last executing test programs:

3m29.673537933s ago: executing program 4 (id=196):
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000380)="f2435f01000880e90000008508003f362b63b9e352514c31b456b7b0ededb4f08c9936a25e0bd6f0059c9bf5aa2cc739ff", 0x31, 0x1, &(0x7f0000000200)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

3m29.302438052s ago: executing program 4 (id=197):
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd}}]}}, 0x0)
syz_usb_connect$uac1(0x2, 0x7a, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x2c, 0x10, 0x7}}]}}, 0x0)
syz_emit_vhci(0x0, 0xf8)

3m28.665609323s ago: executing program 4 (id=202):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, 0x0, 0x4)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)='\'', 0x1}], 0x1}, 0x4)

3m16.819200613s ago: executing program 4 (id=208):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

3m16.657789678s ago: executing program 4 (id=214):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fanotify_init(0x0, 0x400)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
fallocate(r3, 0x0, 0x2dc2, 0xfffb)

3m15.75599663s ago: executing program 4 (id=221):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdab2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x12)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003cddcb00000000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)

3m0.701434799s ago: executing program 32 (id=221):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdab2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x12)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003cddcb00000000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)

2m15.613627012s ago: executing program 3 (id=280):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, 0x0, &(0x7f0000000900))
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x20}}], 0x1, 0x80)

1m57.277074333s ago: executing program 3 (id=294):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1m56.406756562s ago: executing program 3 (id=284):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="29eb01001800000500000000000000001000000003000000010000000000000e0200000001000000005f0099e41cf7b346167a6c8d79b8c58d1fc380784dc3fdf1a16ea41492ebf68ba3035d4b505337561d50100e1b725ed187ad2abaec18ca4a009fb5723b0373cd96f0e307e7c44de5f124083bc587f62d7e22172156af31efaf9d68891c764426d80db30cc58284259d9cec42d97d69c1fb7f"], 0x0, 0x2b, 0x0, 0x5}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYBLOB, @ANYRES32=0x0], 0x50)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1m55.425150048s ago: executing program 3 (id=285):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xb}}, 0x18)
ftruncate(r0, 0x3)

1m55.236946277s ago: executing program 3 (id=288):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)

1m44.708442045s ago: executing program 3 (id=300):
unshare(0x62040200)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e00)=@filter={'filter\x00', 0x2, 0x4, 0x4a0, 0xffffffff, 0x0, 0x0, 0x300, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x2, 0x3}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@rt={{0x138}, {0x7, [0x7, 0x6], 0x3, 0x8, 0x1, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast1, @private0, @mcast1, @mcast2, @local, @remote, @remote], 0x9}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, 0x0)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)

1m28.876486924s ago: executing program 33 (id=300):
unshare(0x62040200)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e00)=@filter={'filter\x00', 0x2, 0x4, 0x4a0, 0xffffffff, 0x0, 0x0, 0x300, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x2, 0x3}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@rt={{0x138}, {0x7, [0x7, 0x6], 0x3, 0x8, 0x1, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast1, @private0, @mcast1, @mcast2, @local, @remote, @remote], 0x9}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, 0x0)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)

6.254547132s ago: executing program 0 (id=639):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$eJzs3ctqFEscx/Ff9UySycmQ07kcDriMBnQjMW7EzQSZhxAXomZGCA4RTQR1YxQXIqJ7976CryC4UXwBXbnyAUYQWqq65pqe7jhkujP4/YChp7uq61/pS9V/wJQA/LWu1L++u/jd/jNSSSXp5WUpkPRCKkv6T/9XHuzu7+y3mo2U87QjRxXJKK5pDhXa3m0m1a3I1/BC+6msav8+TEYURVvfJO0VHQgK5Z7+BIE0559Od7ySe2Tpno5Z7+CY45g2pq22Hmqx6DgAAMXy43/gx/mqn78HgbTuh/0TOf6Pq110ABMXpR7tG/9dlhUZe33/dYd6+Z5L4ezxoJMlHqXlmaHPs4rvrIEJpsnKKl0swfztnVbz/PbdViPQM9W8vmKr7mcjvnU7MqJdS8hNUxyh7yZ5Rrng+jBj+7A5Iv6VMVscm/loPpvrJtRbNbrzv3Jk7GVyVyoculJx/Bujz+h6GdpS8q+NWq0WDBRZco2c8i14Gb2sJGck6txRSxr8giDMitPVWh6qFffuQkatlbjW1vxArc3OpxG1Vgfasr3p3s2j25s089pcNWv6ofeq983/AxvfulKfzN5TY9bjocD9xuP+zCY3V3bnDA+NHAe6Vh3c0/0tzo0K/Wf6Ow1DnqQce6VbuqTFvUeP75RareZ9u3EzYeNetbtn5rmUWKaAjUC9PTroHZpT/EXkoVqdQSnPUM8d6wnt+yOzsH3KcungibkTitiof8r3RipiI6d3FArVu+iZRT/kEhDy5uZdcf7Xl69suMme/RGmzNMzJ2T+jJGdY3czoMpA/WW39c8fZXALozO4o+Zcp89KZ7q7fkUZLYY+zukQpU39LFPXF93g+38AAAAAAAAAAAAAAAAAAIBpk8d/Jyi6jwAAAAAAAAAAAAAAAAAAAAAATLvu+r/qrP8rv/5vJX393+G//F2KV3g5lvV/3+yK9X+ByfsdAAD//y0Iis0=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20)

5.612557734s ago: executing program 6 (id=644):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000180))
chdir(&(0x7f00000003c0)='./bus\x00')
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

5.55234499s ago: executing program 6 (id=646):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x3ff, 0x4)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81})
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6)

5.327927192s ago: executing program 0 (id=649):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

5.326706072s ago: executing program 6 (id=651):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x7fff, 0x7, 0x80, 0x9, 0xad11}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)='\'', 0x1}], 0x1}, 0x4)

3.23582562s ago: executing program 5 (id=653):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1})
r5 = syz_open_dev$sndctrl(0x0, 0x2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r6, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0)
writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfb, 0x1a5, &(0x7f0000000600)="$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")
chdir(&(0x7f0000000040)='./file0\x00')

3.234577779s ago: executing program 0 (id=664):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000041ffffff000000000b00000007118d000000000095000f036b1c00001bdc87138a7767657cb8ad882f91d03ca5eab8d4c8aefc381b918c"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="29eb01001800000500000000000000001000000003000000010000000000000e0200000001000000005f0099e41cf7b346167a6c8d79b8c58d1fc380784dc3fdf1a16ea41492ebf68ba3035d4b505337561d50100e1b725ed187ad2abaec18ca4a009fb5723b0373cd96f0e307e7c44de5f124083bc587f62d7e22172156af31efaf9d68891c764426d80db30cc58284259d9cec42d97d69c1fb7f"], 0x0, 0x2b, 0x0, 0x5}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYBLOB, @ANYRES32=0x0], 0x50)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

3.233650439s ago: executing program 6 (id=655):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

2.338983596s ago: executing program 1 (id=661):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$eJzs3ctqFEscx/Ff9UySycmQ07kcDriMBnQjMW7EzQSZhxAXomZGCA4RTQR1YxQXIqJ7976CryC4UXwBXbnyAUYQWqq65pqe7jhkujP4/YChp7uq61/pS9V/wJQA/LWu1L++u/jd/jNSSSXp5WUpkPRCKkv6T/9XHuzu7+y3mo2U87QjRxXJKK5pDhXa3m0m1a3I1/BC+6msav8+TEYURVvfJO0VHQgK5Z7+BIE0559Od7ySe2Tpno5Z7+CY45g2pq22Hmqx6DgAAMXy43/gx/mqn78HgbTuh/0TOf6Pq110ABMXpR7tG/9dlhUZe33/dYd6+Z5L4ezxoJMlHqXlmaHPs4rvrIEJpsnKKl0swfztnVbz/PbdViPQM9W8vmKr7mcjvnU7MqJdS8hNUxyh7yZ5Rrng+jBj+7A5Iv6VMVscm/loPpvrJtRbNbrzv3Jk7GVyVyoculJx/Bujz+h6GdpS8q+NWq0WDBRZco2c8i14Gb2sJGck6txRSxr8giDMitPVWh6qFffuQkatlbjW1vxArc3OpxG1Vgfasr3p3s2j25s089pcNWv6ofeq983/AxvfulKfzN5TY9bjocD9xuP+zCY3V3bnDA+NHAe6Vh3c0/0tzo0K/Wf6Ow1DnqQce6VbuqTFvUeP75RareZ9u3EzYeNetbtn5rmUWKaAjUC9PTroHZpT/EXkoVqdQSnPUM8d6wnt+yOzsH3KcungibkTitiof8r3RipiI6d3FArVu+iZRT/kEhDy5uZdcf7Xl69suMme/RGmzNMzJ2T+jJGdY3czoMpA/WW39c8fZXALozO4o+Zcp89KZ7q7fkUZLYY+zukQpU39LFPXF93g+38AAAAAAAAAAAAAAAAAAIBpk8d/Jyi6jwAAAAAAAAAAAAAAAAAAAAAATLvu+r/qrP8rv/5vJX393+G//F2KV3g5lvV/3+yK9X+ByfsdAAD//y0Iis0=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20)

2.336996865s ago: executing program 6 (id=662):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)

2.335173185s ago: executing program 5 (id=663):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x3ff, 0x4)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81})
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6)

2.335093365s ago: executing program 0 (id=673):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1.98940281s ago: executing program 5 (id=666):
mkdirat(0xffffffffffffff9c, 0x0, 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000))

1.910322103s ago: executing program 6 (id=667):
r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x60002, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x4)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x7)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000580)=0xfc)

1.908796133s ago: executing program 0 (id=678):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)

1.887903478s ago: executing program 0 (id=668):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)={0x0, 0x0, 0x4, "a7212277"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.408847495s ago: executing program 1 (id=671):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}], 0x20}}], 0x1, 0x80)

1.408708805s ago: executing program 2 (id=672):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x7fff, 0x7, 0x80, 0x9, 0xad11}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r9, 0x3c}, 0x80, 0x0}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)='\'', 0x1}], 0x1}, 0x4)

1.209956702s ago: executing program 1 (id=674):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000041ffffff000000000b00000007118d000000000095000f036b1c00001bdc87138a7767657cb8ad882f91d03ca5eab8d4c8aefc381b918c"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="29eb01001800000500000000000000001000000003000000010000000000000e0200000001000000005f0099e41cf7b346167a6c8d79b8c58d1fc380784dc3fdf1a16ea41492ebf68ba3035d4b505337561d50100e1b725ed187ad2abaec18ca4a009fb5723b0373cd96f0e307e7c44de5f124083bc587f62d7e22172156af31efaf9d68891c764426d80db30cc58284259d9cec42d97d69c1fb7f"], 0x0, 0x2b, 0x0, 0x5}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYBLOB, @ANYRES32=0x0], 0x50)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1.181798235s ago: executing program 2 (id=675):
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000380)="f2435f01000880e90000008508003f362b63b9e352514c31b456b7b0ededb4f08c9936a25e0bd6f0059c9bf5aa2c", 0x2e, 0x1, &(0x7f0000000200)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

1.100305468s ago: executing program 5 (id=676):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

1.072803432s ago: executing program 2 (id=677):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x3ff, 0x4)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81})
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6)

1.06461683s ago: executing program 5 (id=679):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

731.084308ms ago: executing program 2 (id=680):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)

714.228455ms ago: executing program 5 (id=681):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x40)
ioctl$EVIOCGSW(r0, 0x8040451b, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20)
r5 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)

683.632998ms ago: executing program 2 (id=682):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x400, 0x83)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
sendfile(r0, r1, 0x0, 0x100000001)

