] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  371.588908][ T6587] bcachefs (loop3): Version upgrade required:
[  371.588908][ T6587] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  371.588908][ T6587] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[  371.588908][ T6587]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  371.666144][ T6587] bcachefs (loop3): dropping and reconstructing all alloc info
[  371.686175][ T6469] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  371.863926][ T6587] bcachefs (loop3): accounting_read... done
[  371.883105][ T6587] bcachefs (loop3): alloc_read... done
[  371.889487][ T6587] bcachefs (loop3): snapshots_read... done
[  371.929272][ T6587] bcachefs (loop3): done starting filesystem
[  371.952533][ T6469] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  372.037592][   T30] audit: type=1800 audit(1743512751.523:11): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.193" name="file2" dev="loop3" ino=536870913 res=0 errno=0
[  372.059755][ T5840] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0
[  372.068470][ T5840] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0
[  372.076605][ T5840] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0
[  372.084638][ T5840] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0
[  372.092800][ T5840] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0
[  372.101507][ T5840] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0
[  372.118954][ T5840] hid-multitouch 0003:0EEF:72D0.0003: unknown main item tag 0x0
[  372.119675][ T6469] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  372.172996][   T30] audit: type=1800 audit(1743512751.643:12): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.193" name="file2" dev="loop3" ino=536870913 res=0 errno=0
[  372.359464][ T5840] hid-multitouch 0003:0EEF:72D0.0003: hidraw0: USB HID v10.00 Device [HID 0eef:72d0] on usb-dummy_hcd.4-1/input0
[  372.383550][ T6473] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  372.431630][ T6469] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  372.443933][ T5796] bcachefs (loop3): shutting down
[  372.526999][ T6473] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  372.534623][ T5840] usb 5-1: USB disconnect, device number 2
[  372.651843][ T5796] bcachefs (loop3): shutdown complete
[  372.670528][ T6473] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  372.791164][ T6473] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  374.637020][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.991830][ T6469] 8021q: adding VLAN 0 to HW filter on device team0
[  375.117978][ T3903] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.125925][ T3903] bridge0: port 1(bridge_slave_0) entered forwarding state
[  375.292728][ T3903] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.300693][ T3903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.439369][ T6473] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.450590][ T6617] loop1: detected capacity change from 0 to 2048
[  375.754358][ T6469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  375.780659][ T6617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.149322][ T6473] 8021q: adding VLAN 0 to HW filter on device team0
[  376.313778][ T3903] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.321749][ T3903] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.449862][ T6627] netlink: 'syz.4.201': attribute type 1 has an invalid length.
[  376.599068][ T3903] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.607046][ T3903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.710290][ T6632] bond1: (slave gretap1): making interface the new active one
[  376.723331][ T6632] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  376.780473][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.005943][   T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  378.304080][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  378.316026][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  378.327725][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  378.341313][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  378.350921][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.882225][   T24] usb 2-1: config 0 descriptor??
[  378.892612][ T6638] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  378.911260][ T6642] loop4: detected capacity change from 0 to 32768
[  378.924294][ T6642] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.203 (6642)
[  378.969580][ T6469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.009973][ T6642] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  379.021641][ T6642] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  379.031496][ T6642] BTRFS info (device loop4): using free-space-tree
[  379.437817][   T24] apple 0003:05AC:025B.0004: unknown main item tag 0x4
[  379.445401][   T24] apple 0003:05AC:025B.0004: unknown main item tag 0x6
[  379.452764][   T24] apple 0003:05AC:025B.0004: report_id 29495 is invalid
[  379.460835][   T24] apple 0003:05AC:025B.0004: item 0 2 1 8 parsing failed
[  379.677208][   T24] apple 0003:05AC:025B.0004: parse failed
[  379.693984][   T24] apple 0003:05AC:025B.0004: probe with driver apple failed with error -22
[  379.847699][   T24] usb 2-1: USB disconnect, device number 3
[  380.870719][ T5797] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  381.206169][ T6473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.722331][ T6469] veth0_vlan: entered promiscuous mode
[  382.905436][ T6469] veth1_vlan: entered promiscuous mode
[  383.266857][ T5843] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  383.420011][ T6469] veth0_macvtap: entered promiscuous mode
[  383.516754][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  383.521115][ T6469] veth1_macvtap: entered promiscuous mode
[  383.528693][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  383.544081][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  383.558397][ T5843] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  383.568537][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.616809][ T6697] vcan0: tx drop: invalid da for name 0x0000000000000002
[  383.820653][ T5843] usb 4-1: config 0 descriptor??
[  383.938438][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.950616][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.961354][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.973196][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.983617][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  384.001882][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.021820][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  384.033244][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.049571][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.325653][ T5843] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  384.432517][ T5843] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  384.549796][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.560880][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.571238][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.582453][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.593011][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.611374][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.624009][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.634909][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.650893][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.735520][   T24] usb 4-1: USB disconnect, device number 3
[  384.839497][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.212'.
[  384.849453][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'.
[  384.893951][ T6469] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.903324][ T6469] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.920896][ T6469] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.932784][ T6469] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.734598][ T6710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.213'.
[  385.798560][ T6473] veth0_vlan: entered promiscuous mode
[  385.989855][ T6473] veth1_vlan: entered promiscuous mode
[  386.160922][ T5840] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  386.188668][ T5843] kernel read not supported for file /zero (pid: 5843 comm: kworker/0:3)
[  386.412363][ T5840] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  386.424305][ T5840] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  386.529720][ T5840] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  386.539678][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  386.554510][ T5840] usb 2-1: SerialNumber: syz
[  386.653728][ T6473] veth0_macvtap: entered promiscuous mode
[  386.811750][ T6473] veth1_macvtap: entered promiscuous mode
[  386.968843][ T5840] usb 2-1: 0:2 : does not exist
[  387.190980][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.202155][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.212693][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.217497][ T5840] usb 2-1: USB disconnect, device number 4
[  387.223817][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.241249][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.252392][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.263770][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.275581][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.286009][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.297172][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.313356][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.768387][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  387.951913][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.964691][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.975376][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.987731][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.998501][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.009363][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.019889][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.030799][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.041834][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.053016][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.069035][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.620276][ T6473] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.629759][ T6473] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.639160][ T6473] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.648441][ T6473] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.784749][ T6736] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.021546][ T6736] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.242145][ T6736] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.486662][ T6736] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.079904][ T6750] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  390.264311][ T6736] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.301474][ T6736] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.422435][ T6736] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.462373][ T6736] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.601366][ T6767] loop4: detected capacity change from 0 to 32768
[  392.687439][ T6767] (syz.4.225,6767,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  392.709611][ T6767] (syz.4.225,6767,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  392.828805][ T6767] JBD2: Ignoring recovery information on journal
[  392.974943][ T6767] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  393.210648][ T6767] overlayfs: upper fs does not support tmpfile.
[  393.221002][ T6767] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  393.231710][ T6767] overlayfs: upper fs missing required features.
[  393.579250][ T5797] ocfs2: Unmounting device (7,4) on (node local)
[  395.476389][ T5791] Bluetooth: hci1: command 0x0406 tx timeout
[  395.477858][ T5799] Bluetooth: hci3: command 0x0406 tx timeout
[  396.546454][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.555329][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.633895][ T6807] loop4: detected capacity change from 0 to 2048
[  396.779201][ T6646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.793569][ T6646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.074413][ T6807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.336152][ T6807] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  397.376945][ T6807] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 3 with error 28
[  397.390546][ T6807] EXT4-fs (loop4): This should not happen!! Data will be lost
[  397.390546][ T6807] 
[  397.403271][ T6807] EXT4-fs (loop4): Total free blocks count 0
[  397.410493][ T6807] EXT4-fs (loop4): Free/Dirty block details
[  397.418520][ T6807] EXT4-fs (loop4): free_blocks=2415919504
[  397.424543][ T6807] EXT4-fs (loop4): dirty_blocks=16
[  397.430418][ T6807] EXT4-fs (loop4): Block reservation details
[  397.436845][ T6807] EXT4-fs (loop4): i_reserved_data_blocks=1
[  397.523199][ T6821] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  399.992813][ T3667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.001043][ T3667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.341390][ T5078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.351055][ T5078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.023554][ T6850] loop3: detected capacity change from 0 to 164
[  402.958795][ T6874] loop6: detected capacity change from 0 to 128
[  403.638469][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  408.502128][ T6930] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  408.510044][ T6930] overlayfs: failed to set xattr on upper
[  408.516846][ T6930] overlayfs: ...falling back to redirect_dir=nofollow.