613.582862ms ago: executing program 2 (id=683):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$eJzs3ctqFEscx/Ff9UySycmQ07kcDriMBnQjMW7EzQSZhxAXomZGCA4RTQR1YxQXIqJ7976CryC4UXwBXbnyAUYQWqq65pqe7jhkujP4/YChp7uq61/pS9V/wJQA/LWu1L++u/jd/jNSSSXp5WUpkPRCKkv6T/9XHuzu7+y3mo2U87QjRxXJKK5pDhXa3m0m1a3I1/BC+6msav8+TEYURVvfJO0VHQgK5Z7+BIE0559Od7ySe2Tpno5Z7+CY45g2pq22Hmqx6DgAAMXy43/gx/mqn78HgbTuh/0TOf6Pq110ABMXpR7tG/9dlhUZe33/dYd6+Z5L4ezxoJMlHqXlmaHPs4rvrIEJpsnKKl0swfztnVbz/PbdViPQM9W8vmKr7mcjvnU7MqJdS8hNUxyh7yZ5Rrng+jBj+7A5Iv6VMVscm/loPpvrJtRbNbrzv3Jk7GVyVyoculJx/Bujz+h6GdpS8q+NWq0WDBRZco2c8i14Gb2sJGck6txRSxr8giDMitPVWh6qFffuQkatlbjW1vxArc3OpxG1Vgfasr3p3s2j25s089pcNWv6ofeq983/AxvfulKfzN5TY9bjocD9xuP+zCY3V3bnDA+NHAe6Vh3c0/0tzo0K/Wf6Ow1DnqQce6VbuqTFvUeP75RareZ9u3EzYeNetbtn5rmUWKaAjUC9PTroHZpT/EXkoVqdQSnPUM8d6wnt+yOzsH3KcungibkTitiof8r3RipiI6d3FArVu+iZRT/kEhDy5uZdcf7Xl69suMme/RGmzNMzJ2T+jJGdY3czoMpA/WW39c8fZXALozO4o+Zcp89KZ7q7fkUZLYY+zukQpU39LFPXF93g+38AAAAAAAAAAAAAAAAAAIBpk8d/Jyi6jwAAAAAAAAAAAAAAAAAAAAAATLvu+r/qrP8rv/5vJX393+G//F2KV3g5lvV/3+yK9X+ByfsdAAD//y0Iis0=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20)

147.467432ms ago: executing program 1 (id=684):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f7433", 0xc8}], 0x1}}], 0x1, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)

35.385408ms ago: executing program 1 (id=685):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}], 0x20}}], 0x1, 0x80)

0s ago: executing program 1 (id=686):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x7fff, 0x7, 0x80, 0x9, 0xad11}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r9, 0x3c}, 0x80, 0x0}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)='\'', 0x1}], 0x1}, 0x4)

kernel console output (not intermixed with test programs):

480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.878224][ T4480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.883790][ T4335] Bluetooth: hci0: Malformed LE Event: 0x0d
[   30.946416][ T4492] process 'syz.0.15' launched '/dev/fd/3' with NULL argv: empty string added
[   31.354358][ T4335] Bluetooth: hci4: command 0x040f tx timeout
[   31.355445][ T4335] Bluetooth: hci3: command 0x040f tx timeout
[   31.356588][ T4335] Bluetooth: hci0: command 0x040f tx timeout
[   31.357633][ T4335] Bluetooth: hci1: command 0x040f tx timeout
[   31.358596][ T4335] Bluetooth: hci2: command 0x040f tx timeout
[   31.553007][ T4513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   31.566200][ T4513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.173432][ T4519] batman_adv: batadv0: Adding interface: dummy0
[   32.174649][ T4519] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.178878][ T4519] batman_adv: batadv0: Interface activated: dummy0
[   32.309040][ T4528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.311370][ T4528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.574542][ T4545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.29'.
[   32.846148][ T4548] hub 9-0:1.0: USB hub found
[   32.847362][ T4548] hub 9-0:1.0: 8 ports detected
[   32.925436][ T4545] Zero length message leads to an empty skb
[   32.950073][ T4550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.952096][ T4550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.012967][ T4552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.014813][ T4552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.157328][ T4562] batman_adv: batadv0: Interface deactivated: dummy0
[   33.158506][ T4562] batman_adv: batadv0: Removing interface: dummy0
[   33.434946][ T4332] Bluetooth: hci2: command 0x0419 tx timeout
[   33.434958][ T4335] Bluetooth: hci1: command 0x0419 tx timeout
[   33.436028][ T4332] Bluetooth: hci0: command 0x0419 tx timeout
[   33.437043][ T4335] Bluetooth: hci3: command 0x0419 tx timeout
[   33.437892][ T4332] Bluetooth: hci4: command 0x0419 tx timeout
[   33.771623][ T4597] device syzkaller0 entered promiscuous mode
[   35.654338][ T4374] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   35.834262][ T4374] usb 1-1: Using ep0 maxpacket: 32
[   35.837568][ T4374] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   35.839143][ T4374] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   35.842327][ T4374] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1201, bcdDevice=69.37
[   35.843646][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.845309][ T4374] usb 1-1: Product: syz
[   35.845960][ T4374] usb 1-1: Manufacturer: syz
[   35.846694][ T4374] usb 1-1: SerialNumber: syz
[   35.849778][ T4374] usb 1-1: config 0 descriptor??
[   36.062459][ T4374] usb 1-1: USB disconnect, device number 2
[   44.895045][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'.
[   45.035941][ T4616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.43'.
[   45.202413][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.203837][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.205710][ T4679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.211490][ T4679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.703419][ T4698] hub 9-0:1.0: USB hub found
[   45.703617][ T4698] hub 9-0:1.0: 8 ports detected
[   45.718184][ T4700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.719601][ T4700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.300552][ T4721] device syzkaller0 entered promiscuous mode
[   46.470128][ T4730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'.
[   46.647957][ T4728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.649663][ T4728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.782459][ T4753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.784459][ T4753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.127950][ T4756] hub 9-0:1.0: USB hub found
[   47.129548][ T4756] hub 9-0:1.0: 8 ports detected
[   47.192735][ T4370] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   47.227867][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.229436][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.374247][ T4370] usb 1-1: Using ep0 maxpacket: 32
[   47.376112][ T4370] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   47.377695][ T4370] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00
[   47.379205][ T4370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.381424][ T4370] usb 1-1: config 0 descriptor??
[   47.384812][ T4370] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   47.440404][ T4762] device syzkaller0 entered promiscuous mode
[   47.617729][ T4770] loop1: detected capacity change from 0 to 256
[   47.627112][ T4768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.76'.
[   47.639318][ T4768] device geneve2 entered promiscuous mode
[   47.642750][ T4770] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[   47.713613][ T4777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'.
[   48.092055][ T4779] device syzkaller0 entered promiscuous mode
[   48.250149][ T4806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.251939][ T4806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.551767][ T4813] loop2: detected capacity change from 0 to 8192
[   48.558991][ T4813] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   48.561481][ T4813] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[   48.562845][ T4813] REISERFS (device loop2): using ordered data mode
[   48.563838][ T4813] reiserfs: using flush barriers
[   48.565804][ T4813] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   48.568528][ T4813] REISERFS (device loop2): checking transaction log (loop2)
[   48.593536][ T4813] REISERFS (device loop2): Using tea hash to sort names
[   48.596157][ T4813] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   48.596215][ T4811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.599147][ T4811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.821399][ T4819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'.
[   48.842624][ T4821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.844189][ T4821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.952058][ T4822] hub 9-0:1.0: USB hub found
[   48.953208][ T4822] hub 9-0:1.0: 8 ports detected
[   49.312784][ T4824] loop1: detected capacity change from 0 to 40427
[   49.319890][ T4824] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   49.321185][ T4824] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   49.334444][ T4824] F2FS-fs (loop1): Found nat_bits in checkpoint
[   49.353576][ T4824] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   49.355619][ T4824] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   49.415965][ T4830] device syzkaller0 entered promiscuous mode
[   49.605894][ T4843] batman_adv: batadv0: Interface deactivated: dummy0
[   49.607382][ T4843] batman_adv: batadv0: Removing interface: dummy0
[   49.647655][ T4372] usb 1-1: USB disconnect, device number 3
[   49.666008][ T4845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.667445][ T4845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.992181][ T4848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.100'.
[   49.996227][ T4848] device geneve2 entered promiscuous mode
[   50.044052][ T4853] loop0: detected capacity change from 0 to 8192
[   50.062738][ T4853] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   50.065103][ T4853] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   50.066796][ T4853] REISERFS (device loop0): using ordered data mode
[   50.067947][ T4853] reiserfs: using flush barriers
[   50.069293][ T4853] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   50.071940][ T4853] REISERFS (device loop0): checking transaction log (loop0)
[   50.122363][ T4853] REISERFS (device loop0): Using tea hash to sort names
[   50.126049][ T4853] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   50.340882][ T4866] device syzkaller0 entered promiscuous mode
[   50.505943][ T4858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.507524][ T4858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.554880][ T4374] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   50.603340][ T4877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.607485][ T4877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.734172][ T4878] hub 9-0:1.0: USB hub found
[   50.735392][ T4878] hub 9-0:1.0: 8 ports detected
[   50.994244][ T4374] usb 1-1: Using ep0 maxpacket: 8
[   50.996388][ T4374] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   50.998102][ T4374] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   51.001477][ T4374] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[   51.002945][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.004392][ T4374] usb 1-1: Product: syz
[   51.005233][ T4374] usb 1-1: Manufacturer: syz
[   51.005978][ T4374] usb 1-1: SerialNumber: syz
[   51.008314][ T4374] usb 1-1: config 0 descriptor??
[   51.222974][ T4882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.225064][ T4882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.261001][ T3898] usb 1-1: USB disconnect, device number 4
[   51.412542][ T4887] loop1: detected capacity change from 0 to 8192
[   51.418975][ T4887] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   51.421133][ T4887] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   51.422651][ T4887] REISERFS (device loop1): using ordered data mode
[   51.423683][ T4887] reiserfs: using flush barriers
[   51.425175][ T4887] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   51.430073][ T4887] REISERFS (device loop1): checking transaction log (loop1)
[   51.500832][ T4887] REISERFS (device loop1): Using tea hash to sort names
[   51.502117][ T4887] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   51.610151][ T4895] device syzkaller0 entered promiscuous mode
[   51.818902][ T4374] libceph: connect (1)[c::]:6789 error -101
[   51.820079][ T4374] libceph: mon0 (1)[c::]:6789 connect error
[   51.821994][ T4374] libceph: connect (1)[c::]:6789 error -101
[   51.823364][ T4374] libceph: mon0 (1)[c::]:6789 connect error
[   51.920369][ T4907] ceph: No mds server is up or the cluster is laggy
[   52.146019][ T4917] hub 9-0:1.0: USB hub found
[   52.147221][ T4917] hub 9-0:1.0: 8 ports detected
[   52.285250][ T4374] libceph: connect (1)[c::]:6789 error -101
[   52.286262][ T4374] libceph: mon0 (1)[c::]:6789 connect error
[   52.634368][ T4374] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   52.663169][ T4927] loop2: detected capacity change from 0 to 2048
[   52.687165][ T4927] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[   52.689852][ T4929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.130'.
[   52.696287][ T4927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   52.707600][ T4927] Bluetooth: MGMT ver 1.22
[   52.800429][ T4939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.802410][ T4939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.809304][ T4330] Bluetooth: hci4: Malformed LE Event: 0x0d
[   52.814409][ T4374] usb 1-1: Using ep0 maxpacket: 32
[   52.816929][ T4374] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   52.818650][ T4374] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00
[   52.820146][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.822468][ T4374] usb 1-1: config 0 descriptor??
[   52.828443][ T4374] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   52.933211][ T4932] device syzkaller0 entered promiscuous mode
[   53.181629][ T4949] trusted_key: encrypted_key: insufficient parameters specified
[   53.519460][ T4952] loop3: detected capacity change from 0 to 256
[   53.542756][ T4952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.545544][ T4952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.714323][ T4330] Bluetooth: hci0: command 0x0c20 tx timeout
[   55.369370][   T24] usb 1-1: USB disconnect, device number 5
[   55.832966][ T4975] hub 9-0:1.0: USB hub found
[   55.834230][ T4975] hub 9-0:1.0: 8 ports detected
[   64.475668][ T2062] ieee802154 phy0 wpan0: encryption failed: -22
[   64.476779][ T2062] ieee802154 phy1 wpan1: encryption failed: -22
[   64.502258][ T4984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.143'.
[   64.893272][ T4989] hub 9-0:1.0: USB hub found
[   64.894281][ T4989] hub 9-0:1.0: 8 ports detected
[   64.921676][ T4981] loop4: detected capacity change from 0 to 40427
[   64.933378][ T4994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.942350][ T4994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.945283][ T4981] F2FS-fs (loop4): invalid crc value
[   64.948101][ T4330] Bluetooth: hci3: Malformed LE Event: 0x0d
[   64.951213][ T4981] F2FS-fs (loop4): Found nat_bits in checkpoint
[   64.978384][ T4981] F2FS-fs (loop4): Start checkpoint disabled!
[   64.989448][ T4981] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   65.026473][ T4449] kworker/u4:7: attempt to access beyond end of device
[   65.026473][ T4449] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   65.085600][ T5003] loop4: detected capacity change from 0 to 1024
[   65.093658][ T5003] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002]
[   65.095956][ T5003] System zones: 0-1, 3-36
[   65.099576][ T5003] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.148: bad orphan inode 134217728
[   65.102027][ T5003] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   65.116910][ T4322] EXT4-fs (loop4): unmounting filesystem.
[   65.138804][ T5008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.140353][ T5008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.254308][ T4374] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[   65.435236][ T5014] loop1: detected capacity change from 0 to 32768
[   65.437929][ T5014] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.153 (5014)
[   65.438378][ T4374] usb 1-1: LPM exit latency is zeroed, disabling LPM.
[   65.441919][ T4374] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   65.443591][ T4374] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   65.446535][ T5014] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   65.448117][ T5014] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[   65.449535][ T5014] BTRFS info (device loop1): enabling disk space caching
[   65.450575][ T5014] BTRFS info (device loop1): force clearing of disk cache
[   65.451629][ T5014] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   65.453029][ T5014] BTRFS info (device loop1): use zstd compression, level 3
[   65.454133][ T5014] BTRFS info (device loop1): disk space caching is enabled
[   65.463622][ T4374] usb 1-1: string descriptor 0 read error: -22
[   65.466575][ T4374] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[   65.468506][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.474694][ T4374] usb 1-1: config 0 descriptor??
[   65.496190][ T5023] device syzkaller0 entered promiscuous mode
[   65.502699][ T5014] BTRFS info (device loop1): enabling ssd optimizations
[   65.504642][ T5014] BTRFS info (device loop1): rebuilding free space tree
[   65.513214][ T5014] BTRFS info (device loop1): disabling free space tree
[   65.514282][ T5014] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   65.515775][ T5014] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   65.937488][ T4372] usb 1-1: USB disconnect, device number 6
[   65.940188][ T5040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'.
[   65.963406][ T5042] loop4: detected capacity change from 0 to 64
[   66.022982][ T5044] device syzkaller0 entered promiscuous mode
[   66.116440][ T5050] loop4: detected capacity change from 0 to 512
[   66.123284][ T5050] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   66.126062][ T5050] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   66.130216][ T5050] EXT4-fs (loop4): 1 truncate cleaned up
[   66.131219][ T5050] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   66.194737][ T4322] EXT4-fs (loop4): unmounting filesystem.
[   66.291278][ T4321] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   66.365498][ T5057] Cannot find add_set index 0 as target
[   66.384330][ T5057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.161'.
[   67.098085][ T5066] hub 9-0:1.0: USB hub found
[   67.100066][ T5066] hub 9-0:1.0: 8 ports detected
[   67.214146][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.216126][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.294276][   T14] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   67.475486][   T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   67.477361][   T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   67.478900][   T14] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[   67.480438][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.482867][   T14] usb 1-1: config 0 descriptor??
[   67.687295][ T4330] Bluetooth: hci2: Malformed LE Event: 0x0d
[   67.688667][   T14] usb 1-1: string descriptor 0 read error: -71
[   67.690233][   T14] usb 1-1: USB disconnect, device number 7
[   69.599070][   T22] cfg80211: failed to load regulatory.db
[   77.772127][ T5084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.168'.
[   77.873251][ T5094] loop1: detected capacity change from 0 to 8192
[   77.929956][ T5100] loop2: detected capacity change from 0 to 32768
[   77.945942][ T5100] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.173 (5100)
[   77.952645][ T5100] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   77.954342][ T5100] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   77.955749][ T5100] BTRFS info (device loop2): enabling disk space caching
[   77.956875][ T5100] BTRFS info (device loop2): force clearing of disk cache
[   77.958009][ T5100] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   77.959498][ T5100] BTRFS info (device loop2): use zstd compression, level 3
[   77.960613][ T5100] BTRFS info (device loop2): disk space caching is enabled
[   77.962369][ T5094] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   77.964103][ T5094] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   77.971442][ T5094] REISERFS (device loop1): using ordered data mode
[   77.974665][ T5094] reiserfs: using flush barriers
[   77.976682][ T5094] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   77.981192][ T5094] REISERFS (device loop1): checking transaction log (loop1)
[   78.047674][ T5100] BTRFS info (device loop2): enabling ssd optimizations
[   78.051446][ T5100] BTRFS info (device loop2): rebuilding free space tree