[  408.524037][ T6930] overlayfs: ...falling back to index=off.
[  410.313183][ T6941] syzkaller0: entered promiscuous mode
[  410.319227][ T6941] syzkaller0: entered allmulticast mode
[  411.887226][ T3359] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  412.086576][ T3359] usb 5-1: Using ep0 maxpacket: 32
[  412.137003][ T3359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  412.156548][ T3359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.170264][ T3359] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  412.179996][ T3359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.205335][ T5840] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  412.284652][ T3359] usb 5-1: config 0 descriptor??
[  412.396153][ T5840] usb 2-1: Using ep0 maxpacket: 16
[  412.419385][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  412.432175][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  412.604701][ T5840] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  412.614659][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.623427][ T5840] usb 2-1: Product: syz
[  412.628283][ T5840] usb 2-1: Manufacturer: syz
[  412.633369][ T5840] usb 2-1: SerialNumber: syz
[  412.807788][ T5840] usb 2-1: config 0 descriptor??
[  412.819190][ T3359] ft260 0003:0403:6030.0006: unknown main item tag 0x0
[  412.873167][ T5840] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  412.886694][ T5840] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  413.047213][ T3359] ft260 0003:0403:6030.0006: chip code: 0000 0000
[  413.257194][ T3359] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0
[  413.500390][ T5840] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  413.508835][ T3359] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup
[  413.535530][ T5840] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  413.736829][ T5846] usb 5-1: USB disconnect, device number 3
[  413.915719][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  413.922801][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  414.007383][ T5840] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  414.014852][ T5840] em28xx 2-1:0.0: No AC97 audio processor
[  414.075704][ T5840] usb 2-1: USB disconnect, device number 5
[  414.083498][ T5840] em28xx 2-1:0.0: Disconnecting em28xx
[  414.232657][ T5840] em28xx 2-1:0.0: Freeing device
[  415.182029][ T6989] netlink: 'syz.5.285': attribute type 4 has an invalid length.
[  415.308181][ T6992] netlink: 'syz.5.285': attribute type 4 has an invalid length.
[  417.467419][ T7018] loop5: detected capacity change from 0 to 128
[  417.592726][ T7020] loop4: detected capacity change from 0 to 128
[  417.631692][ T7018] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  418.097405][ T7018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  418.109674][ T7020] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  418.413571][ T7020] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  418.649649][ T7018] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only
[  418.660118][ T7018] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null.
[  418.778592][ T7024] loop3: detected capacity change from 0 to 40427
[  418.855803][ T7024] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3fffff
[  418.937141][ T7024] F2FS-fs (loop3): invalid crc value
[  419.376128][ T7024] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  419.514507][ T7024] F2FS-fs (loop3): Corrupted max_depth of 3: 134217729
[  419.848189][ T5797] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  420.641291][ T5846] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  420.875637][ T5846] usb 2-1: Using ep0 maxpacket: 8
[  420.995677][ T5846] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  421.005834][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.014141][ T5846] usb 2-1: Product: syz
[  421.018861][ T5846] usb 2-1: Manufacturer: syz
[  421.023739][ T5846] usb 2-1: SerialNumber: syz
[  421.195660][ T5846] usb 2-1: config 0 descriptor??
[  421.449129][ T5846] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  422.104387][ T5843] libceph: connect (1)[c::]:6789 error -101
[  422.111497][ T5843] libceph: mon0 (1)[c::]:6789 connect error
[  422.263282][ T7059] ceph: No mds server is up or the cluster is laggy
[  422.549500][ T5846] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  422.646339][ T5846] usb 2-1: USB disconnect, device number 6
[  423.010137][ T5840] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  423.252164][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.263569][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.274438][ T5840] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  423.287875][ T5840] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  423.297756][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.544256][ T5840] usb 7-1: config 0 descriptor??
[  423.733243][ T7072] loop5: detected capacity change from 0 to 4096
[  423.749602][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.311'.
[  424.062996][ T5840] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  424.111384][ T7072] ntfs3(loop5): ino=a, mi_enum_attr
[  424.149015][ T7072] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  424.188561][ T5840] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  424.209772][ T7072] ntfs3(loop5): Failed to load $UpCase (-22).
[  424.282465][ T7076] netlink: 76 bytes leftover after parsing attributes in process `syz.1.312'.
[  424.455378][ T5846] usb 7-1: USB disconnect, device number 2
[  424.682088][   T30] audit: type=1326 audit(1743512804.163:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63eb78d169 code=0x7fc00000
[  425.070420][   T30] audit: type=1326 audit(1743512804.553:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63eb78d169 code=0x7fc00000
[  427.049857][ T7090] loop3: detected capacity change from 0 to 40427
[  427.089622][ T7090] F2FS-fs (loop3): invalid crc value
[  427.533883][ T7090] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  427.630016][ T7098] f2fs_ckpt-7:3: attempt to access beyond end of device
[  427.630016][ T7098] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  427.645030][ T7098] CPU: 0 UID: 0 PID: 7098 Comm: f2fs_ckpt-7:3 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(undef) 
[  427.645197][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  427.645301][ T7098] Call Trace:
[  427.645362][ T7098]  <TASK>
[  427.645416][ T7098]  dump_stack_lvl+0x216/0x2d0
[  427.645640][ T7098]  dump_stack+0x1e/0x24
[  427.645803][ T7098]  f2fs_handle_critical_error+0x9c6/0xc60
[  427.646001][ T7098]  f2fs_stop_checkpoint+0x60/0x70
[  427.646157][ T7098]  f2fs_write_end_io+0xd66/0x1e10
[  427.646366][ T7098]  ? f2fs_write_end_io+0x1481/0x1e10
[  427.646584][ T7098]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  427.646748][ T7098]  bio_endio+0xdd2/0xfa0
[  427.646915][ T7098]  submit_bio_noacct+0x223/0x2710
[  427.647141][ T7098]  submit_bio+0x58a/0x5b0
[  427.647293][ T7098]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  427.647474][ T7098]  f2fs_submit_write_bio+0x9e/0x270
[  427.647685][ T7098]  __submit_merged_bio+0x175/0x6b0
[  427.647897][ T7098]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  427.648077][ T7098]  f2fs_submit_merged_write_cond+0x406/0x510
[  427.648317][ T7098]  f2fs_write_data_pages+0x50fd/0x58a0
[  427.648627][ T7098]  ? kmsan_internal_set_shadow_origin+0x6c/0x100
[  427.648842][ T7098]  ? kmsan_get_metadata+0x13e/0x1c0
[  427.649002][ T7098]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  427.649170][ T7098]  ? folios_put_refs+0x73/0xc90
[  427.649329][ T7098]  ? filter_irq_stacks+0x60/0x1b0
[  427.649559][ T7098]  ? kmsan_internal_set_shadow_origin+0x6c/0x100
[  427.649783][ T7098]  ? kmsan_get_metadata+0x13e/0x1c0
[  427.649938][ T7098]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  427.650105][ T7098]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  427.650265][ T7098]  do_writepages+0x427/0xc30
[  427.650461][ T7098]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  427.650696][ T7098]  ? _raw_spin_unlock+0x30/0x50
[  427.650881][ T7098]  filemap_fdatawrite+0x1fe/0x250
[  427.651134][ T7098]  f2fs_sync_dirty_inodes+0x2d8/0xa30
[  427.651353][ T7098]  f2fs_write_checkpoint+0x1052/0x2c00
[  427.651704][ T7098]  __checkpoint_and_complete_reqs+0xc3/0x510
[  427.651919][ T7098]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  427.652090][ T7098]  ? kmsan_get_metadata+0x13e/0x1c0
[  427.652258][ T7098]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  427.652443][ T7098]  issue_checkpoint_thread+0xa8/0x350
[  427.652634][ T7098]  ? __pfx_autoremove_wake_function+0x10/0x10
[  427.652845][ T7098]  kthread+0x6ce/0xf10
[  427.652973][ T7098]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  427.653193][ T7098]  ? __pfx_kthread+0x10/0x10
[  427.653328][ T7098]  ret_from_fork+0x6d/0x90
[  427.653555][ T7098]  ? __pfx_kthread+0x10/0x10
[  427.653692][ T7098]  ret_from_fork_asm+0x1a/0x30
[  427.653924][ T7098]  </TASK>
[  427.927083][ T7098] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  428.454110][ T7111] loop6: detected capacity change from 0 to 16
[  428.577268][ T7111] erofs (device loop6): mounted with root inode @ nid 36.