[   78.056521][ T5100] BTRFS info (device loop2): disabling free space tree
[   78.057659][ T5100] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   78.059170][ T5100] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   78.097104][ T5094] REISERFS (device loop1): Using tea hash to sort names
[   78.101984][ T5094] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   78.293524][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   78.489251][ T5102] loop3: detected capacity change from 0 to 32768
[   78.490962][ T5102] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.174 (5102)
[   78.493661][ T5102] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   78.496954][ T5102] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[   78.498355][ T5102] BTRFS info (device loop3): enabling ssd optimizations
[   78.499445][ T5102] BTRFS info (device loop3): not using ssd optimizations
[   78.500730][ T5102] BTRFS info (device loop3): turning off barriers
[   78.501720][ T5102] BTRFS info (device loop3): using free space tree
[   78.539191][ T4334] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   78.615982][ T5105] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop3 scanned by udevd (5105)
[   78.656770][ T5161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.658266][ T5161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.694437][   T24] usb 1-1: Using ep0 maxpacket: 32
[   78.697245][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   78.700373][   T24] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   78.702048][   T24] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   78.703367][   T24] usb 1-1: Product: syz
[   78.704051][   T24] usb 1-1: Manufacturer: syz
[   78.705027][   T24] usb 1-1: SerialNumber: syz
[   78.706814][   T24] usb 1-1: config 0 descriptor??
[   78.708036][ T5113] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   78.709642][   T24] hub 1-1:0.0: bad descriptor, ignoring hub
[   78.710583][   T24] hub: probe of 1-1:0.0 failed with error -5
[   78.790068][ T4324] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   78.959784][ T5168] hub 9-0:1.0: USB hub found
[   78.960935][ T5168] hub 9-0:1.0: 8 ports detected
[   79.199926][ T5171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.205100][ T5171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.210300][ T5171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.213154][ T5171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.244507][ T5154] usb 1-1: USB disconnect, device number 8
[   79.530232][ T5177] device syzkaller0 entered promiscuous mode
[   79.553907][ T5181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'.
[   79.614344][ T5154] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[   79.758106][ T5184] loop2: detected capacity change from 0 to 8192
[   79.762461][ T5184] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   79.765254][ T5184] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[   79.766703][ T5184] REISERFS (device loop2): using ordered data mode
[   79.767744][ T5184] reiserfs: using flush barriers
[   79.768892][ T5184] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   79.771559][ T5184] REISERFS (device loop2): checking transaction log (loop2)
[   79.806164][ T5154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[   79.809853][ T5154] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   79.811328][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   79.812706][ T5154] usb 1-1: Product: syz
[   79.813359][ T5154] usb 1-1: Manufacturer: syz
[   79.814137][ T5154] usb 1-1: SerialNumber: syz
[   79.817564][ T5154] usb 1-1: config 0 descriptor??
[   79.819960][ T5113] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   79.821753][ T5154] hub 1-1:0.0: bad descriptor, ignoring hub
[   79.824011][ T5184] REISERFS (device loop2): Using tea hash to sort names
[   79.824921][ T5154] hub: probe of 1-1:0.0 failed with error -5
[   79.825341][ T5184] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   80.134984][ T4481] usb 1-1: USB disconnect, device number 9
[   90.853258][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.861870][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.961867][ T5210] loop3: detected capacity change from 0 to 32768
[   90.964823][ T5210] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.192 (5210)
[   90.989003][ T5210] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   90.990576][ T5210] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   90.991861][ T5210] BTRFS info (device loop3): enabling disk space caching
[   90.992887][ T5210] BTRFS info (device loop3): force clearing of disk cache
[   90.993989][ T5210] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   90.995550][ T5210] BTRFS info (device loop3): use zstd compression, level 3
[   90.996600][ T5210] BTRFS info (device loop3): disk space caching is enabled
[   91.053381][ T5212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.193'.
[   91.062662][ T5212] device geneve2 entered promiscuous mode
[   91.174021][ T5210] BTRFS info (device loop3): enabling ssd optimizations
[   91.175729][ T5210] BTRFS info (device loop3): rebuilding free space tree
[   91.180736][ T5210] BTRFS info (device loop3): disabling free space tree
[   91.181941][ T5210] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   91.183478][ T5210] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   91.294537][ T5240] hub 9-0:1.0: USB hub found
[   91.295724][ T5240] hub 9-0:1.0: 8 ports detected
[   91.509179][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.512861][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.556386][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.558499][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.614564][ T5247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.615966][ T5247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.823870][ T5247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.825645][ T5247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.832047][ T5245] loop2: detected capacity change from 0 to 8192
[   91.861764][ T5245] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   91.863936][ T5245] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[   91.865899][ T5245] REISERFS (device loop2): using ordered data mode
[   91.896421][ T5245] reiserfs: using flush barriers
[   91.900347][ T5245] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   91.903071][ T5245] REISERFS (device loop2): checking transaction log (loop2)
[   91.905603][ T4334] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   91.941591][ T5245] REISERFS (device loop2): Using tea hash to sort names
[   91.942807][ T5245] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   92.126840][ T5257] device syzkaller0 entered promiscuous mode
[   92.245099][ T5262] hub 9-0:1.0: USB hub found
[   92.246232][ T5262] hub 9-0:1.0: 8 ports detected
[  103.912263][ T5264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.204'.
[  103.917914][ T5280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.206'.
[  104.022597][ T5290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.219'.
[  104.029911][ T5296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.030947][ T5293] tipc: Failed to remove unknown binding: 66,1,1/0:4287582536/4287582538
[  104.032861][ T5293] tipc: Failed to remove unknown binding: 66,1,1/0:4287582536/4287582538
[  104.053449][ T5296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.059360][ T5300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.060794][ T5300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.067598][ T5300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.075026][ T5300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.100293][ T5299] loop0: detected capacity change from 0 to 8192
[  104.102415][ T5299] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  104.104937][ T5299] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  104.106378][ T5299] REISERFS (device loop0): using ordered data mode
[  104.107349][ T5299] reiserfs: using flush barriers
[  104.108890][ T5299] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  104.111995][ T5299] REISERFS (device loop0): checking transaction log (loop0)
[  104.151820][ T5299] REISERFS (device loop0): Using tea hash to sort names
[  104.153299][ T5299] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  104.262270][ T5305] loop4: detected capacity change from 0 to 32768
[  104.264070][ T5305] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.214 (5305)
[  104.267813][ T5305] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  104.269519][ T5305] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[  104.270872][ T5305] BTRFS info (device loop4): enabling disk space caching
[  104.271953][ T5305] BTRFS info (device loop4): force clearing of disk cache
[  104.272996][ T5305] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  104.274626][ T5305] BTRFS info (device loop4): use zstd compression, level 3
[  104.275714][ T5305] BTRFS info (device loop4): disk space caching is enabled
[  104.286894][ T5305] BTRFS info (device loop4): enabling ssd optimizations
[  104.288259][ T5305] BTRFS info (device loop4): rebuilding free space tree
[  104.293287][ T5305] BTRFS info (device loop4): disabling free space tree
[  104.294476][ T5305] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  104.295998][ T5305] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  104.675946][ T5334] hub 9-0:1.0: USB hub found
[  104.676900][ T5334] hub 9-0:1.0: 8 ports detected
[  105.051459][ T4322] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  105.070490][ T5339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.087900][ T5339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.098307][ T5338] device syzkaller0 entered promiscuous mode
[  105.111343][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'.
[  105.155333][ T5345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'.
[  105.330187][ T5339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.331571][ T5339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.423835][ T5373] hub 9-0:1.0: USB hub found
[  106.423942][ T5373] hub 9-0:1.0: 8 ports detected
[  106.764027][ T5379] loop0: detected capacity change from 0 to 8192
[  106.771446][ T5379] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  106.773624][ T5379] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  106.777964][ T5379] REISERFS (device loop0): using ordered data mode
[  106.779079][ T5379] reiserfs: using flush barriers
[  106.780589][ T5379] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  106.783417][ T5379] REISERFS (device loop0): checking transaction log (loop0)
[  106.812153][ T5379] REISERFS (device loop0): Using tea hash to sort names
[  106.813422][ T5379] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  107.194321][ T5156] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  107.385440][ T5156] usb 1-1: descriptor type invalid, skip
[  107.387156][ T5156] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.388786][ T5156] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  107.391770][ T5156] usb 1-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de
[  107.393103][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.394447][ T5156] usb 1-1: Product: syz
[  107.395021][ T5156] usb 1-1: Manufacturer: syz
[  107.395684][ T5156] usb 1-1: SerialNumber: syz
[  107.399553][ T5156] usb 1-1: config 0 descriptor??
[  107.605171][ T4490] usb 1-1: USB disconnect, device number 10
[  117.140934][ T5354] device syzkaller0 entered promiscuous mode
[  117.197091][ T5394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.198518][ T5394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.201534][ T5394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.203039][ T5394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.434533][    T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  117.634298][    T7] usb 1-1: Using ep0 maxpacket: 32
[  117.636676][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.638225][    T7] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00
[  117.639666][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.642203][    T7] usb 1-1: config 0 descriptor??
[  117.645444][    T7] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  120.137256][ T4332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  120.138912][ T4332] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  120.140503][ T4332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  120.142400][ T4332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  120.144087][ T4332] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  120.148244][ T4332] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  120.177580][ T5156] usb 1-1: USB disconnect, device number 11
[  122.154301][ T4330] Bluetooth: hci5: command 0x0409 tx timeout
[  124.234233][ T4330] Bluetooth: hci5: command 0x041b tx timeout
[  125.914601][ T2062] ieee802154 phy0 wpan0: encryption failed: -22
[  125.915697][ T2062] ieee802154 phy1 wpan1: encryption failed: -22
[  126.314297][ T4330] Bluetooth: hci5: command 0x040f tx timeout
[  128.081855][ T5400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.234'.
[  128.084318][ T5405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.236'.
[  128.087009][ T5405] device geneve2 entered promiscuous mode
[  128.148596][ T5423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.150116][ T5423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.180289][ T5421] loop1: detected capacity change from 0 to 8192
[  128.187806][ T5421] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  128.189928][ T5421] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  128.191410][ T5421] REISERFS (device loop1): using ordered data mode
[  128.192400][ T5421] reiserfs: using flush barriers
[  128.200014][ T5421] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  128.202633][ T5421] REISERFS (device loop1): checking transaction log (loop1)
[  128.372667][ T5428] hub 9-0:1.0: USB hub found
[  128.373798][ T5428] hub 9-0:1.0: 8 ports detected
[  128.405195][ T4330] Bluetooth: hci5: command 0x0419 tx timeout
[  128.447360][ T5423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.585000][ T5423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.590209][ T5421] REISERFS (device loop1): Using tea hash to sort names
[  128.597035][ T5421] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  128.665901][ T5409] chnl_net:caif_netlink_parms(): no params data found
[  128.704013][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.706400][ T5409] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.708576][ T5409] device bridge_slave_0 entered promiscuous mode
[  128.711010][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.712338][ T5409] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.713946][ T5409] device bridge_slave_1 entered promiscuous mode
[  128.747040][ T5409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.749544][ T5409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.768181][ T5409] team0: Port device team_slave_0 added
[  128.818486][ T5409] team0: Port device team_slave_1 added
[  128.825089][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.826299][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.830247][ T5409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.832550][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.833563][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.838027][ T5409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.846325][ T5437] device syzkaller0 entered promiscuous mode
[  128.986766][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.988343][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.764483][ T5449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.766027][ T5449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.769858][ T5449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.771948][ T5449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.799993][ T5454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.801656][ T5454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.804394][ T5454] overlayfs: failed to resolve './file0': -2
[  139.966733][ T4443] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.005835][ T5409] device hsr_slave_0 entered promiscuous mode
[  140.044554][ T5409] device hsr_slave_1 entered promiscuous mode
[  140.084328][ T5409] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.085490][ T5409] Cannot create hsr debugfs directory
[  140.097095][ T5459] device syzkaller0 entered promiscuous mode
[  140.145277][ T4443] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.363203][ T5479] loop2: detected capacity change from 0 to 8192
[  140.366165][ T5479] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  140.368406][ T5479] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  140.370041][ T5479] REISERFS (device loop2): using ordered data mode
[  140.371111][ T5479] reiserfs: using flush barriers
[  140.372558][ T5479] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  140.375145][ T5479] REISERFS (device loop2): checking transaction log (loop2)
[  140.411415][ T5479] REISERFS (device loop2): Using tea hash to sort names
[  140.413316][ T5479] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  148.474325][ T4330] Bluetooth: hci2: command 0x0406 tx timeout
[  148.475375][ T4330] Bluetooth: hci0: command 0x0406 tx timeout
[  148.476282][ T4330] Bluetooth: hci3: command 0x0406 tx timeout
[  148.477222][ T4330] Bluetooth: hci4: command 0x0406 tx timeout
[  151.346258][ T4443] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.349171][ T5474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'.
[  151.350873][ T5477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.250'.
[  151.425268][ T4443] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.452719][ T5409] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  151.505762][ T5409] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  151.554306][ T5409] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  151.694936][ T5499] hub 9-0:1.0: USB hub found
[  151.696122][ T5499] hub 9-0:1.0: 8 ports detected
[  151.850673][ T5409] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  151.929317][ T5409] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.949040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  151.950591][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  151.960126][ T5409] 8021q: adding VLAN 0 to HW filter on device team0
[  151.963185][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  151.965181][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  151.967434][ T1658] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.968543][ T1658] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.973327][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  151.978777][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  151.980542][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  151.982100][ T1658] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.983235][ T1658] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.984816][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  152.145994][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  152.150355][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  152.152600][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  152.154751][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  152.158607][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  152.160318][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  152.165153][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  152.168963][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  152.171877][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  152.173270][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  152.176216][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  152.261392][ T5522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.262959][ T5522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.285645][ T5524] device syzkaller0 entered promiscuous mode
[  152.766906][ T5545] loop2: detected capacity change from 0 to 512
[  152.802956][ T5545] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  152.811543][ T5545] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  152.818048][ T5545] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  152.827536][ T4324] EXT4-fs (loop2): unmounting filesystem.
[  152.845309][ T5551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.846859][ T5551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.851123][ T5551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.852926][ T5551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.068335][ T5553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.069873][ T5553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.072159][ T5553] overlayfs: failed to resolve './file0': -2
[  153.395474][ T5555] loop2: detected capacity change from 0 to 8192
[  153.410482][ T5555] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  153.412715][ T5555] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  153.418401][ T5555] REISERFS (device loop2): using ordered data mode
[  153.420030][ T5555] reiserfs: using flush barriers
[  153.421470][ T5555] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  153.429793][ T5555] REISERFS (device loop2): checking transaction log (loop2)
[  153.482084][ T5555] REISERFS (device loop2): Using tea hash to sort names
[  153.483631][ T5555] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  163.682716][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  163.683981][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  163.700048][ T5409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.972002][ T5594] hub 9-0:1.0: USB hub found
[  163.973192][ T5594] hub 9-0:1.0: 8 ports detected
[  164.220283][ T5600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.224348][ T5600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.332837][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.335061][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  164.342614][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  164.346822][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.349225][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.350964][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.353986][ T5409] device veth0_vlan entered promiscuous mode
[  164.359038][ T5409] device veth1_vlan entered promiscuous mode
[  164.369301][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  164.370685][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  164.372106][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.373571][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.408240][ T5409] device veth0_macvtap entered promiscuous mode
[  164.411801][ T5409] device veth1_macvtap entered promiscuous mode
[  164.421477][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.423757][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.426681][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.428518][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.430042][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.432714][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.434816][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.436869][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.438503][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.440206][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.445726][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.479624][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  164.481258][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  164.482615][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  164.484177][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  164.487588][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.489207][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.490756][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.492363][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.493895][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.495991][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.497411][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.499019][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.500427][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.501795][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.504001][ T5409] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.507098][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  164.508888][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  164.511919][ T5409] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.513200][ T5409] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.518286][ T5409] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.519645][ T5409] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.574708][ T4489] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  164.619529][ T5623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.621567][ T5623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.623841][ T5623] overlayfs: failed to resolve './file0': -2
[  164.639502][ T5621] loop2: detected capacity change from 0 to 8192
[  164.650506][ T5621] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  164.652680][ T5621] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  164.659445][ T5621] REISERFS (device loop2): using ordered data mode
[  164.660428][ T5621] reiserfs: using flush barriers
[  164.662476][ T5621] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  164.668871][ T5621] REISERFS (device loop2): checking transaction log (loop2)
[  164.715167][ T5621] REISERFS (device loop2): Using tea hash to sort names
[  164.716516][ T5621] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  164.779995][ T4489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.781772][ T4489] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  164.783171][ T4489] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  164.796258][ T4489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.798493][ T4489] usb 1-1: config 0 descriptor??
[  164.882738][ T5631] device syzkaller0 entered promiscuous mode
[  164.970812][ T5067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.972060][ T5067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.973304][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  165.002449][ T5605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.004006][ T5605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.007535][ T4489] usb 1-1: string descriptor 0 read error: -71
[  165.009187][ T4489] usb 1-1: USB disconnect, device number 12
[  165.014032][ T5637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.018648][ T5637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.021930][ T5637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.023387][ T5637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.245168][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.246571][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.251104][ T4443] device hsr_slave_0 left promiscuous mode
[  176.265344][ T4443] device hsr_slave_1 left promiscuous mode
[  176.344345][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.345566][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.347135][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.348202][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.349522][ T4443] device bridge_slave_1 left promiscuous mode
[  176.351155][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.388144][ T4443] device bridge_slave_0 left promiscuous mode
[  176.389376][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.504890][ T4443] device veth1_macvtap left promiscuous mode
[  176.506111][ T4443] device veth0_macvtap left promiscuous mode
[  176.507095][ T4443] device veth1_vlan left promiscuous mode
[  176.507982][ T4443] device veth0_vlan left promiscuous mode
[  178.706313][ T4443] team0 (unregistering): Port device team_slave_1 removed
[  178.879424][ T4443] team0 (unregistering): Port device team_slave_0 removed
[  179.065101][ T4443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.295050][ T4443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.696119][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  180.698391][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  180.699809][ T4330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  180.701381][ T4330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  180.702984][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  180.707305][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.885926][ T4443] bond0 (unregistering): Released all slaves
[  181.178555][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  181.304674][ T5647] chnl_net:caif_netlink_parms(): no params data found
[  181.329204][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.330292][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.331833][ T5647] device bridge_slave_0 entered promiscuous mode
[  181.334434][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.335633][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.337077][ T5647] device bridge_slave_1 entered promiscuous mode
[  181.345119][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.347489][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.354975][ T5647] team0: Port device team_slave_0 added
[  181.356709][ T5647] team0: Port device team_slave_1 added
[  181.362941][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.364181][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.368376][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.370681][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.371791][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.382656][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.485763][ T5647] device hsr_slave_0 entered promiscuous mode
[  181.524508][ T5647] device hsr_slave_1 entered promiscuous mode
[  181.564295][ T5647] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.565525][ T5647] Cannot create hsr debugfs directory
[  181.706622][ T5647] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.908429][ T5647] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.996520][ T5647] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.076397][ T5647] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.441472][ T5647] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  182.465490][ T5647] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  182.696332][ T5647] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  182.714274][ T4332] Bluetooth: hci1: command 0x0409 tx timeout
[  182.776870][ T5647] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  182.886204][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.890417][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  182.892124][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  182.896108][ T5647] 8021q: adding VLAN 0 to HW filter on device team0
[  182.898759][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  182.900301][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  182.901638][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.902827][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.904404][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  182.947319][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  182.948923][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  182.950219][ T4699] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.951357][ T4699] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.953981][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  182.958701][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  182.961543][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  182.963828][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  182.965901][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  182.968500][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  182.970140][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  182.977041][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  182.978673][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  182.981362][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  182.982698][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  182.985523][ T5647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  183.083942][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.119209][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  183.120640][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  183.189512][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  183.191276][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  183.202329][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  183.203993][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  183.205777][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  183.207176][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  183.209564][ T5647] device veth0_vlan entered promiscuous mode
[  183.212937][ T5647] device veth1_vlan entered promiscuous mode
[  183.271746][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  183.273407][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  183.277700][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  183.279265][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  183.282334][ T5647] device veth0_macvtap entered promiscuous mode
[  183.284911][ T5647] device veth1_macvtap entered promiscuous mode
[  183.289521][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.291082][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.292624][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.294193][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.295792][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.297416][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.298898][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.300833][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.302231][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.303779][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.307198][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.308431][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  183.310004][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  183.311415][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  183.312849][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  183.366957][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.368535][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.370053][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.371631][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.373129][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.374759][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.376124][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.377642][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.379048][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.380625][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.382768][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.384364][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  183.385994][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  183.389870][ T5647] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.391147][ T5647] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.392476][ T5647] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.393799][ T5647] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.448759][ T5067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.452012][ T5067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.453505][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  183.460367][ T4699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.461591][ T4699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.462945][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  183.522585][ T5749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.524108][ T5749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.578153][ T5749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.579607][ T5749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.613086][ T5742] loop5: detected capacity change from 0 to 32768
[  183.619556][ T5742] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.237 (5742)
[  183.623311][ T5742] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  183.625120][ T5742] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  183.626549][ T5742] BTRFS info (device loop5): enabling disk space caching
[  183.626912][ T5744] device syzkaller0 entered promiscuous mode
[  183.627654][ T5742] BTRFS info (device loop5): force clearing of disk cache
[  183.629637][ T5742] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  183.631140][ T5742] BTRFS info (device loop5): use zstd compression, level 3
[  183.632232][ T5742] BTRFS info (device loop5): disk space caching is enabled