[  428.805671][ T7104] loop5: detected capacity change from 0 to 2048
[  428.931600][ T7104] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  428.948835][ T7104] UDF-fs: Scanning with blocksize 512 failed
[  429.194966][ T7104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  430.867326][ T7128] warning: `syz.6.327' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  431.889099][ T7139] syzkaller0: entered allmulticast mode
[  431.936187][ T7139] syzkaller0: entered promiscuous mode
[  431.989845][ T7139] syzkaller0 (unregistering): left promiscuous mode
[  431.997017][ T7139] syzkaller0 (unregistering): left allmulticast mode
[  432.324940][ T7142] loop6: detected capacity change from 0 to 512
[  432.413952][ T7142] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  432.435762][ T7142] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  432.586869][ T7147] loop7: detected capacity change from 0 to 16384
[  432.614411][ T7142] EXT4-fs (loop6): 1 truncate cleaned up
[  432.637756][ T7142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  432.736200][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'.
[  432.901252][ T7142] syz.6.330 (pid 7142) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  434.041158][ T6473] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.159068][ T7157] loop5: detected capacity change from 0 to 40427
[  434.204010][ T7157] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3fffff
[  434.251064][ T7157] F2FS-fs (loop5): invalid crc value
[  434.694422][ T7157] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  434.896302][ T7168] syz.4.336 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  435.096038][ T6469] syz-executor: attempt to access beyond end of device
[  435.096038][ T6469] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  435.111823][ T6469] CPU: 0 UID: 0 PID: 6469 Comm: syz-executor Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(undef) 
[  435.111994][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  435.112081][ T6469] Call Trace:
[  435.112137][ T6469]  <TASK>
[  435.112191][ T6469]  dump_stack_lvl+0x216/0x2d0
[  435.112397][ T6469]  dump_stack+0x1e/0x24
[  435.112566][ T6469]  f2fs_handle_critical_error+0x9c6/0xc60
[  435.112791][ T6469]  f2fs_stop_checkpoint+0x60/0x70
[  435.112960][ T6469]  f2fs_write_end_io+0xd66/0x1e10
[  435.113168][ T6469]  ? f2fs_write_end_io+0x1481/0x1e10
[  435.113341][ T6469]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  435.113505][ T6469]  bio_endio+0xdd2/0xfa0
[  435.113678][ T6469]  submit_bio_noacct+0x223/0x2710
[  435.113900][ T6469]  submit_bio+0x58a/0x5b0
[  435.114060][ T6469]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  435.114246][ T6469]  f2fs_submit_write_bio+0x9e/0x270
[  435.114467][ T6469]  __submit_merged_bio+0x175/0x6b0
[  435.114681][ T6469]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  435.114867][ T6469]  f2fs_submit_merged_write_cond+0x406/0x510
[  435.115128][ T6469]  f2fs_write_data_pages+0x50fd/0x58a0
[  435.115435][ T6469]  ? kmsan_internal_set_shadow_origin+0x6c/0x100
[  435.115651][ T6469]  ? kmsan_get_metadata+0x13e/0x1c0
[  435.115816][ T6469]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  435.115997][ T6469]  ? folios_put_refs+0x73/0xc90
[  435.116181][ T6469]  ? filter_irq_stacks+0x60/0x1b0
[  435.116411][ T6469]  ? kmsan_internal_set_shadow_origin+0x6c/0x100
[  435.116635][ T6469]  ? kmsan_get_metadata+0x13e/0x1c0
[  435.116798][ T6469]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  435.116981][ T6469]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  435.117148][ T6469]  do_writepages+0x427/0xc30
[  435.117345][ T6469]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  435.117577][ T6469]  ? _raw_spin_unlock+0x30/0x50
[  435.117766][ T6469]  filemap_fdatawrite+0x1fe/0x250
[  435.118029][ T6469]  f2fs_sync_dirty_inodes+0x2d8/0xa30
[  435.118248][ T6469]  f2fs_write_checkpoint+0x1052/0x2c00
[  435.118576][ T6469]  kill_f2fs_super+0x3ac/0x8e0
[  435.118773][ T6469]  ? __pfx_kill_f2fs_super+0x10/0x10
[  435.118969][ T6469]  deactivate_locked_super+0xe0/0x3f0
[  435.119177][ T6469]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  435.119419][ T6469]  deactivate_super+0x14f/0x160
[  435.119635][ T6469]  cleanup_mnt+0x6c2/0x740
[  435.119844][ T6469]  ? __pfx___cleanup_mnt+0x10/0x10
[  435.120050][ T6469]  __cleanup_mnt+0x22/0x30
[  435.120238][ T6469]  task_work_run+0x268/0x310
[  435.120408][ T6469]  syscall_exit_to_user_mode+0xbf/0x160
[  435.120598][ T6469]  do_syscall_64+0xda/0x1e0
[  435.120784][ T6469]  ? clear_bhb_loop+0x25/0x80
[  435.120954][ T6469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.121130][ T6469] RIP: 0033:0x7fbac538e497
[  435.121263][ T6469] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  435.121395][ T6469] RSP: 002b:00007ffc57c4bb98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  435.121547][ T6469] RAX: 0000000000000000 RBX: 00007fbac540e08c RCX: 00007fbac538e497
[  435.121650][ T6469] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc57c4bc50
[  435.121745][ T6469] RBP: 00007ffc57c4bc50 R08: 0000000000000000 R09: 0000000000000000
[  435.121838][ T6469] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc57c4cce0
[  435.121944][ T6469] R13: 00007fbac540e08c R14: 000000000006a2cb R15: 00007ffc57c4cd20
[  435.122082][ T6469]  </TASK>
[  435.471058][ T6469] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  436.490742][ T7175] serio: Serial port ptm0
[  437.337782][ T7183] loop3: detected capacity change from 0 to 256
[  437.548011][ T7183] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  437.740747][ T7183] exFAT-fs (loop3): valid_size(150994954) is greater than size(10)
[  439.249473][ T5843] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  439.465494][ T7202] loop4: detected capacity change from 0 to 1024
[  439.488800][ T5843] usb 4-1: Using ep0 maxpacket: 32
[  439.568712][ T5843] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  439.578696][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.669775][ T5843] usb 4-1: config 0 descriptor??
[  439.684902][ T7202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.735713][ T5843] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state
[  439.743043][ T5843] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  439.750310][ T5843] dvb_usb_anysee 4-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  440.013655][ T5843] usb 4-1: USB disconnect, device number 4
[  440.024577][ T7202] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.347: Allocating blocks 497-513 which overlap fs metadata
[  440.054093][ T5840] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  440.254469][ T5840] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  440.268086][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.345745][ T7202] EXT4-fs (loop4): pa ffff888125517700: logic 48, phys. 177, len 21
[  440.354386][ T7202] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1
[  440.370843][ T5840] usb 2-1: config 0 descriptor??
[  441.000866][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.975753][ T5840] usb 2-1: Cannot set autoneg
[  441.981547][ T5840] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  442.127741][ T5840] usb 2-1: USB disconnect, device number 7
[  443.085706][ T7230] loop5: detected capacity change from 0 to 32768
[  443.107015][ T7230] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.355 (7230)
[  443.162755][ T7230] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  443.181840][ T7230] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm
[  443.194047][ T7230] BTRFS info (device loop5): disk space caching is enabled
[  443.206527][ T7230] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  443.576596][ T7241] loop1: detected capacity change from 0 to 1024
[  443.706702][ T7230] BTRFS info (device loop5): rebuilding free space tree
[  443.799736][ T7230] BTRFS info (device loop5): disabling free space tree
[  443.807354][ T7230] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  443.817792][ T7230] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  444.340084][ T6469] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  444.838986][   T68] hfsplus: b-tree write err: -5, ino 4
[  446.159184][ T5840] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  446.405855][ T5840] usb 7-1: Using ep0 maxpacket: 8
[  446.458915][ T5840] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  446.468286][ T5840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  446.478653][ T5840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  446.489068][ T5840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  446.499529][ T5840] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  446.513124][ T5840] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  446.524241][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.316995][ T7298] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 1, id = 0
[  448.646939][ T7300] netlink: 'syz.5.372': attribute type 10 has an invalid length.
[  448.655320][ T7300] netlink: 40 bytes leftover after parsing attributes in process `syz.5.372'.
[  448.691768][ T7300] team0: Port device netdevsim1 added
[  449.314667][ T7305] input: syz0 as /devices/virtual/input/input8
[  449.432144][ T5843] usb 7-1: USB disconnect, device number 3
[  450.237018][ T5843] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  450.272813][ T7314] ipip0: entered promiscuous mode
[  450.491007][ T5843] usb 7-1: Using ep0 maxpacket: 8
[  450.544223][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  450.558799][ T5843] usb 7-1: config 0 has no interfaces?