[  183.657877][ T5742] BTRFS info (device loop5): enabling ssd optimizations
[  183.659657][ T5742] BTRFS info (device loop5): rebuilding free space tree
[  183.662512][ T5742] BTRFS info (device loop5): disabling free space tree
[  183.663605][ T5742] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  183.665395][ T5742] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  184.384824][ T5647] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  184.408523][ T5775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.410070][ T5775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.417658][ T5775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.419919][ T5775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.919995][ T5783] hub 9-0:1.0: USB hub found
[  184.920988][ T5783] hub 9-0:1.0: 8 ports detected
[  184.960105][ T4332] Bluetooth: hci1: command 0x041b tx timeout
[  185.400957][ T5789] loop3: detected capacity change from 0 to 8192
[  185.431412][ T5789] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  185.433621][ T5789] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  185.438802][ T5789] REISERFS (device loop3): using ordered data mode
[  185.439850][ T5789] reiserfs: using flush barriers
[  185.445862][ T5789] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  185.454462][ T5789] REISERFS (device loop3): checking transaction log (loop3)
[  185.462718][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.465782][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.497014][ T5789] REISERFS (device loop3): Using tea hash to sort names
[  185.498375][ T5789] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  185.989848][ T5801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.996090][ T5801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.530989][ T5804] loop1: detected capacity change from 0 to 256
[  186.567408][ T5806] loop1: detected capacity change from 0 to 512
[  186.581187][ T5806] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  187.034464][ T4330] Bluetooth: hci1: command 0x040f tx timeout
[  187.355010][ T2062] ieee802154 phy0 wpan0: encryption failed: -22
[  187.356085][ T2062] ieee802154 phy1 wpan1: encryption failed: -22
[  187.490705][ T4321] EXT4-fs (loop1): unmounting filesystem.
[  189.114280][ T4330] Bluetooth: hci1: command 0x0419 tx timeout
[  196.093066][ T5832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.095009][ T5832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.177579][ T5845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.184430][ T5845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.188991][ T5845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.190411][ T5845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.420941][ T5858] hub 9-0:1.0: USB hub found
[  196.422092][ T5858] hub 9-0:1.0: 8 ports detected
[  196.768054][ T5863] loop1: detected capacity change from 0 to 8192
[  196.771964][ T5863] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  196.773975][ T5863] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  196.775617][ T5863] REISERFS (device loop1): using ordered data mode
[  196.776588][ T5863] reiserfs: using flush barriers
[  196.777697][ T5863] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  196.780301][ T5863] REISERFS (device loop1): checking transaction log (loop1)
[  196.802064][ T5863] REISERFS (device loop1): Using tea hash to sort names
[  196.803293][ T5863] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  196.905055][ T5866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.906776][ T5866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.959290][ T5868] loop5: detected capacity change from 0 to 256
[  197.003589][ T4443] device hsr_slave_0 left promiscuous mode
[  197.052628][ T5873] loop5: detected capacity change from 0 to 512
[  197.060098][ T4443] device hsr_slave_1 left promiscuous mode
[  197.114070][ T5873] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  197.124551][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.125756][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.127999][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.129242][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.130602][ T4443] device bridge_slave_1 left promiscuous mode
[  197.131583][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.215657][ T4443] device bridge_slave_0 left promiscuous mode
[  197.216793][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.625087][ T4443] device veth1_macvtap left promiscuous mode
[  197.626068][ T4443] device veth0_macvtap left promiscuous mode
[  197.627093][ T4443] device veth1_vlan left promiscuous mode
[  197.627987][ T4443] device veth0_vlan left promiscuous mode
[  197.981505][ T5647] EXT4-fs (loop5): unmounting filesystem.
[  199.756707][ T4443] team0 (unregistering): Port device team_slave_1 removed
[  199.926080][ T4443] team0 (unregistering): Port device team_slave_0 removed
[  200.085480][ T4443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.285180][ T4443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.816019][ T4443] bond0 (unregistering): Released all slaves
[  202.144541][ T5898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'.
[  202.160837][ T5903] netlink: 'syz.5.311': attribute type 1 has an invalid length.
[  202.162368][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.311'.
[  202.217099][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.218570][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.276184][ T5920] loop0: detected capacity change from 0 to 8192
[  202.287514][ T5920] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  202.289685][ T5920] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  202.291233][ T5920] REISERFS (device loop0): using ordered data mode
[  202.292275][ T5920] reiserfs: using flush barriers
[  202.303554][ T5920] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  202.313835][ T5920] REISERFS (device loop0): checking transaction log (loop0)
[  202.380211][ T5913] device syzkaller0 entered promiscuous mode
[  202.427931][ T5920] REISERFS (device loop0): Using tea hash to sort names
[  202.429325][ T5920] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  203.106960][   T24] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  203.295382][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.297027][   T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  203.298355][   T24] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  203.299734][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.302412][   T24] usb 1-1: config 0 descriptor??
[  203.508392][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.510023][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.512001][   T24] usb 1-1: string descriptor 0 read error: -71
[  203.513625][   T24] usb 1-1: USB disconnect, device number 13
[  204.044160][ T5964] loop0: detected capacity change from 0 to 256
[  204.279626][ T5969] hub 9-0:1.0: USB hub found
[  204.280791][ T5969] hub 9-0:1.0: 8 ports detected
[  211.984841][ T4330] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  211.986730][ T4330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  211.988289][ T4330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  211.990877][ T4330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  211.992291][ T4330] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  211.993474][ T4330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  212.330689][ T5984] hub 9-0:1.0: USB hub found
[  212.331916][ T5984] hub 9-0:1.0: 8 ports detected
[  214.074317][ T4332] Bluetooth: hci5: command 0x0409 tx timeout
[  214.255084][ T5986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.325'.
[  214.339439][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.340966][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.456421][ T6000] loop5: detected capacity change from 0 to 8192
[  214.553886][ T6000] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  214.557009][ T6000] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  214.757335][ T6000] REISERFS (device loop5): using ordered data mode
[  214.758566][ T6000] reiserfs: using flush barriers
[  214.769868][ T6000] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  214.780362][ T6000] REISERFS (device loop5): checking transaction log (loop5)
[  214.788283][ T5975] chnl_net:caif_netlink_parms(): no params data found
[  214.849131][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.850477][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.852302][ T5975] device bridge_slave_0 entered promiscuous mode
[  214.855936][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.857136][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.858757][ T5975] device bridge_slave_1 entered promiscuous mode
[  214.866435][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.869300][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.899350][ T5975] team0: Port device team_slave_0 added
[  214.902191][ T5975] team0: Port device team_slave_1 added
[  214.909202][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.910365][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.914698][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.917272][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.918391][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.922418][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.976014][ T5975] device hsr_slave_0 entered promiscuous mode
[  214.996050][ T6000] REISERFS (device loop5): Using tea hash to sort names
[  215.001056][ T6000] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  215.005376][ T5975] device hsr_slave_1 entered promiscuous mode
[  215.024976][ T5975] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.028478][ T5975] Cannot create hsr debugfs directory
[  215.034878][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.036475][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.041578][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.049934][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.165276][ T5975] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  215.195799][ T5975] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  215.267787][ T5975] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  215.357593][ T5975] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  215.530746][ T6063] hub 9-0:1.0: USB hub found
[  215.531978][ T6063] hub 9-0:1.0: 8 ports detected
[  215.741944][ T6061] device syzkaller0 entered promiscuous mode
[  215.751782][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.760426][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'.
[  216.074320][ T5340] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  216.154352][ T4332] Bluetooth: hci5: command 0x041b tx timeout
[  216.254311][ T5340] usb 1-1: Using ep0 maxpacket: 8
[  216.257476][ T5340] usb 1-1: config 6 has an invalid interface number: 2 but max is 0
[  216.258905][ T5340] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  216.260578][ T5340] usb 1-1: config 6 has no interface number 0
[  216.261474][ T5340] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  216.267206][ T5340] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  216.268493][ T5340] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  216.269823][ T5340] usb 1-1: Product: syz
[  216.270450][ T5340] usb 1-1: Manufacturer: syz
[  216.271165][ T5340] usb 1-1: SerialNumber: syz
[  216.274961][ T5340] hso 1-1:6.2: Failed to find INT IN ep
[  216.476769][ T5340] usb 1-1: USB disconnect, device number 14
[  217.025954][ T6080] loop2: detected capacity change from 0 to 8192
[  217.027995][ T6080] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  217.029979][ T6080] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  217.031426][ T6080] REISERFS (device loop2): using ordered data mode
[  217.032460][ T6080] reiserfs: using flush barriers
[  217.033559][ T6080] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  217.040303][ T6080] REISERFS (device loop2): checking transaction log (loop2)
[  217.081327][ T6080] REISERFS (device loop2): Using tea hash to sort names
[  217.082655][ T6080] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  218.234252][ T4332] Bluetooth: hci5: command 0x040f tx timeout
[  220.324264][ T4332] Bluetooth: hci5: command 0x0419 tx timeout
[  227.137396][ T6094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.138862][ T6094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.160441][ T5975] 8021q: adding VLAN 0 to HW filter on device team0
[  227.171804][ T6094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.173282][ T6094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.179196][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  227.180825][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  227.182347][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  227.183870][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  227.189164][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.190284][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.192729][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  227.201322][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  227.202894][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.203969][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.213467][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.351'.
[  227.229239][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  227.231089][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  227.232664][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  227.242737][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  227.250768][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  227.252476][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  227.254121][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  227.260383][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  227.261815][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  227.267167][ T5975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  227.269000][ T5975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  227.272460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  227.276148][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  227.279504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  227.281442][ T6110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.293629][ T6110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.531826][ T6123] hub 9-0:1.0: USB hub found
[  227.533054][ T6123] hub 9-0:1.0: 8 ports detected
[  228.017642][ T5067] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.102868][ T6136] loop5: detected capacity change from 0 to 16
[  228.232185][ T6136] erofs: (device loop5): mounted with root inode @ nid 36.
[  228.447725][ T5067] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.460549][ T6146] device syzkaller0 entered promiscuous mode
[  228.464346][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  228.465689][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  229.293082][ T6170] hub 9-0:1.0: USB hub found
[  229.294527][ T6170] hub 9-0:1.0: 8 ports detected
[  239.946129][ T5067] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.968920][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.011492][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'.
[  240.067358][ T6194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.075353][ T6194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.083804][ T6194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.086509][ T6195] overlayfs: failed to resolve './file0': -2
[  240.088373][ T6194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.109155][ T5067] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.116259][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.117686][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.198748][ T6203] Driver unsupported XDP return value 0 on prog  (id 1) dev N/A, expect packet loss!
[  240.222188][ T5975] device veth0_vlan entered promiscuous mode
[  240.234846][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  240.236587][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  240.238171][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  240.239699][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  240.242970][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  240.247872][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  240.250422][ T5975] device veth1_vlan entered promiscuous mode
[  240.281050][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  240.282574][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  240.284059][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  240.289581][ T1658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  240.295687][ T5975] device veth0_macvtap entered promiscuous mode
[  240.301705][ T5975] device veth1_macvtap entered promiscuous mode
[  240.337768][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.339557][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.341143][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.342890][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.348600][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.350210][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.351740][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.353469][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.355904][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.357662][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.360139][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.366738][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  240.368339][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  240.369765][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  240.371303][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  240.380935][ T6212] device syzkaller0 entered promiscuous mode
[  240.397133][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.398689][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.400267][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.401830][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.403423][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.411327][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.412703][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.414423][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.415893][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.417438][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.429002][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.451910][ T5975] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.453892][ T5975] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.648587][ T6219] hub 9-0:1.0: USB hub found