[  450.675471][ T5843] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  450.685353][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.693682][ T5843] usb 7-1: Product: syz
[  450.698935][ T5843] usb 7-1: Manufacturer: syz
[  450.703855][ T5843] usb 7-1: SerialNumber: syz
[  450.886048][ T5843] usb 7-1: config 0 descriptor??
[  451.293865][ T7312] netlink: 84 bytes leftover after parsing attributes in process `syz.6.376'.
[  451.436089][ T3359] usb 7-1: USB disconnect, device number 4
[  452.117249][ T5843] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  452.393322][ T5843] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  452.404793][ T5843] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  452.540250][ T5843] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  452.549913][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  452.558642][ T5843] usb 6-1: SerialNumber: syz
[  452.668464][ T7333] loop1: detected capacity change from 0 to 128
[  452.777468][ T7333] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  452.940802][ T5843] usb 6-1: 0:2 : does not exist
[  452.962856][ T7333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  453.197151][ T5843] usb 6-1: USB disconnect, device number 2
[  453.864927][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  456.926192][ T5799] Bluetooth: hci4: command 0x0406 tx timeout
[  457.844555][ T7425] loop5: detected capacity change from 0 to 2048
[  457.944087][ T7425] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  458.056387][ T7430] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  459.127268][ T7435] @: renamed from vlan0 (while UP)
[  459.418922][ T7430] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  459.430564][ T7430] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  459.543285][ T7430] Remounting filesystem read-only
[  459.596669][ T6469] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  460.612639][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.395'.
[  461.669224][ T7455] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  463.751427][ T7469] loop6: detected capacity change from 0 to 40427
[  463.790195][ T7469] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  463.798020][ T7469] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  463.827447][ T7469] F2FS-fs (loop6): build fault injection attr: rate: 17008, type: 0x3fffff
[  463.836677][ T7469] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x1f8
[  463.868854][ T7469] F2FS-fs (loop6): invalid crc value
[  464.095512][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'.
[  464.309989][ T7469] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  464.320210][ T7469] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  464.510799][ T6473] syz-executor: attempt to access beyond end of device
[  464.510799][ T6473] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  464.526734][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz-executor Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(undef) 
[  464.526894][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  464.526981][ T6473] Call Trace:
[  464.527036][ T6473]  <TASK>
[  464.527089][ T6473]  dump_stack_lvl+0x216/0x2d0
[  464.527295][ T6473]  dump_stack+0x1e/0x24
[  464.527463][ T6473]  f2fs_handle_critical_error+0x9c6/0xc60
[  464.527669][ T6473]  f2fs_stop_checkpoint+0x60/0x70
[  464.527836][ T6473]  f2fs_write_end_io+0xd66/0x1e10
[  464.528049][ T6473]  ? f2fs_write_end_io+0x1481/0x1e10
[  464.528220][ T6473]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  464.528384][ T6473]  bio_endio+0xdd2/0xfa0
[  464.528561][ T6473]  submit_bio_noacct+0x223/0x2710
[  464.528790][ T6473]  submit_bio+0x58a/0x5b0
[  464.528947][ T6473]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  464.529136][ T6473]  f2fs_submit_write_bio+0x9e/0x270
[  464.529358][ T6473]  __submit_merged_bio+0x175/0x6b0
[  464.529579][ T6473]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  464.529767][ T6473]  f2fs_submit_merged_write_cond+0x406/0x510
[  464.530020][ T6473]  f2fs_write_data_pages+0x50fd/0x58a0
[  464.530356][ T6473]  ? kmsan_internal_set_shadow_origin+0x6c/0x100
[  464.530592][ T6473]  ? kmsan_get_metadata+0x13e/0x1c0
[  464.530759][ T6473]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  464.530933][ T6473]  ? folios_put_refs+0x73/0xc90
[  464.531118][ T6473]  ? filter_irq_stacks+0x60/0x1b0
[  464.531347][ T6473]  ? kmsan_internal_set_shadow_origin+0x6c/0x100
[  464.531585][ T6473]  ? kmsan_get_metadata+0x13e/0x1c0
[  464.531753][ T6473]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  464.531933][ T6473]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  464.532101][ T6473]  do_writepages+0x427/0xc30
[  464.532303][ T6473]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  464.532563][ T6473]  ? _raw_spin_unlock+0x30/0x50
[  464.532756][ T6473]  filemap_fdatawrite+0x1fe/0x250
[  464.533011][ T6473]  f2fs_sync_dirty_inodes+0x2d8/0xa30
[  464.533228][ T6473]  f2fs_write_checkpoint+0x1052/0x2c00
[  464.533562][ T6473]  kill_f2fs_super+0x3ac/0x8e0
[  464.533760][ T6473]  ? __pfx_kill_f2fs_super+0x10/0x10
[  464.533949][ T6473]  deactivate_locked_super+0xe0/0x3f0
[  464.534156][ T6473]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  464.534399][ T6473]  deactivate_super+0x14f/0x160
[  464.534620][ T6473]  cleanup_mnt+0x6c2/0x740
[  464.534830][ T6473]  ? __pfx___cleanup_mnt+0x10/0x10
[  464.535030][ T6473]  __cleanup_mnt+0x22/0x30
[  464.535215][ T6473]  task_work_run+0x268/0x310
[  464.535388][ T6473]  syscall_exit_to_user_mode+0xbf/0x160
[  464.535592][ T6473]  do_syscall_64+0xda/0x1e0
[  464.535781][ T6473]  ? clear_bhb_loop+0x25/0x80
[  464.535945][ T6473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.536107][ T6473] RIP: 0033:0x7faafa98e497
[  464.536219][ T6473] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  464.536348][ T6473] RSP: 002b:00007ffc4f6ad798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  464.536496][ T6473] RAX: 0000000000000000 RBX: 00007faafaa0e08c RCX: 00007faafa98e497
[  464.536596][ T6473] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4f6ad850
[  464.536689][ T6473] RBP: 00007ffc4f6ad850 R08: 0000000000000000 R09: 0000000000000000
[  464.536782][ T6473] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4f6ae8e0
[  464.536880][ T6473] R13: 00007faafaa0e08c R14: 00000000000715eb R15: 00007ffc4f6ae920
[  464.537019][ T6473]  </TASK>
[  464.881884][ T6473] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  465.156749][ T5843] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  465.253514][ T7489] only policy match revision 0 supported
[  465.253628][ T7489] unable to load match
[  465.325525][ T5843] usb 6-1: Using ep0 maxpacket: 16
[  465.367789][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.379525][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.390163][ T5843] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  465.406190][ T5843] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  465.416371][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.727913][ T5843] usb 6-1: config 0 descriptor??
[  466.244430][ T5843] microsoft 0003:045E:07DA.0008: unbalanced collection at end of report description
[  466.397279][ T5843] microsoft 0003:045E:07DA.0008: parse failed
[  466.404309][ T5843] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22
[  466.645980][ T5843] usb 6-1: USB disconnect, device number 3
[  466.986593][ T7491] loop3: detected capacity change from 0 to 8192
[  467.199709][ T7506] fuse: Bad value for 'fd'
[  468.306116][ T7511] loop5: detected capacity change from 0 to 2048
[  468.496681][ T7511] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  468.612992][ T7511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  468.731822][ T3359] hid-generic C990:0003:0000.0009: unknown main item tag 0x3
[  468.811097][ T3359] hid-generic C990:0003:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  469.310708][ T6469] UDF-fs: error (device loop5): udf_read_inode: (ino 1313) failed !bh
[  469.372707][ T6469] UDF-fs: error (device loop5): udf_read_inode: (ino 1313) failed !bh
[  470.007821][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!!
[  470.096496][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  470.110886][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  470.122106][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  470.205469][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  470.747150][ T7536] loop6: detected capacity change from 0 to 512
[  470.793799][ T7536] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  470.974626][ T7536] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  470.985570][ T7536] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  471.044533][ T7536] EXT4-fs (loop6): 1 truncate cleaned up
[  471.052709][ T7536] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.399830][ T6473] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.127615][   T30] audit: type=1326 audit(1743512852.633:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.3.431" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63eb78d169 code=0x0
[  473.219641][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'.