[  240.649802][ T6219] hub 9-0:1.0: 8 ports detected
[  240.712886][ T5975] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.714617][ T5975] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.721812][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  240.723443][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  241.145722][ T6236] loop2: detected capacity change from 0 to 256
[  248.804675][ T2062] ieee802154 phy0 wpan0: encryption failed: -22
[  248.805811][ T2062] ieee802154 phy1 wpan1: encryption failed: -22
[  251.958172][ T6248] overlayfs: failed to resolve './file0': -2
[  252.033383][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.034344][ T6238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.378'.
[  252.035002][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.087782][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.092353][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.097157][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.098554][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.163575][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.164898][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.173672][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  252.190538][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.191797][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.193112][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  252.234681][ T4478] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  252.405651][ T6281] loop6: detected capacity change from 0 to 512
[  252.426606][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.394'.
[  252.436543][ T4478] usb 1-1: unable to get BOS descriptor or descriptor too short
[  252.438220][ T4478] usb 1-1: not running at top speed; connect to a high speed hub
[  252.440210][ T4478] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.441884][ T4478] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  252.443441][ T4478] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  252.449330][ T6281] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  252.449622][ T4478] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  252.454095][ T4478] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  252.456466][ T4478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.457753][ T4478] usb 1-1: Product: syz
[  252.458386][ T4478] usb 1-1: Manufacturer: syz
[  252.459088][ T4478] usb 1-1: SerialNumber: syz
[  252.929659][ T4478] usb 1-1: 0:2 : does not exist
[  252.960690][ T4478] usb 1-1: USB disconnect, device number 15
[  253.058273][ T6302] loop5: detected capacity change from 0 to 256
[  253.060393][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.064165][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.186342][ T6254] udevd[6254]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  253.591406][ T6316] hub 9-0:1.0: USB hub found
[  253.592376][ T6316] hub 9-0:1.0: 8 ports detected
[  253.673509][ T5975] EXT4-fs (loop6): unmounting filesystem.
[  253.793465][ T6318] device syzkaller0 entered promiscuous mode
[  253.939804][ T6339] overlayfs: failed to resolve './file0': -2
[  253.971606][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.973165][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.529562][ T6348] loop1: detected capacity change from 0 to 256
[  264.875736][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.396'.
[  264.894692][ T6358] overlayfs: failed to resolve './file0': -2
[  264.902015][ T5067] device hsr_slave_0 left promiscuous mode
[  264.928188][ T6363] loop2: detected capacity change from 0 to 512
[  264.936481][ T5067] device hsr_slave_1 left promiscuous mode
[  264.939890][ T6365] netlink: 16 bytes leftover after parsing attributes in process `syz.5.404'.
[  264.989123][ T6363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  265.118328][ T5067] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.119549][ T5067] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.992007][ T6389] hub 9-0:1.0: USB hub found
[  265.994001][ T6389] hub 9-0:1.0: 8 ports detected
[  266.007396][   T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  266.011205][ T5067] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  266.015916][ T5067] batman_adv: batadv0: Removing interface: batadv_slave_1
[  266.021525][ T5067] device bridge_slave_1 left promiscuous mode
[  266.027553][ T5067] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.107246][ T5067] device bridge_slave_0 left promiscuous mode
[  266.108316][ T5067] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.153400][ T6404] loop6: detected capacity change from 0 to 2048
[  266.184272][   T24] usb 1-1: Using ep0 maxpacket: 8
[  266.186617][   T24] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  266.187904][   T24] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  266.189224][   T24] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  266.190654][   T24] usb 1-1: config 250 has no interface number 0
[  266.191591][   T24] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  266.200967][   T24] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  266.204034][   T24] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  266.220095][   T24] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  266.222134][   T24] usb 1-1: config 250 interface 228 has no altsetting 0
[  266.224463][ T4324] EXT4-fs (loop2): unmounting filesystem.
[  266.238020][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  266.240730][   T24] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  266.243334][   T24] usb 1-1: Product: syz
[  266.245752][   T24] usb 1-1: SerialNumber: syz
[  266.250723][   T24] hub 1-1:250.228: bad descriptor, ignoring hub
[  266.252325][   T24] hub: probe of 1-1:250.228 failed with error -5
[  266.274429][ T5067] device veth1_macvtap left promiscuous mode
[  266.275535][ T5067] device veth0_macvtap left promiscuous mode
[  266.276629][ T5067] device veth1_vlan left promiscuous mode
[  266.277593][ T5067] device veth0_vlan left promiscuous mode
[  266.755500][   T24] usb 1-1: reset high-speed USB device number 16 using dummy_hcd
[  267.455604][ T4478] usb 1-1: USB disconnect, device number 16
[  268.134271][ T4478] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  268.324243][ T4478] usb 1-1: Using ep0 maxpacket: 8
[  268.326361][ T4478] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.327915][ T4478] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  268.330791][ T4478] usb 1-1: New USB device found, idVendor=13d3, idProduct=3350, bcdDevice=b7.dc
[  268.332122][ T4478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.333382][ T4478] usb 1-1: Product: syz
[  268.334110][ T4478] usb 1-1: Manufacturer: syz
[  268.334961][ T4478] usb 1-1: SerialNumber: syz
[  268.337091][ T4478] usb 1-1: config 0 descriptor??
[  268.429073][ T5067] team0 (unregistering): Port device team_slave_1 removed
[  268.542012][ T5155] usb 1-1: USB disconnect, device number 17
[  268.596196][ T5067] team0 (unregistering): Port device team_slave_0 removed
[  268.764756][ T5067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.964786][ T5067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.495247][ T5067] bond0 (unregistering): Released all slaves
[  270.784648][ T6409] netlink: 48 bytes leftover after parsing attributes in process `syz.6.410'.
[  270.808577][ T6409] device team0 entered promiscuous mode
[  270.809546][ T6409] device team_slave_0 entered promiscuous mode
[  270.810562][ T6409] device team_slave_1 entered promiscuous mode
[  270.811684][ T6409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  270.833595][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.5.415'.
[  270.882404][ T6428] overlayfs: failed to resolve './file0': -2
[  270.932441][ T6439] loop0: detected capacity change from 0 to 512
[  271.013186][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.015612][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.034085][ T6445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.040125][ T6445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.483159][ T6454] hub 9-0:1.0: USB hub found
[  271.484420][ T6454] hub 9-0:1.0: 8 ports detected
[  271.610613][ T6445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.612276][ T6445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.622562][ T6439] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  273.271528][ T6468] loop5: detected capacity change from 0 to 32768
[  273.538900][ T6498] loop1: detected capacity change from 0 to 1024
[  273.589869][ T6468] XFS (loop5): Mounting V5 Filesystem
[  273.617340][ T6502] device syzkaller0 entered promiscuous mode
[  273.651414][ T4323] EXT4-fs (loop0): unmounting filesystem.
[  273.685276][ T6515] overlayfs: failed to resolve './file0': -2
[  273.697051][ T6468] XFS (loop5): Ending clean mount
[  273.702342][ T6468] XFS (loop5): Quotacheck needed: Please wait.
[  274.461648][ T6527] hub 9-0:1.0: USB hub found
[  274.462695][ T6527] hub 9-0:1.0: 8 ports detected
[  274.492449][ T6468] XFS (loop5): Quotacheck: Done.
[  274.534592][ T6535] loop6: detected capacity change from 0 to 256
[  274.549614][ T5647] XFS (loop5): Unmounting Filesystem
[  274.653912][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.717624][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.723040][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.724606][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.748358][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.753016][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.338216][ T6579] device syzkaller0 entered promiscuous mode
[  275.381373][ T6586] loop2: detected capacity change from 0 to 256
[  275.723904][ T6602] hub 9-0:1.0: USB hub found
[  275.725176][ T6602] hub 9-0:1.0: 8 ports detected
[  276.453673][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.471985][ T6628] loop0: detected capacity change from 0 to 256
[  276.476376][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.555026][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.557022][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.671337][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.672725][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.677066][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.679403][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.720633][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.468'.
[  277.747004][ T6665] hub 9-0:1.0: USB hub found
[  277.748130][ T6665] hub 9-0:1.0: 8 ports detected
[  278.066688][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.5.480'.
[  278.071163][ T6676] loop0: detected capacity change from 0 to 512
[  278.180399][ T6676] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  278.535426][ T4330] Bluetooth: hci5: ACL packet for unknown connection handle 2419
[  278.736942][ T6700] overlayfs: failed to resolve './file0': -2
[  279.201463][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.203156][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.253964][ T4323] EXT4-fs (loop0): unmounting filesystem.
[  279.413006][ T6719] hub 9-0:1.0: USB hub found
[  279.414146][ T6719] hub 9-0:1.0: 8 ports detected
[  280.076832][ T6725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.495'.
[  280.102421][ T6731] netlink: 48 bytes leftover after parsing attributes in process `syz.0.496'.
[  280.146282][ T6735] overlayfs: failed to resolve './file0': -2
[  280.273487][ T6749] loop6: detected capacity change from 0 to 512
[  280.718672][ T6749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  281.366306][ T5975] EXT4-fs (loop6): unmounting filesystem.
[  281.401590][ T6774] netlink: 28 bytes leftover after parsing attributes in process `syz.5.511'.
[  281.421509][ T6756] loop1: detected capacity change from 0 to 32768
[  281.423296][ T6756] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.509 (6756)
[  281.427095][ T6756] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  281.428771][ T6756] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  281.430264][ T6756] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  281.431716][ T6756] BTRFS info (device loop1): use zstd compression, level 3
[  281.432813][ T6756] BTRFS info (device loop1): using free space tree
[  281.728084][ T6778] hub 9-0:1.0: USB hub found
[  281.729082][ T6778] hub 9-0:1.0: 8 ports detected
[  281.762780][ T6782] netlink: 48 bytes leftover after parsing attributes in process `syz.2.513'.
[  281.799944][ T6796] overlayfs: failed to resolve './file0': -2
[  281.829227][ T6756] BTRFS info (device loop1): enabling ssd optimizations
[  281.866781][ T4321] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  281.869386][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.870905][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.874924][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.878730][ T6806] loop5: detected capacity change from 0 to 256
[  281.882424][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.476820][ T6828] device syzkaller0 entered promiscuous mode
[  282.498973][ T6824] loop6: detected capacity change from 0 to 512
[  282.529675][ T6824] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  282.627406][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.524'.
[  283.147083][ T6841] netlink: 48 bytes leftover after parsing attributes in process `syz.2.525'.
[  283.159941][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.171093][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.191617][ T6847] loop2: detected capacity change from 0 to 256
[  283.440890][ T5975] EXT4-fs (loop6): unmounting filesystem.
[  283.884165][ T6860] hub 9-0:1.0: USB hub found
[  283.885087][ T6860] hub 9-0:1.0: 8 ports detected
[  283.982143][ T4375] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  283.992865][ T4375] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  284.009407][ T6872] device syzkaller0 entered promiscuous mode
[  284.038642][ T6875] netlink: 48 bytes leftover after parsing attributes in process `syz.1.539'.
[  284.043101][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.6.535'.
[  284.061687][ T6878] loop1: detected capacity change from 0 to 256
[  284.067938][ T6868] loop2: detected capacity change from 0 to 4096
[  284.082712][ T6868] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  284.100123][ T4324] EXT4-fs (loop2): unmounting filesystem.
[  284.169885][ T6879] fido_id[6879]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  284.192502][ T6888] loop1: detected capacity change from 0 to 512
[  284.208858][ T6888] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  284.652794][ T6898] overlayfs: missing 'lowerdir'
[  284.661133][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.667967][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.797829][ T6908] netlink: 48 bytes leftover after parsing attributes in process `syz.2.550'.
[  284.835894][   T39] Bluetooth: hci4: Frame reassembly failed (-90)
[  284.847954][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'.
[  285.000464][ T6916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.003214][ T6916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.131257][ T4321] EXT4-fs (loop1): unmounting filesystem.
[  285.460926][ T6928] hub 9-0:1.0: USB hub found
[  285.462098][ T6928] hub 9-0:1.0: 8 ports detected
[  285.695477][ T6929] device syzkaller0 entered promiscuous mode
[  285.757109][ T6933] overlayfs: missing 'lowerdir'
[  285.849106][ T6945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.850710][ T6945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.853053][ T6945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.855321][ T6945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.021782][ T6963] netlink: 48 bytes leftover after parsing attributes in process `syz.5.561'.
[  286.072243][ T6945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.073794][ T6945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.080896][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.6.562'.
[  286.131595][ T6971] loop5: detected capacity change from 0 to 512
[  286.151325][ T6971] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  286.155004][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.163610][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.874313][ T4330] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  286.874464][ T4332] Bluetooth: hci4: command 0x1003 tx timeout
[  286.989165][ T7024] overlayfs: missing 'lowerdir'
[  287.048702][ T7031] device syzkaller0 entered promiscuous mode
[  287.092131][ T5647] EXT4-fs (loop5): unmounting filesystem.
[  287.432709][ T7047] hub 9-0:1.0: USB hub found
[  287.433852][ T7047] hub 9-0:1.0: 8 ports detected
[  287.710433][ T7050] netlink: 32 bytes leftover after parsing attributes in process `syz.6.575'.
[  287.762111][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'.
[  287.901665][ T7058] batman_adv: batadv0: Adding interface: dummy0
[  287.902726][ T7058] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.934568][ T7058] batman_adv: batadv0: Interface activated: dummy0
[  288.008483][ T7058] net_ratelimit: 30 callbacks suppressed
[  288.008496][ T7058] batadv0: mtu less than device minimum
[  288.011974][ T7058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  288.015194][ T7058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  288.018322][ T7058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  288.021256][ T7058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  288.024170][ T7058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  288.027094][ T7058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  288.030018][ T7058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  288.032930][ T7058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  288.035881][ T7058] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  288.204520][ T7084] overlayfs: missing 'lowerdir'
[  288.521727][ T7088] loop1: detected capacity change from 0 to 512
[  288.568896][ T7088] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  288.680178][ T7097] device syzkaller0 entered promiscuous mode
[  289.052955][ T7101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.588'.
[  289.061153][ T7106] netlink: 32 bytes leftover after parsing attributes in process `syz.6.587'.