[  473.319027][ T7558] team0 (unregistering): Port device team_slave_0 removed
[  473.369217][ T7558] team0 (unregistering): Port device team_slave_1 removed
[  473.946292][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  473.961215][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  473.978138][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  474.027628][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  474.042599][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  475.364256][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  475.371391][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  475.917670][ T7564] chnl_net:caif_netlink_parms(): no params data found
[  476.119564][ T7576] loop3: detected capacity change from 0 to 8192
[  476.195301][ T5790] Bluetooth: hci0: command tx timeout
[  477.488381][ T7603] loop4: detected capacity change from 0 to 2048
[  477.533228][ T7603] udf: Unknown parameter 'lVstblock'
[  478.276820][ T5790] Bluetooth: hci0: command tx timeout
[  478.283453][ T7564] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.292321][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.311503][ T7564] bridge_slave_0: entered allmulticast mode
[  478.321505][ T7564] bridge_slave_0: entered promiscuous mode
[  478.341568][ T7564] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.349634][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.358024][ T7564] bridge_slave_1: entered allmulticast mode
[  478.368465][ T7564] bridge_slave_1: entered promiscuous mode
[  478.641482][ T7618] batadv_slave_1: entered promiscuous mode
[  478.670889][ T7618] lo: entered promiscuous mode
[  478.795961][ T5840] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  478.858510][ T7614] lo: left promiscuous mode
[  478.865428][ T7614] batadv_slave_1: left promiscuous mode
[  478.899300][ T7564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  478.967583][ T7564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  479.005821][ T5840] usb 7-1: Using ep0 maxpacket: 16
[  479.080712][ T5840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  479.091630][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  479.103908][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  479.114150][ T5840] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  479.131416][ T5840] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  479.459209][ T5840] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  479.469595][ T5840] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  479.481914][ T5840] usb 7-1: Manufacturer: syz
[  479.566702][ T5840] usb 7-1: config 0 descriptor??
[  479.601175][ T7564] team0: Port device team_slave_0 added
[  479.713797][ T7564] team0: Port device team_slave_1 added
[  480.273097][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_0
[  480.280926][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.308803][ T7564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  480.394666][ T5790] Bluetooth: hci0: command tx timeout
[  480.433474][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_1
[  480.442318][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.477214][ T7564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  480.930967][ T5840] rc_core: IR keymap rc-hauppauge not found
[  480.940008][ T5840] Registered IR keymap rc-empty
[  480.947003][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.004070][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.098758][ T5840] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  481.117781][ T5840] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input9
[  481.226444][ T7564] hsr_slave_0: entered promiscuous mode
[  481.237804][ T7564] hsr_slave_1: entered promiscuous mode
[  481.248707][ T7564] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  481.257080][ T7564] Cannot create hsr debugfs directory
[  481.311701][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.436124][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.518166][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.581594][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.636075][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.719008][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.774400][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.844899][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.869119][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  481.928733][ T5840] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  482.019902][ T5840] mceusb 7-1:0.0: Registered п with mce emulator interface version 1
[  482.028719][ T5840] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  482.134848][ T5840] usb 7-1: USB disconnect, device number 5
[  482.446244][ T5799] Bluetooth: hci0: command tx timeout
[  482.527398][ T5799] Bluetooth: hci2: command 0x0406 tx timeout
[  484.110734][ T7564] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  484.513020][ T7564] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  484.604241][ T7564] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  484.727295][ T7564] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  486.659479][ T7564] 8021q: adding VLAN 0 to HW filter on device bond0
[  486.913863][ T7564] 8021q: adding VLAN 0 to HW filter on device team0
[  487.043967][ T7373] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.051917][ T7373] bridge0: port 1(bridge_slave_0) entered forwarding state
[  487.228245][ T7373] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.236208][ T7373] bridge0: port 2(bridge_slave_1) entered forwarding state
[  487.448017][ T5843] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  487.635856][ T5843] usb 4-1: Using ep0 maxpacket: 32
[  487.688106][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  487.700778][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  487.712676][ T5843] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  487.724640][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.940255][ T5843] usb 4-1: config 0 descriptor??
[  487.952660][ T7701] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  488.032026][ T5843] hub 4-1:0.0: USB hub found
[  488.275773][ T5843] hub 4-1:0.0: 1 port detected
[  489.278257][ T7718] netlink: 44 bytes leftover after parsing attributes in process `syz.4.477'.
[  489.567014][   T24] usb 4-1: USB disconnect, device number 5
[  489.796599][ T5843] usb 4-1-port1: config error
[  491.125825][ T7733] loop3: detected capacity change from 0 to 512
[  491.161030][ T7733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  491.211436][ T7564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  491.425654][ T7733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  491.439621][ T7733] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  492.432238][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.607533][ T7752] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  493.851770][ T3359] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  494.106361][ T3359] usb 5-1: Using ep0 maxpacket: 8
[  494.166586][ T3359] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  494.185326][ T3359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.193652][ T3359] usb 5-1: Product: syz
[  494.199002][ T3359] usb 5-1: Manufacturer: syz
[  494.203887][ T3359] usb 5-1: SerialNumber: syz
[  494.308996][ T3359] usb 5-1: config 0 descriptor??
[  495.565822][ T3359] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  496.355171][ T3359] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  496.399117][ T3359] usb 5-1: USB disconnect, device number 4
[  496.574192][ T7564] veth0_vlan: entered promiscuous mode
[  496.756493][ T7564] veth1_vlan: entered promiscuous mode
[  497.722021][ T7564] veth0_macvtap: entered promiscuous mode
[  497.928056][ T7791] syz.3.497 (7791) used obsolete PPPIOCDETACH ioctl
[  497.977513][ T7564] veth1_macvtap: entered promiscuous mode
[  498.016363][ T7787] loop6: detected capacity change from 0 to 40427
[  498.030248][ T7787] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  498.038623][ T7787] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  498.074204][ T7787] F2FS-fs (loop6): invalid crc value
[  498.376732][   T51] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3
[  498.480943][ T7787] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  498.488830][ T7787] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  498.622788][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.633964][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.645336][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.656354][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.666716][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.687684][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.700797][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.711723][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.722098][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.733139][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.743551][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.754468][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.770793][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_0
[  499.172972][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.184587][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.203583][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.217642][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.228366][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.239245][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.249458][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.261030][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.271427][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.282253][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.301307][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.314837][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.331277][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_1
[  499.578978][ T7564] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.588410][ T7564] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.606991][ T7564] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.619590][ T7564] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.526863][ T7815] syz_tun: entered allmulticast mode
[  500.874040][ T7813] syz_tun: left allmulticast mode
[  505.547566][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.516'.
[  505.811585][ T7881] netlink: 240 bytes leftover after parsing attributes in process `syz.3.519'.
[  506.879474][ T7891] syz_tun: entered allmulticast mode
[  507.307522][ T7890] syz_tun: left allmulticast mode
[  509.206834][ T3359] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  509.465794][ T3359] usb 5-1: Using ep0 maxpacket: 16
[  509.483262][ T7912] loop6: detected capacity change from 0 to 4096
[  509.512631][ T3359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  509.516365][ T7912] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  509.524630][ T3359] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00
[  509.551655][ T3359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.716414][ T3359] usb 5-1: config 0 descriptor??