[  289.106097][ T7109] loop6: detected capacity change from 0 to 1024
[  289.107738][ T7109] =======================================================
[  289.107738][ T7109] WARNING: The mand mount option has been deprecated and
[  289.107738][ T7109]          and is ignored by this kernel. Remove the mand
[  289.107738][ T7109]          option from the mount to silence this warning.
[  289.107738][ T7109] =======================================================
[  289.113347][ T7109] EXT4-fs: inline encryption not supported
[  289.117161][ T7109] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  289.146689][ T7109] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  289.207723][ T5975] EXT4-fs (loop6): unmounting filesystem.
[  289.337968][ T7132] overlayfs: missing 'lowerdir'
[  289.403698][ T7137] overlayfs: missing 'lowerdir'
[  289.974233][ T7143] hub 9-0:1.0: USB hub found
[  289.975768][ T7143] hub 9-0:1.0: 8 ports detected
[  290.074529][ T4330] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  290.254044][ T4321] EXT4-fs (loop1): unmounting filesystem.
[  290.293258][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.6.599'.
[  290.314865][ T7155] netlink: 32 bytes leftover after parsing attributes in process `syz.2.600'.
[  290.463240][ T7164] device syzkaller0 entered promiscuous mode
[  290.506814][ T7134] loop5: detected capacity change from 0 to 40427
[  290.517359][ T7134] F2FS-fs (loop5): invalid crc value
[  290.520406][ T7134] F2FS-fs (loop5): Found nat_bits in checkpoint
[  290.570645][ T7134] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  290.651348][ T7181] overlayfs: missing 'lowerdir'
[  290.724517][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.725998][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.731830][ T7186] overlayfs: missing 'lowerdir'
[  290.759362][ T7188] loop2: detected capacity change from 0 to 512
[  290.808177][ T7190] loop6: detected capacity change from 0 to 4096
[  290.811030][ T7188] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  290.849678][ T7190] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  291.317066][ T5975] ntfs3: loop6: ntfs_evict_inode r=3 failed, -22.
[  291.320517][ T5975] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  291.324865][ T5975] ntfs3: loop6: ntfs_set_state r=3 failed, -22.
[  291.422147][ T7201] loop6: detected capacity change from 0 to 512
[  291.449530][ T4443] Bluetooth: hci4: Frame reassembly failed (-90)
[  291.450126][ T7201] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.621: invalid indirect mapped block 4294967295 (level 1)
[  291.457455][ T7201] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.621: invalid indirect mapped block 4294967295 (level 1)
[  291.463113][ T7201] EXT4-fs (loop6): 2 truncates cleaned up
[  291.464654][ T7201] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  291.701879][ T7205] hub 9-0:1.0: USB hub found
[  291.703059][ T7205] hub 9-0:1.0: 8 ports detected
[  291.787361][ T5975] EXT4-fs (loop6): unmounting filesystem.
[  291.851947][ T4324] EXT4-fs (loop2): unmounting filesystem.
[  291.892106][ T7210] netlink: 32 bytes leftover after parsing attributes in process `syz.6.613'.
[  291.893713][ T7212] netlink: 28 bytes leftover after parsing attributes in process `syz.5.614'.
[  292.230122][ T7219] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  292.231613][ T7219] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  292.300813][ T7223] device syzkaller0 entered promiscuous mode
[  292.383908][ T7229] overlayfs: missing 'lowerdir'
[  292.410008][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.411939][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.587730][ T7233] loop0: detected capacity change from 0 to 512
[  292.604798][ T7233] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  293.057834][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'.
[  293.086239][ T7244] device syzkaller0 entered promiscuous mode
[  293.145389][ T7246] tipc: Started in network mode
[  293.146451][ T7246] tipc: Node identity 9e129663182d, cluster identity 4711
[  293.147910][ T7246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.150174][ T7243] tipc: Resetting bearer <eth:syzkaller0>
[  293.196710][ T7243] tipc: Disabling bearer <eth:syzkaller0>
[  293.515229][ T4335] Bluetooth: hci4: command 0x1003 tx timeout
[  293.516623][ T4330] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  293.601704][ T4323] EXT4-fs (loop0): unmounting filesystem.
[  293.647869][ T7258] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  293.649322][ T7258] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  293.662623][ T7260] netlink: 32 bytes leftover after parsing attributes in process `syz.5.630'.
[  293.711640][ T7264] device syzkaller0 entered promiscuous mode
[  293.751789][ T7268] overlayfs: missing 'lowerdir'
[  294.097603][ T7272] hub 9-0:1.0: USB hub found
[  294.098525][ T7272] hub 9-0:1.0: 8 ports detected
[  294.286025][ T7283] loop2: detected capacity change from 0 to 512
[  294.297526][ T7283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  294.574301][ T7291] loop0: detected capacity change from 0 to 64
[  294.650084][ T7294] device syzkaller0 entered promiscuous mode
[  294.970762][ T7294] tipc: Started in network mode
[  294.971743][ T7294] tipc: Node identity b667751b7cc6, cluster identity 4711
[  294.973212][ T7294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.980120][ T7292] tipc: Resetting bearer <eth:syzkaller0>
[  295.035386][ T7292] tipc: Disabling bearer <eth:syzkaller0>
[  295.129235][ T7297] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  295.130845][ T7297] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  295.178319][ T7303] overlayfs: missing 'lowerdir'
[  295.186442][ T7302] netlink: 32 bytes leftover after parsing attributes in process `syz.5.643'.
[  295.255927][ T4324] EXT4-fs (loop2): unmounting filesystem.
[  295.441928][ T6137] Bluetooth: hci4: Frame reassembly failed (-90)
[  295.442936][ T7313] Bluetooth: hci4: Frame reassembly failed (-84)
[  295.445361][ T7313] Bluetooth: hci4: Frame reassembly failed (-84)
[  295.445745][ T5067] kworker/u4:10: attempt to access beyond end of device
[  295.445745][ T5067] loop0: rw=1, sector=65, nr_sectors = 1 limit=64
[  295.446723][ T7313] Bluetooth: hci4: Frame reassembly failed (-84)
[  295.448599][ T5067] Buffer I/O error on dev loop0, logical block 65, lost async page write
[  295.450900][ T5067] kworker/u4:10: attempt to access beyond end of device
[  295.450900][ T5067] loop0: rw=1, sector=66, nr_sectors = 1 limit=64
[  295.478099][ T5067] Buffer I/O error on dev loop0, logical block 66, lost async page write
[  295.479712][ T5067] kworker/u4:10: attempt to access beyond end of device
[  295.479712][ T5067] loop0: rw=1, sector=67, nr_sectors = 1 limit=64
[  295.481732][ T5067] Buffer I/O error on dev loop0, logical block 67, lost async page write
[  295.483012][ T5067] kworker/u4:10: attempt to access beyond end of device
[  295.483012][ T5067] loop0: rw=1, sector=68, nr_sectors = 1 limit=64
[  295.499960][ T5067] Buffer I/O error on dev loop0, logical block 68, lost async page write
[  295.501424][ T5067] kworker/u4:10: attempt to access beyond end of device
[  295.501424][ T5067] loop0: rw=1, sector=72, nr_sectors = 1 limit=64
[  295.503446][ T5067] Buffer I/O error on dev loop0, logical block 72, lost async page write
[  295.511041][ T5067] kworker/u4:10: attempt to access beyond end of device
[  295.511041][ T5067] loop0: rw=1, sector=73, nr_sectors = 1 limit=64
[  295.513123][ T5067] Buffer I/O error on dev loop0, logical block 73, lost async page write
[  295.521055][ T5067] kworker/u4:10: attempt to access beyond end of device
[  295.521055][ T5067] loop0: rw=1, sector=76, nr_sectors = 1 limit=64
[  295.523189][ T5067] Buffer I/O error on dev loop0, logical block 76, lost async page write
[  295.524120][ T7323] device syzkaller0 entered promiscuous mode
[  295.526555][ T5067] kworker/u4:10: attempt to access beyond end of device
[  295.526555][ T5067] loop0: rw=1, sector=77, nr_sectors = 1 limit=64
[  295.558178][ T5067] Buffer I/O error on dev loop0, logical block 77, lost async page write
[  295.562002][ T5067] kworker/u4:10: attempt to access beyond end of device
[  295.562002][ T5067] loop0: rw=1, sector=78, nr_sectors = 2776 limit=64
[  295.567010][ T5067] kworker/u4:10: attempt to access beyond end of device
[  295.567010][ T5067] loop0: rw=1, sector=2854, nr_sectors = 1312 limit=64
[  295.569962][ T5067] Buffer I/O error on dev loop0, logical block 4166, lost async page write
[  295.571306][ T5067] Buffer I/O error on dev loop0, logical block 4167, lost async page write
[  295.906954][ T7329] hub 9-0:1.0: USB hub found
[  295.908183][ T7329] hub 9-0:1.0: 8 ports detected
[  297.514292][ T4332] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  297.514303][ T4335] Bluetooth: hci4: command 0x1003 tx timeout
[  297.580260][ T7337] overlayfs: missing 'lowerdir'
[  297.597040][ T7339] device syzkaller0 entered promiscuous mode
[  297.604774][ T7338] device syzkaller0 entered promiscuous mode
[  297.615978][ T7343] overlayfs: missing 'lowerdir'
[  297.966981][ T7350] hub 9-0:1.0: USB hub found
[  297.968663][ T7350] hub 9-0:1.0: 8 ports detected
[  298.266736][ T7338] tipc: Started in network mode
[  298.267582][ T7338] tipc: Node identity 9a9921b47284, cluster identity 4711
[  298.269080][ T7338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.270959][ T7353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.658'.
[  298.273517][ T7333] tipc: Resetting bearer <eth:syzkaller0>
[  298.315837][ T7333] tipc: Disabling bearer <eth:syzkaller0>
[  298.333657][ T7357] loop2: detected capacity change from 0 to 512
[  298.360336][ T7357] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  298.477287][ T7362] loop1: detected capacity change from 0 to 64
[  298.799011][ T7364] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  298.800464][ T7364] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  299.269372][ T4370] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  299.272665][ T4324] EXT4-fs (loop2): unmounting filesystem.
[  299.310575][ T7384] overlayfs: missing 'lowerdir'
[  299.367540][ T7388] device syzkaller0 entered promiscuous mode
[  299.454267][ T4370] usb 1-1: Using ep0 maxpacket: 16
[  299.474570][ T4370] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  299.476314][ T4370] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  299.487449][ T4370] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  299.488879][ T4370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.490145][ T4370] usb 1-1: Product: syz
[  299.490793][ T4370] usb 1-1: Manufacturer: syz
[  299.491488][ T4370] usb 1-1: SerialNumber: syz
[  299.507732][ T4370] r8152-cfgselector 1-1: config 0 descriptor??
[  299.574870][ T7390] netlink: 32 bytes leftover after parsing attributes in process `syz.1.671'.
[  299.711997][ T4370] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  299.718542][ T7397] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  299.981318][ T7402] hub 9-0:1.0: USB hub found
[  299.982695][ T7402] hub 9-0:1.0: 8 ports detected
[  300.034925][ T4449] usb 1-1: config 0 descriptor??
[  300.051882][ T4449] usb 1-1: can't set config #0, error -71
[  300.051932][ T5152] usb 1-1: USB disconnect, device number 18
[  300.060774][ T7403] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  300.066908][ T7403] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  300.098281][ T7407] loop5: detected capacity change from 0 to 512
[  300.122173][ T7409] overlayfs: missing 'lowerdir'
[  300.139726][ T7407] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  300.152891][ T7413] loop2: detected capacity change from 0 to 64
[  300.781257][ T7419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.685'.
[  300.828219][ T7421] device syzkaller0 entered promiscuous mode
[  300.960217][ T7413] 
[  300.960625][ T7413] ============================================
[  300.961543][ T7413] WARNING: possible recursive locking detected
[  300.962435][ T7413] syzkaller #0 Not tainted
[  300.963092][ T7413] --------------------------------------------
[  300.964097][ T7413] syz.2.683/7413 is trying to acquire lock:
[  300.964930][ T7413] ffff0000d1baa0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x148/0x1c8
[  300.966446][ T7413] 
[  300.966446][ T7413] but task is already holding lock:
[  300.967597][ T7413] ffff0000d1baa0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x148/0x1c8
[  300.969133][ T7413] 
[  300.969133][ T7413] other info that might help us debug this:
[  300.970341][ T7413]  Possible unsafe locking scenario:
[  300.970341][ T7413] 
[  300.971420][ T7413]        CPU0
[  300.971903][ T7413]        ----
[  300.972443][ T7413]   lock(&tree->tree_lock#2/1);
[  300.973115][ T7413]   lock(&tree->tree_lock#2/1);
[  300.973857][ T7413] 
[  300.973857][ T7413]  *** DEADLOCK ***
[  300.973857][ T7413] 
[  300.975041][ T7413]  May be due to missing lock nesting notation
[  300.975041][ T7413] 
[  300.976224][ T7413] 6 locks held by syz.2.683/7413:
[  300.977021][ T7413]  #0: ffff0000ddf4cfe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x114/0x16c
[  300.978401][ T7413]  #1: ffff0000db702460 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x244/0x7f0
[  300.979795][ T7413]  #2: ffff0000d2ebca28 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: generic_file_write_iter+0x84/0x2b0
[  300.981659][ T7413]  #3: ffff0000d2ebc878 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xe4/0x1094
[  300.983400][ T7413]  #4: ffff0000d1baa0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x148/0x1c8
[  300.984910][ T7413]  #5: ffff0000d2ebb4f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xe4/0x1094
[  300.986636][ T7413] 
[  300.986636][ T7413] stack backtrace:
[  300.987511][ T7413] CPU: 1 PID: 7413 Comm: syz.2.683 Not tainted syzkaller #0
[  300.988576][ T7413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[  300.990056][ T7413] Call trace:
[  300.990546][ T7413]  dump_backtrace+0x1c0/0x1ec
[  300.991263][ T7413]  show_stack+0x2c/0x3c
[  300.991906][ T7413]  __dump_stack+0x30/0x40
[  300.992569][ T7413]  dump_stack_lvl+0xf4/0x15c
[  300.993266][ T7413]  dump_stack+0x1c/0x5c
[  300.993896][ T7413]  __lock_acquire+0x15cc/0x6800
[  300.994597][ T7413]  lock_acquire+0x20c/0x63c
[  300.995273][ T7413]  __mutex_lock_common+0x190/0x1f60
[  300.996034][ T7413]  mutex_lock_nested+0x38/0x44
[  300.996736][ T7413]  hfs_find_init+0x148/0x1c8
[  300.997371][ T7413]  hfs_extend_file+0x28c/0x1094
[  300.998109][ T7413]  hfs_bmap_reserve+0xd4/0x3e0
[  300.998763][ T7413]  __hfs_ext_write_extent+0x198/0x484
[  300.999532][ T7413]  __hfs_ext_cache_extent+0x84/0x74c
[  301.000337][ T7413]  hfs_extend_file+0x2d0/0x1094
[  301.001010][ T7413]  hfs_get_block+0x324/0xa3c
[  301.001689][ T7413]  __block_write_begin_int+0x350/0x1388
[  301.002529][ T7413]  cont_write_begin+0x53c/0x780
[  301.003289][ T7413]  hfs_write_begin+0x98/0xe4
[  301.003990][ T7413]  generic_perform_write+0x234/0x4f4
[  301.004751][ T7413]  __generic_file_write_iter+0x130/0x250
[  301.005611][ T7413]  generic_file_write_iter+0xb4/0x2b0
[  301.006423][ T7413]  vfs_write+0x3ec/0x7f0
[  301.007035][ T7413]  ksys_write+0x12c/0x224
[  301.007689][ T7413]  __arm64_sys_write+0x7c/0x90
[  301.008380][ T7413]  invoke_syscall+0x98/0x2b4
[  301.009089][ T7413]  el0_svc_common+0x138/0x258
[  301.009785][ T7413]  do_el0_svc+0x58/0x130
[  301.010414][ T7413]  el0_svc+0x58/0x128
[  301.011004][ T7413]  el0t_64_sync_handler+0x84/0xf0
[  301.011702][ T7413]  el0t_64_sync+0x18c/0x190
[  301.034237][ T4330] Bluetooth: hci4: command 0x1003 tx timeout
[  301.034286][ T4332] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  301.073284][ T5647] EXT4-fs (loop5): unmounting filesystem.
[  305.274515][ T7351] bio_check_eod: 535 callbacks suppressed
[  305.274526][ T7351] kworker/u4:14: attempt to access beyond end of device
[  305.274526][ T7351] loop2: rw=1048577, sector=65, nr_sectors = 1 limit=64
[  305.277385][ T7351] buffer_io_error: 484 callbacks suppressed
[  305.277398][ T7351] Buffer I/O error on dev loop2, logical block 65, lost async page write
[  305.279506][ T7351] kworker/u4:14: attempt to access beyond end of device
[  305.279506][ T7351] loop2: rw=1048577, sector=66, nr_sectors = 1 limit=64
[  305.281606][ T7351] Buffer I/O error on dev loop2, logical block 66, lost async page write
[  305.282854][ T7351] kworker/u4:14: attempt to access beyond end of device
[  305.282854][ T7351] loop2: rw=1048577, sector=67, nr_sectors = 1 limit=64
[  305.286325][ T7351] Buffer I/O error on dev loop2, logical block 67, lost async page write
[  305.287543][ T7351] kworker/u4:14: attempt to access beyond end of device
[  305.287543][ T7351] loop2: rw=1048577, sector=68, nr_sectors = 1 limit=64
[  305.289652][ T7351] Buffer I/O error on dev loop2, logical block 68, lost async page write
[  305.290961][ T7351] kworker/u4:14: attempt to access beyond end of device
[  305.290961][ T7351] loop2: rw=1048577, sector=72, nr_sectors = 1 limit=64
[  305.292934][ T7351] Buffer I/O error on dev loop2, logical block 72, lost async page write
[  305.294275][ T7351] kworker/u4:14: attempt to access beyond end of device
[  305.294275][ T7351] loop2: rw=1048577, sector=73, nr_sectors = 1 limit=64
[  305.296283][ T7351] Buffer I/O error on dev loop2, logical block 73, lost async page write
[  305.297508][ T7351] kworker/u4:14: attempt to access beyond end of device
[  305.297508][ T7351] loop2: rw=1048577, sector=76, nr_sectors = 1 limit=64
[  305.299573][ T7351] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  305.300887][ T7351] kworker/u4:14: attempt to access beyond end of device
[  305.300887][ T7351] loop2: rw=1048577, sector=77, nr_sectors = 1 limit=64
[  305.302894][ T7351] Buffer I/O error on dev loop2, logical block 77, lost async page write
[  305.307413][ T7351] kworker/u4:14: attempt to access beyond end of device
[  305.307413][ T7351] loop2: rw=1048577, sector=78, nr_sectors = 4088 limit=64
[  305.310811][ T7351] kworker/u4:14: attempt to access beyond end of device
[  305.310811][ T7351] loop2: rw=1048577, sector=4166, nr_sectors = 1 limit=64
[  305.312729][ T7351] Buffer I/O error on dev loop2, logical block 4166, lost async page write
[  305.314003][ T7351] Buffer I/O error on dev loop2, logical block 4167, lost async page write
[  307.194320][ T4332] Bluetooth: hci1: command 0x0406 tx timeout
[  310.234911][ T2062] ieee802154 phy0 wpan0: encryption failed: -22
[  310.236076][ T2062] ieee802154 phy1 wpan1: encryption failed: -22