[  509.727551][ T6644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.738459][ T6644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.979004][ T7921] tipc: Failed to remove unknown binding: 66,1,1/0:3940606571/3940606573
[  509.988341][ T7921] tipc: Failed to remove unknown binding: 66,1,1/0:3940606571/3940606573
[  510.168526][ T7923] overlayfs: failed to clone upperpath
[  510.187278][ T6644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.195983][ T6644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.374309][ T3359] corsair-psu 0003:1B1C:1C07.000A: unknown main item tag 0x0
[  510.382362][ T3359] corsair-psu 0003:1B1C:1C07.000A: unknown main item tag 0x0
[  510.391080][ T3359] corsair-psu 0003:1B1C:1C07.000A: collection stack underflow
[  510.401827][ T3359] corsair-psu 0003:1B1C:1C07.000A: item 0 0 0 12 parsing failed
[  510.683266][ T3359] corsair-psu 0003:1B1C:1C07.000A: probe with driver corsair-psu failed with error -22
[  510.783804][ T3359] usb 5-1: USB disconnect, device number 5
[  511.119164][ T7930] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  512.988061][ T5790] Bluetooth: hci2: unexpected event for opcode 0x2029
[  513.198853][ T7950] loop3: detected capacity change from 0 to 256
[  513.545684][ T7950] FAT-fs (loop3): Directory bread(block 64) failed
[  513.552573][ T7950] FAT-fs (loop3): Directory bread(block 65) failed
[  513.560222][ T7950] FAT-fs (loop3): Directory bread(block 66) failed
[  513.567284][ T7950] FAT-fs (loop3): Directory bread(block 67) failed
[  513.574277][ T7950] FAT-fs (loop3): Directory bread(block 68) failed
[  513.581539][ T7950] FAT-fs (loop3): Directory bread(block 69) failed
[  513.588894][ T7950] FAT-fs (loop3): Directory bread(block 70) failed
[  513.596159][ T7950] FAT-fs (loop3): Directory bread(block 71) failed
[  513.603178][ T7950] FAT-fs (loop3): Directory bread(block 72) failed
[  513.610294][ T7950] FAT-fs (loop3): Directory bread(block 73) failed
[  514.471353][ T3359] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  514.696080][ T3359] usb 8-1: Using ep0 maxpacket: 8
[  514.740185][ T3359] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  514.759028][ T3359] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  514.772118][ T3359] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  514.782308][ T3359] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  514.908695][ T3359] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  514.918668][ T3359] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  514.927206][ T3359] usb 8-1: SerialNumber: syz
[  515.072168][ T7958] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  515.170585][ T3359] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22
[  515.183934][ T3359] usb-storage 8-1:1.0: USB Mass Storage device detected
[  515.299389][ T3359] usb-storage 8-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  515.397523][ T3359] scsi host1: usb-storage 8-1:1.0
[  516.284060][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  516.996846][ T5790] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  517.010403][ T5790] Bluetooth: hci2: Injecting HCI hardware error event
[  517.023279][ T5799] Bluetooth: hci2: hardware error 0x00
[  517.549759][ T7977] loop4: detected capacity change from 0 to 40427
[  517.627953][ T7977] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3fffff
[  517.699366][ T7977] F2FS-fs (loop4): invalid crc value
[  517.954123][ T5843] usb 8-1: USB disconnect, device number 2
[  518.255535][ T7977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  518.313744][ T7977] syz.4.553: attempt to access beyond end of device
[  518.313744][ T7977] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  518.366408][ T7977] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_map_blocks+0x1419/0x5ef0
[  518.507474][ T5797] syz-executor: attempt to access beyond end of device
[  518.507474][ T5797] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  518.522360][ T5797] CPU: 0 UID: 0 PID: 5797 Comm: syz-executor Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(undef) 
[  518.522522][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  518.522608][ T5797] Call Trace:
[  518.522664][ T5797]  <TASK>
[  518.522718][ T5797]  dump_stack_lvl+0x216/0x2d0
[  518.522932][ T5797]  dump_stack+0x1e/0x24
[  518.523099][ T5797]  f2fs_handle_critical_error+0x9c6/0xc60
[  518.523299][ T5797]  f2fs_stop_checkpoint+0x60/0x70
[  518.523461][ T5797]  f2fs_write_end_io+0xd66/0x1e10
[  518.523673][ T5797]  ? f2fs_write_end_io+0x1481/0x1e10
[  518.523845][ T5797]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  518.524038][ T5797]  bio_endio+0xdd2/0xfa0
[  518.524203][ T5797]  submit_bio_noacct+0x223/0x2710
[  518.524429][ T5797]  submit_bio+0x58a/0x5b0
[  518.524604][ T5797]  f2fs_submit_write_bio+0x9e/0x270
[  518.524825][ T5797]  __submit_merged_bio+0x175/0x6b0
[  518.525042][ T5797]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  518.525220][ T5797]  f2fs_submit_merged_write_cond+0x406/0x510
[  518.525463][ T5797]  f2fs_write_data_pages+0x50fd/0x58a0
[  518.525794][ T5797]  ? kmsan_get_metadata+0x13e/0x1c0
[  518.525969][ T5797]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  518.526140][ T5797]  ? folios_put_refs+0x73/0xc90
[  518.526317][ T5797]  ? filter_irq_stacks+0x60/0x1b0
[  518.526549][ T5797]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  518.526724][ T5797]  ? kmsan_get_metadata+0x13e/0x1c0
[  518.526891][ T5797]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  518.527076][ T5797]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  518.527243][ T5797]  do_writepages+0x427/0xc30
[  518.527444][ T5797]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  518.527679][ T5797]  ? _raw_spin_unlock+0x30/0x50
[  518.527878][ T5797]  filemap_fdatawrite+0x1fe/0x250
[  518.528141][ T5797]  f2fs_sync_dirty_inodes+0x2d8/0xa30
[  518.528358][ T5797]  f2fs_write_checkpoint+0x1052/0x2c00
[  518.528685][ T5797]  kill_f2fs_super+0x3ac/0x8e0
[  518.528881][ T5797]  ? __pfx_kill_f2fs_super+0x10/0x10
[  518.529082][ T5797]  deactivate_locked_super+0xe0/0x3f0
[  518.529294][ T5797]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  518.529536][ T5797]  deactivate_super+0x14f/0x160
[  518.529751][ T5797]  cleanup_mnt+0x6c2/0x740
[  518.529968][ T5797]  ? __pfx___cleanup_mnt+0x10/0x10
[  518.530167][ T5797]  __cleanup_mnt+0x22/0x30
[  518.530356][ T5797]  task_work_run+0x268/0x310
[  518.530531][ T5797]  syscall_exit_to_user_mode+0xbf/0x160
[  518.530728][ T5797]  do_syscall_64+0xda/0x1e0
[  518.530924][ T5797]  ? clear_bhb_loop+0x25/0x80
[  518.531089][ T5797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.531248][ T5797] RIP: 0033:0x7fde5298e497
[  518.531360][ T5797] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  518.531489][ T5797] RSP: 002b:00007ffdbf496eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  518.531631][ T5797] RAX: 0000000000000000 RBX: 00007fde52a0e08c RCX: 00007fde5298e497
[  518.531730][ T5797] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbf496f70
[  518.531823][ T5797] RBP: 00007ffdbf496f70 R08: 0000000000000000 R09: 0000000000000000
[  518.531923][ T5797] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbf498000
[  518.532022][ T5797] R13: 00007fde52a0e08c R14: 000000000007e8cd R15: 00007ffdbf498040
[  518.532166][ T5797]  </TASK>
[  518.867975][ T5797] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  518.876770][ T5797] CPU: 0 UID: 0 PID: 5797 Comm: syz-executor Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(undef) 
[  518.876943][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  518.877040][ T5797] Call Trace:
[  518.877095][ T5797]  <TASK>
[  518.877162][ T5797]  dump_stack_lvl+0x216/0x2d0
[  518.877370][ T5797]  dump_stack+0x1e/0x24
[  518.877545][ T5797]  f2fs_handle_critical_error+0x9c6/0xc60
[  518.877747][ T5797]  f2fs_stop_checkpoint+0x60/0x70
[  518.877916][ T5797]  f2fs_write_end_io+0xd66/0x1e10
[  518.878143][ T5797]  ? f2fs_write_end_io+0x1481/0x1e10
[  518.878315][ T5797]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  518.878485][ T5797]  bio_endio+0xdd2/0xfa0
[  518.878658][ T5797]  submit_bio_noacct+0x223/0x2710
[  518.878891][ T5797]  submit_bio+0x58a/0x5b0
[  518.879069][ T5797]  f2fs_submit_write_bio+0x9e/0x270
[  518.879303][ T5797]  __submit_merged_bio+0x175/0x6b0
[  518.879519][ T5797]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  518.879713][ T5797]  f2fs_submit_merged_write_cond+0x406/0x510
[  518.879971][ T5797]  f2fs_write_data_pages+0x50fd/0x58a0
[  518.880305][ T5797]  ? kmsan_get_metadata+0x13e/0x1c0
[  518.880479][ T5797]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  518.880658][ T5797]  ? folios_put_refs+0x73/0xc90
[  518.880845][ T5797]  ? filter_irq_stacks+0x60/0x1b0
[  518.881083][ T5797]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  518.881264][ T5797]  ? kmsan_get_metadata+0x13e/0x1c0
[  518.881432][ T5797]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  518.881633][ T5797]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  518.881805][ T5797]  do_writepages+0x427/0xc30
[  518.882010][ T5797]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  518.882256][ T5797]  ? _raw_spin_unlock+0x30/0x50
[  518.882454][ T5797]  filemap_fdatawrite+0x1fe/0x250
[  518.882709][ T5797]  f2fs_sync_dirty_inodes+0x2d8/0xa30
[  518.882932][ T5797]  f2fs_write_checkpoint+0x1052/0x2c00
[  518.883275][ T5797]  kill_f2fs_super+0x3ac/0x8e0
[  518.883471][ T5797]  ? __pfx_kill_f2fs_super+0x10/0x10
[  518.883663][ T5797]  deactivate_locked_super+0xe0/0x3f0
[  518.883879][ T5797]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  518.884122][ T5797]  deactivate_super+0x14f/0x160
[  518.884348][ T5797]  cleanup_mnt+0x6c2/0x740
[  518.884562][ T5797]  ? __pfx___cleanup_mnt+0x10/0x10
[  518.884764][ T5797]  __cleanup_mnt+0x22/0x30
[  518.884955][ T5797]  task_work_run+0x268/0x310
[  518.885130][ T5797]  syscall_exit_to_user_mode+0xbf/0x160
[  518.885334][ T5797]  do_syscall_64+0xda/0x1e0
[  518.885529][ T5797]  ? clear_bhb_loop+0x25/0x80
[  518.885718][ T5797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.885881][ T5797] RIP: 0033:0x7fde5298e497
[  518.885992][ T5797] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  518.886145][ T5797] RSP: 002b:00007ffdbf496eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  518.886290][ T5797] RAX: 0000000000000000 RBX: 00007fde52a0e08c RCX: 00007fde5298e497
[  518.886395][ T5797] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbf496f70
[  518.886492][ T5797] RBP: 00007ffdbf496f70 R08: 0000000000000000 R09: 0000000000000000
[  518.886589][ T5797] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbf498000
[  518.886692][ T5797] R13: 00007fde52a0e08c R14: 000000000007e8cd R15: 00007ffdbf498040
[  518.886836][ T5797]  </TASK>
[  519.222120][ T5797] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  519.416440][ T5799] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  523.384193][ T7996] loop4: detected capacity change from 0 to 32768
[  523.393961][ T7996] btrfs: Deprecated parameter 'usebackuproot'
[  523.400670][ T7996] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  523.424686][ T7996] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.559 (7996)
[  523.530353][ T7996] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  523.541174][ T7996] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  523.551027][ T7996] BTRFS info (device loop4): using free-space-tree
[  523.789872][ T7996] BTRFS info (device loop4): rebuilding free space tree
[  523.973037][   T30] audit: type=1800 audit(1743512903.463:16): pid=7996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.559" name="file1" dev="loop4" ino=260 res=0 errno=0
[  524.979360][ T5797] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  525.222334][ T8024] loop7: detected capacity change from 0 to 512
[  525.353239][ T8024] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[  525.362329][ T8024] UDF-fs: Scanning with blocksize 512 failed
[  525.449231][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  525.478103][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  525.482610][ T8024] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[  525.493212][ T8024] UDF-fs: Scanning with blocksize 1024 failed
[  525.514530][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  525.523328][ T8024] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[  525.531846][ T8024] UDF-fs: Scanning with blocksize 2048 failed
[  525.557116][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  525.599368][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  525.632619][ T8024] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  525.734169][ T8024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  527.715714][ T5790] Bluetooth: hci3: command tx timeout
[  528.289477][ T8025] chnl_net:caif_netlink_parms(): no params data found
[  528.777865][ T8046] loop6: detected capacity change from 0 to 32768
[  528.848088][ T8046] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.572 (8046)
[  528.915773][ T8046] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  528.926856][ T8046] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  528.937622][ T8046] BTRFS info (device loop6): using free-space-tree
[  529.797092][ T5790] Bluetooth: hci3: command tx timeout
[  531.153247][ T6473] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  531.510502][ T8025] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.518575][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.527225][ T8025] bridge_slave_0: entered allmulticast mode
[  531.702872][ T8025] bridge_slave_0: entered promiscuous mode
[  531.802015][ T8025] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.810353][ T8025] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.818655][ T8025] bridge_slave_1: entered allmulticast mode
[  531.828654][ T8025] bridge_slave_1: entered promiscuous mode
[  531.877056][ T5790] Bluetooth: hci3: command tx timeout
[  532.486037][ T8025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  532.531731][ T8086] loop4: detected capacity change from 0 to 512
[  532.630152][ T8025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  532.707394][ T8086] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.581: bad orphan inode 13
[  532.810725][ T8086] ext4_test_bit(bit=12, block=4) = 1
[  532.816497][ T8086] is_bad_inode(inode)=0
[  532.820985][ T8086] NEXT_ORPHAN(inode)=0
[  532.825560][ T8086] max_ino=32
[  532.828986][ T8086] i_nlink=1
[  532.834568][ T8086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  532.859713][ T8025] team0: Port device team_slave_0 added
[  532.907702][ T8025] team0: Port device team_slave_1 added
[  533.126074][ T8086] EXT4-fs warning (device loop4): dx_probe:803: inode #2: comm syz.4.581: Unrecognised inode hash code 20
[  533.138199][ T8086] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.581: Corrupt directory, running e2fsck is recommended
[  533.273529][ T8090] EXT4-fs warning (device loop4): dx_probe:803: inode #2: comm syz.4.581: Unrecognised inode hash code 20
[  533.290371][ T8090] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.581: Corrupt directory, running e2fsck is recommended
[  533.335719][ T8093] EXT4-fs warning (device loop4): dx_probe:803: inode #2: comm syz.4.581: Unrecognised inode hash code 20
[  533.347858][ T8093] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.581: Corrupt directory, running e2fsck is recommended
[  533.510447][ T8090] EXT4-fs warning (device loop4): dx_probe:803: inode #2: comm syz.4.581: Unrecognised inode hash code 20
[  533.522467][ T8090] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.581: Corrupt directory, running e2fsck is recommended
[  533.606943][ T8090] EXT4-fs error (device loop4): ext4_iget_extra_inode:4704: inode #15: comm syz.4.581: corrupted in-inode xattr: e_value out of bounds
[  533.635760][ T8088] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  533.690894][ T8025] batman_adv: batadv0: Adding interface: batadv_slave_0
[  533.701975][ T8093] EXT4-fs warning (device loop4): dx_probe:803: inode #2: comm syz.4.581: Unrecognised inode hash code 20
[  533.702143][ T8093] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.581: Corrupt directory, running e2fsck is recommended
[  533.735465][ T8025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  533.762770][ T8025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  533.816897][ T8025] batman_adv: batadv0: Adding interface: batadv_slave_1
[  533.824402][ T8025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  533.852266][ T8025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  533.968994][ T5790] Bluetooth: hci3: command tx timeout
[  534.511240][ T8025] hsr_slave_0: entered promiscuous mode
[  534.533725][ T8025] hsr_slave_1: entered promiscuous mode
[  534.543211][ T8025] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  534.551216][ T8025] Cannot create hsr debugfs directory
[  534.620568][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.386138][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'.
[  536.431032][ T8120] netlink: 'syz.4.591': attribute type 2 has an invalid length.
[  536.687321][ T8025] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.701442][ T8025] =====================================================
[  536.709101][ T8025] BUG: KMSAN: uninit-value in rb_erase+0x597/0x23b0
[  536.716213][ T8025]  rb_erase+0x597/0x23b0
[  536.720704][ T8025]  __kernfs_remove+0xbd5/0xfd0
[  536.725837][ T8025]  kernfs_remove+0xa5/0xf0
[  536.730563][ T8025]  sysfs_remove_dir+0x102/0x170
[  536.735910][ T8025]  __kobject_del+0x13e/0x4b0
[  536.741268][ T8025]  kset_unregister+0x4d/0x90
[  536.746211][ T8025]  netdev_unregister_kobject+0x527/0x570
[  536.752098][ T8025]  unregister_netdevice_many_notify+0x3a00/0x4600
[  536.802726][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  536.803017][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  536.860811][ T8025]  unregister_netdevice_queue+0x598/0x5f0
[  536.866929][ T8025]  nsim_destroy+0x147/0x720
[  536.882254][ T8025]  __nsim_dev_port_del+0x1e9/0x320
[  536.890822][ T8025]  nsim_dev_reload_destroy+0x464/0x7b0
[  536.897451][ T8025]  nsim_drv_remove+0x93/0x310
[  536.902417][ T8025]  nsim_bus_remove+0x1e/0x30
[  536.907392][ T8025]  device_release_driver_internal+0x58a/0x990
[  536.913729][ T8025]  device_release_driver+0x22/0x30
[  536.919178][ T8025]  bus_remove_device+0x71b/0x760
[  536.924391][ T8025]  device_del+0x7ee/0xd40
[  536.929618][ T8025]  device_unregister+0x1e/0x40
[  536.934607][ T8025]  del_device_store+0x421/0x640
[  536.939797][ T8025]  bus_attr_store+0x92/0xf0
[  536.944577][ T8025]  sysfs_kf_write+0x19a/0x250
[  536.949653][ T8025]  kernfs_fop_write_iter+0x525/0x910
[  536.955384][ T8025]  vfs_write+0xb34/0x1540
[  536.959921][ T8025]  ksys_write+0x240/0x4b0
[  536.964459][ T8025]  __x64_sys_write+0x93/0xe0
[  536.969387][ T8025]  x64_sys_call+0x34de/0x3c80
[  536.987916][ T8025]  do_syscall_64+0xcd/0x1e0
[  536.992734][ T8025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.999124][ T8025] 
[  537.001686][ T8025] Local variable tmp created at:
[  537.007009][ T8025]  number+0x8f/0x1e70
[  537.011208][ T8025]  vsnprintf+0x91b/0x1a10
[  537.015941][ T8025] 
[  537.018428][ T8025] CPU: 1 UID: 0 PID: 8025 Comm: syz-executor Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(undef) 
[  537.030733][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  537.041190][ T8025] =====================================================
[  537.048486][ T8025] Disabling lock debugging due to kernel taint
[  537.054806][ T8025] Kernel panic - not syncing: kmsan.panic set ...
[  537.061424][ T8025] CPU: 1 UID: 0 PID: 8025 Comm: syz-executor Tainted: G    B               6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(undef) 
[  537.075195][ T8025] Tainted: [B]=BAD_PAGE
[  537.079519][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  537.089817][ T8025] Call Trace:
[  537.093355][ T8025]  <TASK>
[  537.096468][ T8025]  dump_stack_lvl+0x216/0x2d0
[  537.101532][ T8025]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  537.107633][ T8025]  dump_stack+0x1e/0x24
[  537.112046][ T8025]  panic+0x4e5/0xcf0
[  537.116206][ T8025]  ? kmsan_save_stack_with_flags+0x30/0x60
[  537.122462][ T8025]  kmsan_report+0x2ca/0x2d0
[  537.127234][ T8025]  ? stack_depot_save_flags+0x6d5/0x7e0
[  537.133071][ T8025]  ? __msan_warning+0x95/0x120
[  537.138062][ T8025]  ? rb_erase+0x597/0x23b0
[  537.142818][ T8025]  ? __kernfs_remove+0xbd5/0xfd0
[  537.148032][ T8025]  ? kernfs_remove+0xa5/0xf0
[  537.152855][ T8025]  ? sysfs_remove_dir+0x102/0x170
[  537.158162][ T8025]  ? __kobject_del+0x13e/0x4b0
[  537.163151][ T8025]  ? kset_unregister+0x4d/0x90
[  537.168148][ T8025]  ? netdev_unregister_kobject+0x527/0x570
[  537.174390][ T8025]  ? unregister_netdevice_many_notify+0x3a00/0x4600
[  537.181305][ T8025]  ? unregister_netdevice_queue+0x598/0x5f0
[  537.187842][ T8025]  ? nsim_destroy+0x147/0x720
[  537.192761][ T8025]  ? __nsim_dev_port_del+0x1e9/0x320
[  537.198335][ T8025]  ? nsim_dev_reload_destroy+0x464/0x7b0
[  537.204295][ T8025]  ? nsim_drv_remove+0x93/0x310
[  537.209418][ T8025]  ? nsim_bus_remove+0x1e/0x30
[  537.214434][ T8025]  ? device_release_driver_internal+0x58a/0x990
[  537.220962][ T8025]  ? device_release_driver+0x22/0x30
[  537.226594][ T8025]  ? bus_remove_device+0x71b/0x760
[  537.231998][ T8025]  ? device_del+0x7ee/0xd40
[  537.236727][ T8025]  ? device_unregister+0x1e/0x40
[  537.241900][ T8025]  ? del_device_store+0x421/0x640
[  537.247178][ T8025]  ? bus_attr_store+0x92/0xf0
[  537.252141][ T8025]  ? sysfs_kf_write+0x19a/0x250
[  537.257263][ T8025]  ? kernfs_fop_write_iter+0x525/0x910
[  537.263056][ T8025]  ? vfs_write+0xb34/0x1540
[  537.267775][ T8025]  ? ksys_write+0x240/0x4b0
[  537.272508][ T8025]  ? __x64_sys_write+0x93/0xe0
[  537.277483][ T8025]  ? x64_sys_call+0x34de/0x3c80
[  537.282620][ T8025]  ? do_syscall_64+0xcd/0x1e0
[  537.287536][ T8025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.293824][ T8025]  ? kmsan_get_metadata+0x13e/0x1c0
[  537.299259][ T8025]  ? slab_update_freelist+0x198/0x310
[  537.304856][ T8025]  ? kmsan_get_metadata+0x13e/0x1c0
[  537.310277][ T8025]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  537.316331][ T8025]  ? kmsan_get_metadata+0x13e/0x1c0
[  537.321844][ T8025]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  537.327900][ T8025]  __msan_warning+0x95/0x120
[  537.332709][ T8025]  rb_erase+0x597/0x23b0
[  537.337223][ T8025]  __kernfs_remove+0xbd5/0xfd0
[  537.342264][ T8025]  kernfs_remove+0xa5/0xf0
[  537.346917][ T8025]  sysfs_remove_dir+0x102/0x170
[  537.352023][ T8025]  __kobject_del+0x13e/0x4b0
[  537.356901][ T8025]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  537.362944][ T8025]  kset_unregister+0x4d/0x90
[  537.367881][ T8025]  netdev_unregister_kobject+0x527/0x570
[  537.374065][ T8025]  unregister_netdevice_many_notify+0x3a00/0x4600
[  537.380792][ T8025]  ? stack_depot_save_flags+0x37/0x7e0
[  537.386608][ T8025]  unregister_netdevice_queue+0x598/0x5f0
[  537.392604][ T8025]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  537.398661][ T8025]  nsim_destroy+0x147/0x720
[  537.403558][ T8025]  __nsim_dev_port_del+0x1e9/0x320
[  537.408931][ T8025]  nsim_dev_reload_destroy+0x464/0x7b0
[  537.414658][ T8025]  nsim_drv_remove+0x93/0x310
[  537.419574][ T8025]  ? __pfx_nsim_bus_remove+0x10/0x10
[  537.425083][ T8025]  nsim_bus_remove+0x1e/0x30
[  537.429885][ T8025]  device_release_driver_internal+0x58a/0x990
[  537.436206][ T8025]  device_release_driver+0x22/0x30
[  537.441563][ T8025]  bus_remove_device+0x71b/0x760
[  537.446748][ T8025]  ? device_remove_attrs+0x262/0x2b0
[  537.452250][ T8025]  device_del+0x7ee/0xd40
[  537.456772][ T8025]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[  537.462934][ T8025]  device_unregister+0x1e/0x40
[  537.467904][ T8025]  del_device_store+0x421/0x640
[  537.472987][ T8025]  ? __pfx_del_device_store+0x10/0x10
[  537.478587][ T8025]  bus_attr_store+0x92/0xf0
[  537.483351][ T8025]  ? __pfx_bus_attr_store+0x10/0x10
[  537.488832][ T8025]  sysfs_kf_write+0x19a/0x250
[  537.493761][ T8025]  ? __pfx_sysfs_kf_write+0x10/0x10
[  537.499201][ T8025]  kernfs_fop_write_iter+0x525/0x910
[  537.504739][ T8025]  vfs_write+0xb34/0x1540
[  537.509284][ T8025]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  537.515367][ T8025]  ksys_write+0x240/0x4b0
[  537.519899][ T8025]  ? kmsan_get_metadata+0x13e/0x1c0
[  537.525332][ T8025]  __x64_sys_write+0x93/0xe0
[  537.530127][ T8025]  x64_sys_call+0x34de/0x3c80
[  537.535149][ T8025]  do_syscall_64+0xcd/0x1e0
[  537.539907][ T8025]  ? clear_bhb_loop+0x25/0x80
[  537.544795][ T8025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.550925][ T8025] RIP: 0033:0x7fde40d8bc1f
[  537.555533][ T8025] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  537.575396][ T8025] RSP: 002b:00007ffc96aac3b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  537.584037][ T8025] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fde40d8bc1f
[  537.592216][ T8025] RDX: 0000000000000001 RSI: 00007ffc96aac400 RDI: 0000000000000005
[  537.600408][ T8025] RBP: 00007fde40e0f4fd R08: 0000000000000000 R09: 00007ffc96aac207
[  537.608577][ T8025] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  537.616976][ T8025] R13: 00007ffc96aac400 R14: 00007fde41ad4620 R15: 0000000000000003
[  537.625201][ T8025]  </TASK>
[  537.628663][ T8025] Kernel Offset: disabled
[  537.633092][ T8025] Rebooting in 86400 seconds..